125 matches found
CVE-2018-8897
CVE-2018-8897 POP SS の脆弱性 CVE-2018-8897 を悪用したデモで、カーネル権限での未署名コード実行につながります。 KVA Shadowing を無効にし、関連するセキュリティ更新プログラム をアンインストールする必要があります。 一部のハイパーバイザー VMWare など では、INT3 後に保留中の DB が破棄されるため、動作しない可能性があります。 詳細な説明: https://blog.can.ac/2018/05/11/arbitrary-code-execution-at-ring-0-using-cve-2018-8897/ 結果:...
CVE-2026-50719
The Ingenic T41, and probably also T32, T40, and A1 SoC boot ROMs parse and execute an attacker-controlled init table from the SPL header before checking the secure boot state and before invoking signature verification. The init table parser supports full-address 32-bit write operations, allowing...
CVE-2025-59326
CPSD CryptoPro Secure Disk for Bitlocker before v7.7.4 fails to enforce IMA policy protections across temporary file systems, allowing for unsigned code to be executed from these locations...
CVE-2025-59326
CPSD CryptoPro Secure Disk for Bitlocker before v7.7.4 fails to enforce IMA policy protections across temporary file systems, allowing for unsigned code to be executed from these locations...
CVE-2025-59326
CVE-2025-59326 affects CPSD CryptoPro Secure Disk for Bitlocker; prior to v7.7.4, it does not enforce IMA policy protections on temporary file systems, enabling unsigned code execution from those locations. Root cause: IMA policy enforcement gap. Impact: high (per CVSS 3.1). Remediation: upgrade ...
PT-2026-71074
Name of the Vulnerable Software and Affected Versions CryptoPro Secure Disk for Bitlocker versions prior to 7.7.4 Description The software fails to enforce Integrity Measurement Architecture IMA policy protections across temporary file systems. IMA is a kernel-based mechanism that maintains a...
MiracleLinux 8 : grub2-2.02-156.el8.ML.1 (AXSA:2024-8448:04)
The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2024-8448:04 advisory. grub2: grub2-set-bootflag can be abused by local pseudo-users CVE-2024-1048 grub2: Out-of-bounds write at fs/ntfs.c may lead to unsigned code...
CVE-2019-12758
Symantec Endpoint Protection, prior to 14.2 RU2, may be susceptible to an unsigned code execution vulnerability, which may allow an individual to execute code without a resident proper digital signature...
EUVD-2020-7138
Malware in sbrugna...
EUVD-2018-18096
Malware in sbrugna...
EUVD-2019-7993
Malware in sbrugna...
EUVD-2020-8939
Malware in sbrugna...
EUVD-2020-3097
Malware in sbrugna...
EUVD-2019-8861
Malware in sbrugna...
EUVD-2020-8951
Malware in sbrugna...
EUVD-2018-2477
Malware in sbrugna...
EUVD-2021-13851
Malware in sbrugna...
EUVD-2021-6908
Malicious code in bioql PyPI...