217 matches found
ipxe
Bootloader réseau iPXE iPXE est le principal firmware de démarrage réseau open source. Il fournit une implémentation PXE complète, enrichie de fonctionnalités supplémentaires telles que : le démarrage depuis un serveur web via HTTP ou HTTPS, le démarrage depuis un SAN iSCSI, FCoE ou AoE, le...
PXEThief
PXEThief PXEThief هي مجموعة من الأدوات التي تنفذ مسارات الهجوم التي تمت مناقشتها في محاضرة DEF CON 30 بعنوان Pulling Passwords out of Configuration Manager https://forum.defcon.org/node/241925 ضد وظيفة نشر نظام التشغيل في Microsoft Endpoint Configuration Manager أو ConfigMgr، التي لا تزال تُعرف...
bitlocker-bypass-research
بحث تجاوز BitLocker مشروع بحث أمني شخصي — تجاوز تشفير القرص الكامل BitLocker باستخدام CVE-2023-21563 BitPixie. ما هذا؟ في أكتوبر 2025، أجريت تقييمًا ماديًا لاستعادة جهاز كمبيوتر محمول خاص بشركة مع تمكين BitLocker. نسي الموظف كلمة المرور الخاصة به ولم يكن مفتاح الاسترداد متاحًا. استخدمت ثغرة أمنية...
Linux Distros Unpatched Vulnerability : CVE-2026-56115
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Bootimus through 0.1.70 contains a broken access control vulnerability that allows authenticated low- privileged users to perform administrative actions by...
USN-8421-1: Ironic vulnerabilities
Dmitry Tantsur and Tuomo Tanskanen discovered that Ironic did not properly validate file paths when handling ISO images. A privileged authenticated remote user could use this issue to perform path traversal via a crafted ISO image and overwrite arbitrary files on the Ironic conductor...
USN-8421-1 ironic vulnerabilities
Dmitry Tantsur and Tuomo Tanskanen discovered that Ironic did not properly validate file paths when handling ISO images. A privileged authenticated remote user could use this issue to perform path traversal via a crafted ISO image and overwrite arbitrary files on the Ironic conductor...
CVE-2026-44917
OpenStack Ironic before 35.0.2 allows a malicious authenticated project admin or manager to read local files on the Ironic conductor via a pxetemplate...
CVE-2026-44917
OpenStack Ironic before 35.0.2 allows a malicious authenticated project admin or manager to read local files on the Ironic conductor via a pxetemplate...
CVE-2026-44917
OpenStack Ironic before 35.0.2 allows a malicious authenticated project admin or manager to read local files on the Ironic conductor via a pxetemplate...
CVE-2026-44917
OpenStack Ironic before 35.0.2 allows a malicious authenticated project admin or manager to read local files on the Ironic conductor via a pxetemplate...
EUVD-2026-34202
OpenStack Ironic before 35.0.2 allows a malicious authenticated project admin or manager to read local files on the Ironic conductor via a pxetemplate...
CVE-2026-44917
OpenStack Ironic before 35.0.2 allows a malicious authenticated project admin or manager to read local files on the Ironic conductor via a pxetemplate...
CVE-2026-44917
OpenStack Ironic before 35.0.2 allows a malicious authenticated project admin or manager to read local files on the Ironic conductor via a pxetemplate...
OpenStack Ironic 安全漏洞
OpenStack Ironic is an integrated OpenStack application. It is used to configure bare machines rather than virtual machines. Versions of OpenStack Ironic prior to 35.0.2 contained a security vulnerability. This vulnerability stemmed from allowing malicious project administrators or managers to re...
CVE-2025-62877 Harvest may expose OS default ssh login password via SUSE Virtualization Interactive Installer
Projects using the SUSE Virtualization Harvester environment may expose the OS default ssh login password if they are using the 1.5.x or 1.6.x interactive installer to either create a new cluster or add new hosts to an existing cluster. The environment is not affected if the PXE boot mechanism is...
CVE-2025-62877
CVE-2025-62877 affects SUSE Virtualization (Harvester) where the interactive installer on Harvester 1.5.x–1.6.x may expose the OS default SSH password when creating a new cluster or adding hosts. The issue does not occur when PXE boot with the Harvester configuration is used. Affected component i...
CVE-2025-62877 Harvest may expose OS default ssh login password via SUSE Virtualization Interactive Installer
Projects using the SUSE Virtualization Harvester environment may expose the OS default ssh login password if they are using the 1.5.x or 1.6.x interactive installer to either create a new cluster or add new hosts to an existing cluster. The environment is not affected if the PXE boot mechanism is...
EUVD-2020-24555
Malware in sbrugna...