incus-os

Введение IncusOS — это неизменяемый образ ОС, предназначенный для запуска Incus. Он основан на Debian 13 и собран с помощью mkosi. IncusOS может быть установлен на современные системы amd64 x8664 и arm64. Этот проект направлен на предоставление очень быстрого, безопасного и надежного способа...

Super-UEFIinSecureBoot-Disk

Super UEFIinSecureBoot Disk Super UEFIinSecureBoot Disk — это загрузочный образ с загрузчиком GRUB2, созданный в качестве доказательства концепции не активно поддерживается и не дорабатывается , предназначенный для использования в качестве основы для USB-флешек восстановления. Ключевая особенност...

CVE-2026-79298

🐞 CVE-2026-79298: Howyar SysReturn의 UEFI Secure Boot 우회에 대한 불완전한 교정 취약점이 패치되었습니다. 바이너리가 폐기되었습니다. 그러나 아키텍처의 절반만 수정되었습니다. 18개월 후, IA-32 부팅 경로는 여전히 동일한 사용자 정의 PE 로더, 동일한 우회된 Secure Boot 검증, 그리고 동일한 폐기된 Authenticode 해시를 가지고 있었으며, 2026년 7월까지 SysReturn NetCopy의 모든 사본에 상용으로 제공되었습니다. 이것이 CVE-2026-79298입니...

CVE-2026-8863

CVE-2026-8863 CVE-2026-8863의 영향을 받는 서명된 UEFI Secure Boot shim 바이너리 모음으로, 각 이미지의 내장 shim 버전, Authenticode 서명자 및 폐기 해시를 포함합니다. 바이트 단위로 동일한 서명된 shim을 제공하는 릴리스는 하나의 행으로 통합됩니다 — 하나의 Authenticode 해시는 해당 해시를 담고 있는 릴리스 수와 관계없이 하나의 dbx 항목입니다. 자세한 내용은 제 블로그를 확인하세요. 개요 배포판| 릴리스| shim| 포함된 공급업체 CA...

Exploit for CVE-2026-79298

🐞 CVE-2026-79298: Incomplete Remediation of UEFI Secure Boo...

CVE-2026-20293 Cisco UCS and UCS-Based Appliances UEFI Shell Secure Boot Bypass Vulnerability

A vulnerability in the Unified Extensible Firmware Interface UEFI Shell implementation of Cisco UCS Servers and UCS-based appliances could allow an authenticated attacker with valid credentials for a user account with the role of user or admin or an unauthenticated attacker with physical access t...

Cisco UCS and UCS-Based Appliances UEFI Shell Secure Boot Bypass Vulnerability

A vulnerability in the Unified Extensible Firmware Interface UEFI Shell implementation of Cisco UCS Servers and UCS-based appliances could allow an authenticated attacker with valid credentials for a user account with the role of user or admin or an unauthenticated attacker with physical access t...

Microsoft Patches Record 206 Flaws, Including Three Zero-Days and Critical RCE Bugs

Microsoft on Tuesday released fixes for a record 206 security vulnerabilities impacting its software portfolio, including three flaws that have been publicly disclosed at the time of release. Of the 206 flaws, 39 are rated Critical, and 167 are rated Important in severity. This includes 63...

CVE-2026-45656 UEFI Secure Boot Security Feature Bypass Vulnerability

...

UEFI Secure Boot Security Feature Bypass Vulnerability

No cwe for this issue in Windows UEFI allows an authorized attacker to bypass a security feature locally...

CVE-2026-0390

Technical details about CVE-2026-0390 are not publicly provided in the available documents. No information on affected product versions, root cause, exploitability, or remediation is included. Monitor for updates from official sources.

KLA90980 Multiple vulnerabilities in Microsoft Products (ESU)

Multiple vulnerabilities were found in Microsoft Products ESU. Malicious users can exploit these vulnerabilities to bypass security restrictions, cause denial of service, execute arbitrary code, gain privileges, obtain sensitive information, read local files, spoof user interface. Below is a...

kernel: efi: Do not import certificates from UEFI Secure Boot for T2 Macs

In the Linux kernel, the following vulnerability has been resolved: efi: Do not import certificates from UEFI Secure Boot for T2 Macs On Apple T2 Macs, when Linux attempts to read the db and dbx efi variables at early boot to load UEFI Secure Boot certificates, a page fault occurs in Apple firmwa...

EUVD-2022-54872

In the Linux kernel, the following vulnerability has been resolved: efi: Do not import certificates from UEFI Secure Boot for T2 Macs On Apple T2 Macs, when Linux attempts to read the db and dbx efi variables at early boot to load UEFI Secure Boot certificates, a page fault occurs in Apple firmwa...

EUVD-2019-10293

Malware in sbrugna...

EUVD-2015-7735

Malware in sbrugna...

EUVD-2020-7693

Malware in sbrugna...

EUVD-2021-6865

Malicious code in bioql PyPI...

EUVD-2022-51399

Malicious code in bioql PyPI...

New HybridPetya Ransomware Bypasses UEFI Secure Boot With CVE-2024-7344 Exploit

Cybersecurity researchers have discovered a new ransomware strain dubbed HybridPetya that resembles the notorious Petya/NotPetya malware, while also incorporating the ability to bypass the Secure Boot mechanism in Unified Extensible Firmware Interface UEFI systems using a now-patched vulnerabilit...