shim

shim, un bootloader UEFI di primo stadio shim è un'applicazione EFI semplice che, quando viene eseguita, tenta di aprire ed eseguire un'altra applicazione. Inizialmente proverà a farlo tramite le chiamate EFI standard LoadImage e StartImage. Se queste falliscono ad esempio perché Secure Boot è...

TALKINGEBN

|-------------------| TALKINGBEN : --- Eine BootKit-Malware, die zunächst eine Privilege Escalation auf dem Opferrechner durchführt. Durch Patchen von NtTraceEvent und AMSI Memory-Buffer-Scanner kann sie Windows Defender umgehen und eine Payload laden, ohne erkannt zu werden. Dann verwenden wir...

CVE-2021-3972

CVE-2021-3972 codice poc senza altro root@kitploit: BYTE value = 0x1; SetFirmwareEnvironmentVariableExT"ChgBootSecureBootDisable",T"6ACCE65D-DA35-4B39-B64B-5ED927A7DC7E",&value,sizeofBYTE,0x7;...

CVE-2026-47624

NVIDIA DGX Spark contains a vulnerability in UEFI where a Attacker may cause a/an CWE-693 by privileged local user. A successful exploit of this vulnerability may allow an attacker to bypass administrator password protection in UEFi...

CVE-2026-47624

NVIDIA DGX Spark contains a vulnerability in UEFI where a Attacker may cause a/an CWE-693 by privileged local user. A successful exploit of this vulnerability may allow an attacker to bypass administrator password protection in UEFi...

EUVD-2026-65606

NVIDIA DGX Spark contains a vulnerability in UEFI where a Attacker may cause a/an CWE-693 by privileged local user. A successful exploit of this vulnerability may allow an attacker to bypass administrator password protection in UEFi...

CVE-2026-47624

NVIDIA DGX Spark contains a CWE-693 (Protection Mechanism Bypass) vulnerability in its UEFI firmware. A privileged local user can exploit this flaw to bypass administrator password protection in the UEFI environment. The CVSS v3.1 score is 6.0 (MEDIUM) , reflecting a local attack vector, low comp...

Astra Linux – Vulnerability in Intel Microcode

Improper input validation in UEFI firmware for some Intel processors may allow a privileged user to potentially enable information disclosure through local access...

SmmBackdoor

Backdoor SMM per piattaforme basate su UEFI !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!! Questo è un progetto legacy abbandonato, per la versione corrente della backdoor consulta la pagina del progetto SMM Backdoor Next Gen e la sua documentazione:...

CVE-2026-8810

On ARM platforms, a vulnerability in the architecture design of HDD Password could allow an attacker to retrieve HDD Password from UEFI variables...

EUVD-2026-62294

On ARM platforms, a vulnerability in the architecture design of HDD Password could allow an attacker to retrieve HDD Password from UEFI variables...

CVE-2026-8810 HDD Password leakage vulnerability

On ARM platforms, a vulnerability in the architecture design of HDD Password could allow an attacker to retrieve HDD Password from UEFI variables...

CVE-2026-8810

On ARM platforms, an architecture-design flaw in HDD Password handling allows an attacker to retrieve the password from UEFI variables. CVSS 6.9 MEDIUM; physical access, high complexity, low privileges required. Exploitation details not provided in the documents.

CVE-2026-6484

In an UEFI, Lack of verified boot to certain FV may cause arbitrary code execution...

CVE-2026-6484

CVE-2026-6484 concerns UEFI firmware where lack of verified boot for certain FV enables arbitrary code execution. The available data indicates a local attack vector with high privileges required and high impact on confidentiality, integrity, and availability (per CVSS 3.1 vector: AV:L/AC:L/PR:H/U...

CVE-2026-6484 Lack of verified boot to certain FV may cause arbitrary code execution

In an UEFI, Lack of verified boot to certain FV may cause arbitrary code execution...

CVE-2026-6484

In an UEFI, Lack of verified boot to certain FV may cause arbitrary code execution...

EUVD-2026-57052

In an UEFI, Lack of verified boot to certain FV may cause arbitrary code execution...

PT-2026-70961

In an UEFI, Lack of verified boot to certain FV may cause arbitrary code execution...

CVE-2026-20712

Incomplete cleanup in some UEFI firmware for some IntelR reference platforms within UEFI may allow an information disclosure. System software adversary with a privileged user combined with a low complexity attack may enable data exposure. This result may potentially occur via local access when...