BareMetal-RAM-Dumper

BareMetal RAM Dumper Простой инструмент x86 bare-metal, предназначенный для загрузки с диска/USB и прямого дампа ОЗУ системы на загрузочный носитель. Он использует прерывания BIOS для загрузки и выполнения дисковых операций, а также переходит в unreal mode для доступа к памяти выше 1 МБ...

tamago

TamaGo - bare metal Go tamago | https://github.com/usbarmory/tamago Copyright c The TamaGo Authors. All Rights Reserved. Введение TamaGo — это фреймворк, который позволяет компилировать и выполнять Go-приложения без внешних зависимостей на голом железе AMD64, ARM, ARM64, RISCV64. Проект возник из...

uEmu

Обзор uEmu — это крошечный милый плагин-эмулятор для IDA на основе движка Unicorn. Поддерживает следующие архитектуры "из коробки": x86 , x64 , ARM , ARM64 , MIPS , MIPS64 Для чего это ХОРОШО? Эмулировать "голый" код загрузчики, встроенное ПО и т.д. Эмулировать отдельные функции Для чего это ПЛОХ...

PongoOS

pongoOS Среда выполнения до загрузки для плат Apple, построенная на основе checkra1n. Сборка на macOS Установите Xcode + утилиты командной строки Выполните make all Сборка на Linux Установите clang если сомневаетесь, из apt.llvm.org Установите ld64 и strip из cctools. На Debian/Ubuntu их можно...

iBSSloader

iBSSloader 研究和工具，用于通过 checkm8、修补后的 iBSS/iBEC 以及自定义裸机载荷，在 iPad mini 1（P105AP / iPad2,5，Apple A5） 上启动 Linux —— 无需写入 iOS 安装。 本仓库整合了： 设备树移植 — Apple ADT → P105AP 的 Linux DTS/DTB 内核构建 — ARMv7 zImage + 平台补丁 iBSS/iBEC 链 — primepwn、autogo EOF 加载器、暂存捆绑包 裸机探测 — 帧缓冲、GPIO、PMGR、多点触控（Z2 SPI）、内存映射 Linux 启动路径 — A...

CVE-2026-39259

SmallerC scanf s Stack.md SmallerC - scanf %s 스택 버퍼 오버플로우 프로젝트: https://github.com/alexfru/SmallerC SmallerC의 scanf 구현은 형식 문자열에 명시적 필드 폭 없이 %s 또는 %가 사용될 때 문자열 읽기에 상한을 적용하지 않습니다. 런타임은 버퍼의 실제 할당된 크기와 관계없이 공백이나 EOF를 만날 때까지 대상 버퍼에 계속 씁니다. 경계를 넘어선 모든 바이트는 스택에 직접 기록되어 컴파일러가 버퍼 위에 배치한 모든 것로컬 변수, 저장된 레지스...

SUSE CVE-2025-35973

Improper handling of values for some IntelR Processors within Ring 0: Kernel, Hypervisor and Bare Metal OS may allow an escalation of privilege. Authorized adversary with a privileged user combined with a high complexity attack may enable escalation of privilege. This result may potentially occur...

CVE-2026-74250

In OpenStack Ironic before 38.0.1, the autodetect deploy interface may fail to run cleaning immediately after enrollment with, or changing to, the autodetect deploy interface...

CVE-2025-35973

Improper handling of values for some IntelR Processors within Ring 0: Kernel, Hypervisor and Bare Metal OS may allow an escalation of privilege. Authorized adversary with a privileged user combined with a high complexity attack may enable escalation of privilege. This result may potentially occur...

UBUNTU-CVE-2025-35973

Improper handling of values for some IntelR Processors within Ring 0: Kernel, Hypervisor and Bare Metal OS may allow an escalation of privilege. Authorized adversary with a privileged user combined with a high complexity attack may enable escalation of privilege. This result may potentially occur...

CVE-2026-10046

Bitdefender Napoca bare-metal hypervisor contains an out-of-bounds write vulnerability in the BIOS INT 0x15 / E820 memory map handler, implemented in napoca/guests/bioshandlers.c. The handler computes a destination offset into the guest RealModeMemory buffer from guest-controlled ES and EDI...

CAPM3 vulnerable to Cross-Namespace resource access

Summary CAPM3 is Metal3's Cluster API CAPI provider for baremetal provisioning in Kubernetes. Multiple cross-namespace access control vulnerabilities in Cluster API Provider Metal3 allow users with permissions to create or modify CAPM3 resources in one namespace to reference, read, or claim...

[SECURITY] Fedora 43 Update: rust-coreos-installer-0.26.0-2.fc43

coreos-installer installs Fedora CoreOS or RHEL CoreOS to bare-metal machines or, occasionally, to virtual machines...

[SECURITY] Fedora 44 Update: rust-coreos-installer-0.26.0-2.fc44

coreos-installer installs Fedora CoreOS or RHEL CoreOS to bare-metal machines or, occasionally, to virtual machines...

[SECURITY] Fedora 44 Update: libmetal-2026.04.0-2.fc44

An abstraction layer across user-space Linux, baremetal, and RTOS environment s...

EUVD-2025-209793

Improper initialization in the UEFI firmware for some Intel platforms within Ring 0: Bare Metal OS may allow an information disclosure. System software adversary with a privileged user combined with a high complexity attack may enable data exposure. This result may potentially occur via local...

CVE-2025-35991

Improper initialization in the UEFI firmware for some Intel platforms within Ring 0: Bare Metal OS may allow an information disclosure. System software adversary with a privileged user combined with a high complexity attack may enable data exposure. This result may potentially occur via local...

CVE-2025-35991

The CVE-2025-35991 entry describes an improper initialization in the UEFI firmware for some Intel platforms (Ring 0: Bare Metal OS) that may allow information disclosure. The issue requires a local attacker with privileged access and high attack complexity, with no user interaction, and could imp...

PT-2026-40079

Improper initialization in the UEFI firmware for some Intel platforms within Ring 0: Bare Metal OS may allow an information disclosure. System software adversary with a privileged user combined with a high complexity attack may enable data exposure. This result may potentially occur via local...

OpenStack Ironic 安全漏洞

OpenStack Ironic is an integrated OpenStack application developed under the OpenStack open source framework. It is used to configure bare machines rather than virtual machines. OpenStack Ironic versions 35.x and earlier contain security vulnerabilities, which stem from the instanceinfokstemplate...