217 matches found
PXEThief
PXEThief PXEThief is a set of tooling that implements attack paths discussed at the DEF CON 30 talk Pulling Passwords out of Configuration Manager https://forum.defcon.org/node/241925 against the Operating System Deployment functionality in Microsoft Endpoint Configuration Manager or ConfigMgr,...
ipxe
iPXE 네트워크 부트로더 iPXE는 선도적인 오픈 소스 네트워크 부트 펌웨어입니다. 다음과 같은 추가 기능으로 강화된 완전한 PXE 구현을 제공합니다: HTTP 또는 HTTPS를 통한 웹 서버 부팅, iSCSI, FCoE 또는 AoE SAN 부팅, 스크립트를 통한 부팅 프로세스 제어, 대화형 양식 및 메뉴 생성. iPXE를 사용하여 네트워크 카드의 기존 PXE ROM을 교체하거나, 리플래싱의 번거로움 없이 iPXE를 체인로드하여 iPXE 기능을 얻을 수 있습니다. iPXE는 GNU GPL 일부는 GPL 호환 라이선스 하에...
bitlocker-bypass-research
BitLocker バイパス研究 個人セキュリティ研究プロジェクト — CVE-2023-21563 BitPixie を使用した BitLocker フルディスク暗号化のバイパス。 これは何か 2025年10月、私はBitLockerが有効な企業ノートパソコンに対して物理的なラップトップ復旧評価を実施しました。従業員がパスワードを忘れ、回復キーも利用できませんでした。既知の脆弱性（CVE-2023-21563）を使用して、メモリからボリュームマスターキーを抽出し、BitLockerをバイパスして、システムへの完全なアクセスを復旧しました。 使用したもの CVE-2023-21563 —...
Linux Distros Unpatched Vulnerability : CVE-2026-56115
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Bootimus through 0.1.70 contains a broken access control vulnerability that allows authenticated low- privileged users to perform administrative actions by...
USN-8421-1 ironic vulnerabilities
Dmitry Tantsur and Tuomo Tanskanen discovered that Ironic did not properly validate file paths when handling ISO images. A privileged authenticated remote user could use this issue to perform path traversal via a crafted ISO image and overwrite arbitrary files on the Ironic conductor...
USN-8421-1: Ironic vulnerabilities
Dmitry Tantsur and Tuomo Tanskanen discovered that Ironic did not properly validate file paths when handling ISO images. A privileged authenticated remote user could use this issue to perform path traversal via a crafted ISO image and overwrite arbitrary files on the Ironic conductor...
CVE-2026-44917
OpenStack Ironic before 35.0.2 allows a malicious authenticated project admin or manager to read local files on the Ironic conductor via a pxetemplate...
CVE-2026-44917
OpenStack Ironic before 35.0.2 allows a malicious authenticated project admin or manager to read local files on the Ironic conductor via a pxetemplate...
CVE-2026-44917
OpenStack Ironic before 35.0.2 allows a malicious authenticated project admin or manager to read local files on the Ironic conductor via a pxetemplate...
CVE-2026-44917
OpenStack Ironic before 35.0.2 allows a malicious authenticated project admin or manager to read local files on the Ironic conductor via a pxetemplate...
EUVD-2026-34202
OpenStack Ironic before 35.0.2 allows a malicious authenticated project admin or manager to read local files on the Ironic conductor via a pxetemplate...
CVE-2026-44917
OpenStack Ironic before 35.0.2 allows a malicious authenticated project admin or manager to read local files on the Ironic conductor via a pxetemplate...
CVE-2026-44917
OpenStack Ironic before 35.0.2 allows a malicious authenticated project admin or manager to read local files on the Ironic conductor via a pxetemplate...
OpenStack Ironic 安全漏洞
OpenStack Ironic is an integrated OpenStack application. It is used to configure bare machines rather than virtual machines. Versions of OpenStack Ironic prior to 35.0.2 contained a security vulnerability. This vulnerability stemmed from allowing malicious project administrators or managers to re...
CVE-2025-62877 Harvest may expose OS default ssh login password via SUSE Virtualization Interactive Installer
Projects using the SUSE Virtualization Harvester environment may expose the OS default ssh login password if they are using the 1.5.x or 1.6.x interactive installer to either create a new cluster or add new hosts to an existing cluster. The environment is not affected if the PXE boot mechanism is...
CVE-2025-62877
CVE-2025-62877 affects SUSE Virtualization (Harvester) where the interactive installer on Harvester 1.5.x–1.6.x may expose the OS default SSH password when creating a new cluster or adding hosts. The issue does not occur when PXE boot with the Harvester configuration is used. Affected component i...
CVE-2025-62877 Harvest may expose OS default ssh login password via SUSE Virtualization Interactive Installer
Projects using the SUSE Virtualization Harvester environment may expose the OS default ssh login password if they are using the 1.5.x or 1.6.x interactive installer to either create a new cluster or add new hosts to an existing cluster. The environment is not affected if the PXE boot mechanism is...
EUVD-2007-3858
Malware in sbrugna...