chipsec

CHIPSEC: Platform Security Assessment Framework CHIPSEC is a framework for analyzing the security of PC platforms including hardware, system firmware BIOS/UEFI, and platform components. It includes a security test suite, tools for accessing various low level interfaces, and forensic capabilities...

CVE-2025-32433

Working PoC for CVE-2025-32433 Blog post: https://platformsecurity.com/blog/CVE-2025-32433-poc...

Apple-Platform-Security-Guides

Apple Platform Security Guides Every Apple Platform Security Guide Older iOS Security Guides & older OS X/ macOS Whitepapers Official Apple Document revision history Date| macOS| iOS| watchOS| Comments ---|---|---|---|--- Fall 2019| 10.15.2| 13.3| 6.1.1| Spring 2020| 10.15.4| 13.4| 6.2| February...

Oracle Business Intelligence Publisher (October 2026 CPU)

The 8.2.0.0.0, 12.2.1.4.0 and 26.01.0.0.0 versions of Oracle Business Intelligence Publisher installed on the remote host are affected by multiple vulnerabilities as referenced in the October 2026 CPU advisory. - Vulnerability in the Oracle BI Publisher product of Oracle Analytics component: BI...

EUVD-2026-106791

Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics component: BI Platform Security. The supported version that is affected is 12.2.1.4.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...

EUVD-2026-106792

Vulnerability in the Oracle BI Publisher product of Oracle Analytics component: BI Platform Security. Supported versions that are affected are 8.2.0.0.0, 12.2.1.4.0 and 26.01.0.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle ...

EUVD-2026-106796

Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics component: Platform Security. Supported versions that are affected are 8.2.0.0.0 and 26.01.0.0.0. Difficult to exploit vulnerability allows unauthenticated attacker with access to the physical...

EUVD-2026-106773

Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics component: Platform Security. Supported versions that are affected are 8.2.0.0.0 and 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where...

EUVD-2026-106763

Vulnerability in the Oracle BI Publisher product of Oracle Analytics component: BI Platform Security. The supported version that is affected is 12.2.1.4.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTPS to compromise Oracle BI Publisher. Successful...

CVE-2026-91579

Vulnerability in the Oracle BI Publisher product of Oracle Analytics component: BI Platform Security. Supported versions that are affected are 8.2.0.0.0, 12.2.1.4.0 and 26.01.0.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle ...

CVE-2026-91597

Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics component: Platform Security. Supported versions that are affected are 8.2.0.0.0 and 26.01.0.0.0. Difficult to exploit vulnerability allows unauthenticated attacker with access to the physical...

CVE-2026-91577

Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics component: BI Platform Security. The supported version that is affected is 12.2.1.4.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...

CVE-2026-91545

Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics component: Platform Security. Supported versions that are affected are 8.2.0.0.0 and 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where...

CVE-2026-91528

Vulnerability in the Oracle BI Publisher product of Oracle Analytics component: BI Platform Security. The supported version that is affected is 12.2.1.4.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTPS to compromise Oracle BI Publisher. Successful...

CVE-2026-91597

A vulnerability exists in the Platform Security component of Oracle Business Intelligence Enterprise Edition (part of Oracle Analytics) in versions 8.2.0.0.0 and 26.01.0.0.0 . An unauthenticated attacker with access to the physical communication segment attached to the hardware can exploit this d...

CVE-2026-91579

A vulnerability exists in the Oracle BI Publisher product of Oracle Analytics, specifically within the BI Platform Security component. Affected versions include 8.2.0.0.0 , 12.2.1.4.0 , and 26.01.0.0.0 . An unauthenticated attacker with network access via HTTP can exploit this vulnerability to co...

CVE-2026-91577

A vulnerability exists in the BI Platform Security component of Oracle Business Intelligence Enterprise Edition (affected version 12.2.1.4.0 ) within the Oracle Analytics suite. A low-privileged attacker with network access via HTTP can exploit this flaw to compromise the system. Successful explo...

CVE-2026-91545

A vulnerability exists in the Platform Security component of Oracle Business Intelligence Enterprise Edition (Oracle Analytics), specifically affecting versions 8.2.0.0.0 and 12.2.1.4.0 . An unauthenticated attacker with infrastructure access can exploit this flaw to compromise the product, poten...

CVE-2026-91528

A vulnerability exists in the BI Platform Security component of the Oracle BI Publisher product within Oracle Analytics, specifically affecting version 12.2.1.4.0 . A low-privileged attacker with network access via HTTPS can exploit this flaw to gain unauthorized read access to a subset of access...

PT-2026-120050

Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics component: Platform Security. Supported versions that are affected are 8.2.0.0.0 and 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where...