obsidian-note-toolbar-PoC

Frontmatter-Driven Arbitrary Code Execution in Note Toolbar vi...

CVE-2021-38489

CVE-2021-38489 affects the HddPasswordPei driver in Insyde InsydeH2O 5.x firmware, as shipped in Siemens SIMATIC products. The root cause is that the HDD password is stored in plaintext within a UEFI variable, exposing it to attackers with local, high-privilege access. The vulnerability carries a...

CVE-2021-38489 HDD Password Stored In Plaintext

HDD password plaintext is stored in a UEFI variable...

CVE-2021-38489 HDD Password Stored In Plaintext

HDD password plaintext is stored in a UEFI variable...

EUVD-2021-34870

HDD password plaintext is stored in a UEFI variable...

CVE-2021-43614 VariableEditSmm: Error checking of UEFI variables could cause buffer overflow, leading to code execution

Error in handling the PlatformLangCodes UEFI variable could cause a buffer overflow, leading to resource exhaustion and failure...

CVE-2021-43614

CVE-2021-43614 affects the VariableEditSmm component in Insyde UEFI firmware . The root cause is an error in handling the PlatformLangCodes UEFI variable, which can cause a buffer overflow leading to resource exhaustion and failure; the CVE title further suggests potential for code execution . Th...

CVE-2021-43614 VariableEditSmm: Error checking of UEFI variables could cause buffer overflow, leading to code execution

Error in handling the PlatformLangCodes UEFI variable could cause a buffer overflow, leading to resource exhaustion and failure...

MAL-2026-15828 Malicious code in env-validator-tool (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd6cff735ec80019a9009add49ea47ae4b34ec0c29c1e287511d765c24300964 The package ships no source module only egg-info metadata despite declaring a consolescript entrypoint 'env-validator=envvalidator.cli:main' that...

CVE-2021-43614: Buffer Copy without Checking Size of Input

Error in handling the PlatformLangCodes UEFI variable could cause a buffer overflow, leading to resource exhaustion and failure...

CVE-2021-38489: Plaintext Storage of a Password

HDD password plaintext is stored in a UEFI variable...

PT-2026-84949

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The mtk mfg attach dev function reads the prev o variable during the first iteration of its loop before the variable is assigned a value. This results in the evaluation of an indetermina...

PT-2026-84910

Error in handling the PlatformLangCodes UEFI variable could cause a buffer overflow, leading to resource exhaustion and failure...

CVE-2026-85428: Missing Authentication for Critical Function

MOOS core-moos through 10.4.0 contains an authentication bypass vulnerability in the optional MOOSDB HTTP server that allows unauthenticated clients to write variables. Attackers can send HTTP requests with variable names and values to the MOOSDB HTTP server port to modify MOOS variables includin...

Fedora 45 : dracut (2026-5bf73fe397)

The remote Fedora 45 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-5bf73fe397 advisory. - fixdevicetree-firmware: include soc specific firmwares in installgeneric - fixdevicetree-firmware: include Qualcomm X2 laptop model specific firmwares -...

CVE-2026-85429: Insufficient Verification of Data Authenticity

MOOS-IvP uFldNodeComms through 24.8.1 trusts the source node identity from the message body rather than validating it from the connection source. Attackers can craft NODEMESSAGE packets with spoofed source identities to impersonate other nodes and post arbitrary variable notifications without...

PT-2026-85302

Name of the Vulnerable Software and Affected Versions MOOS core-moos versions prior to 10.4.1 Description MOOSDB HTTP pages fail to escape database contents during rendering, leading to stored cross-site scripting. This allows a MOOS publisher to set variable values containing malicious script...

PT-2026-85296

Name of the Vulnerable Software and Affected Versions MOOS-IvP pRealm versions prior to 24.8.2 Description The pRealm component accepts unbounded REALMCAST REQ subscriptions without validating the duration or the limits of the variable list. This allows an attacker to register long-lived pipeways...

UBUNTU-CVE-2026-65108

Fix a slurmstepd stack overflow when a job environment contains an oversized SPANK option variable...

PT-2026-85277

Name of the Vulnerable Software and Affected Versions MOOS core-moos versions prior to 10.4.1 Description An authentication bypass exists in the optional MOOSDB HTTP server. This flaw allows unauthenticated clients to modify MOOS variables, including actuator and override commands, by sending HTT...