skitter-creek-bath-salts

skitter-creek-bath-salts DRAM 스크램블링으로 CPU의모든 것 을 잠금 해제 — PSP, C6, 마이크로코드, SMM, 그리고 명세서가 빠뜨린 다른 모든 것. &x == &x. 보통은. DRAM 컨트롤러를 건드리면 주소가 메모리 내 원하는 위치에 도달하도록 만들 수 있다. skitter-creek-bath-salts는 메모리 계층의 최하위 레이어를 수정하여 물리적 DRAM 주소 변환을 재배선한다. 이는 플랫폼 메모리를 스크램블하여 커널조차 볼 수 없는 DRAM의 보호된 영역 — carveout — 을...

smm_usbrt_poc

UsbRt SMM 권한 상승 이것은 CVE-2017-5721 취약점의 익스플로잇을 시연하는 개념 증명 코드입니다. 이 PoC는 Machine Check Exception이 발생하여 시스템을 완전히 정지시킵니다. 필요한 것은 CHIPSEC Framework가 설치되어 있어야 합니다. 또한 Intel 장치를 사용하는 경우 /etc/default/grub에 GRUBCMDLINELINUXDEFAULT="quiet splash acpi=off"를 추가하는 것을 잊지 마세요. 사용 예시: root@kitploit: sudo python...

CVE-2026-81627

A flaw in QEMU 's VAPIC setup hypercall (hw/i386/vapic.c) fails to validate that the writable RAM alias remains within the option ROM window. A privileged guest user on a Q35/KVM machine can position this alias over locked SMRAM , bypassing chipset D_LCK protection and injecting code into System ...

Platbox

Platbox Инструмент для оценки безопасности UEFI и SMM Возможности Platbox — это инструмент, помогающий оценить безопасность платформы: Выводит регистры платформы, важные с точки зрения безопасности Блокировки Flash Блокировки MMIO и ремаппинга Базовый адрес SMM и блокировки MSR Чтение/запись в...

SmmBackdoor

SMM backdoor for UEFI based platforms !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!! 이것은 중단된 레거시 프로젝트입니다. 최신 버전의 백도어는 SMM Backdoor Next Gen 프로젝트 페이지와 해당 문서를 확인하십시오: https://github.com/Cr4sh/SmmBackdoorNg !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!! 이 프로젝트에 ...

SmmExploit

SmmExploit 이 문서는 ASUS UX360CA BIOS 버전 303의 커널에서 SMM으로의 로컬 권한 상승 취약점인 CVE-2021-26943에 대한 보고서이자 익스플로잇입니다. 이 문제는 버전 304에서 수정되었습니다. 문제 설명 요약 UX360CA BIOS 버전 303에는 ring0 권한을 가진 공격자가 SMRAM을 포함한 거의 임의의 물리 메모리를 덮어쓰고 SMM에서 임의 코드를 실행할 수 있게 하는 3개의 취약한 모듈이 있습니다. 해당 모듈은 다음과 같이 식별할 수 있습니다: 이름| GUID| SHA256...

microcode_ctl security, bug fix, and enhancement update

An update is available for microcodectl. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The microcodectl packages provide microcode updates for Intel and AMD...

microcode_ctl security, bug fix, and enhancement update

An update is available for microcodectl. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The microcodectl packages provide microcode updates for Intel and AMD...

AlmaLinux 9 : microcode_ctl (ALSA-2026:68011)

The remote AlmaLinux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the ALSA-2026:68011 advisory. kernel: hypervisor: Intel Processors: Privilege escalation in Ring 0 via improper value handling CVE-2025-35973 kernel: microcodectl: Intel Xeon 6...

RockyLinux 9 : microcode_ctl (RLSA-2026:68011)

The remote RockyLinux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the RLSA-2026:68011 advisory. kernel: hypervisor: Intel Processors: Privilege escalation in Ring 0 via improper value handling CVE-2025-35973 kernel: microcodectl: Intel Xeon 6...

RockyLinux 10 : microcode_ctl (RLSA-2026:67979)

The remote RockyLinux 10 host has a package installed that is affected by multiple vulnerabilities as referenced in the RLSA-2026:67979 advisory. kernel: hypervisor: Intel Processors: Privilege escalation in Ring 0 via improper value handling CVE-2025-35973 kernel: microcodectl: Intel Xeon 6...

AlmaLinux 10 : microcode_ctl (ALSA-2026:67979)

The remote AlmaLinux 10 host has a package installed that is affected by multiple vulnerabilities as referenced in the ALSA-2026:67979 advisory. kernel: hypervisor: Intel Processors: Privilege escalation in Ring 0 via improper value handling CVE-2025-35973 kernel: microcodectl: Intel Xeon 6...

kernel: microcode_ctl: Intel Xeon 6 Processors: Privilege escalation via improper memory range handling in SMM

A flaw was found in IntelR XeonR 6 processors when using IntelR TDX within System Management Mode SMM. Improper handling of overlap between protected memory ranges may allow a local attacker with privileged user access to escalate privileges. This vulnerability could lead to high impact on...

Important: Red Hat Security Advisory: microcode_ctl security, bug fix, and enhancement update

An update for microcodectl is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability...

Important: Red Hat Security Advisory: microcode_ctl security, bug fix, and enhancement update

An update for microcodectl is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability...

kernel: microcode_ctl: Intel Xeon 6 Processors: Privilege escalation via improper memory range handling in SMM

A flaw was found in IntelR XeonR 6 processors when using IntelR TDX within System Management Mode SMM. Improper handling of overlap between protected memory ranges may allow a local attacker with privileged user access to escalate privileges. This vulnerability could lead to high impact on...

CVE-2025-55575

smm-panel-sqliCVE-2025-55575 SMM 패널에 대한 시간 기반 SQL 인젝션 탐지 개요 이 템플릿은 HTTP POST 요청을 통해 /ajaxdata로 전송되는 SMM 패널의 servicedetail 파라미터에서 시간 기반 SQL 인젝션 취약점을 탐지합니다. 악용 시 원격 공격자가 민감한 데이터에 접근하거나 권한을 상승시킬 수 있습니다. 저자: Aether 심각도: 치명적 태그: sqli, mysql, timing, dork:'intitle:"1 SMM Panel "' "smm panel" 참조:...

ALSA-2026:67979 Important: microcode_ctl security, bug fix, and enhancement update

The microcodectl packages provide microcode updates for Intel and AMD processors. Security Fixes: kernel: hypervisor: Intel Processors: Privilege escalation in Ring 0 via improper value handling CVE-2025-35973 kernel: microcodectl: Intel Xeon 6 Processors: Privilege escalation via improper memory...

ALSA-2026:68011 Important: microcode_ctl security, bug fix, and enhancement update

The microcodectl packages provide microcode updates for Intel and AMD processors. Security Fixes: kernel: hypervisor: Intel Processors: Privilege escalation in Ring 0 via improper value handling CVE-2025-35973 kernel: microcodectl: Intel Xeon 6 Processors: Privilege escalation via improper memory...

RHEL 9 : microcode_ctl (RHSA-2026:68011)

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:68011 advisory. The microcodectl packages provide microcode updates for Intel and AMD processors. Security Fixes: kernel: hypervisor: Intel Processors:...