CVE-2008-7096

Intel Desktop and Mobile boards BIOS firmware DQ35JO, DQ35MP, DP35DP, DG33FB, DG33BU, DG33TL, MGM965TW, D945GCPE, and DX38BT allow local administrators with Ring 0 privileges to gain additional privileges and modify code running in System Management Mode, or access hypervisor memory, as demonstra...

Design/Logic Flaw

McAfee SafeBoot Device Encryption 4 build 4750 and earlier stores pre-boot authentication passwords in the BIOS Keyboard buffer and does not clear this buffer after use, which allows local users to obtain sensitive information by reading the physical memory locations associated with this buffer...

CVE-2008-7020

McAfee SafeBoot Device Encryption 4 build 4750 and earlier stores pre-boot authentication passwords in the BIOS Keyboard buffer and does not clear this buffer after use, which allows local users to obtain sensitive information by reading the physical memory locations associated with this buffer...

CVE-2008-7020

McAfee SafeBoot Device Encryption 4 build 4750 and earlier stores pre-boot authentication passwords in the BIOS Keyboard buffer and does not clear this buffer after use, which allows local users to obtain sensitive information by reading the physical memory locations associated with this buffer...

CVE-2009-2887

Cross-site scripting XSS vulnerability in bios.php in PHP Scripts Now President Bios allows remote attackers to inject arbitrary web script or HTML via the rank parameter...

Cross site scripting

Cross-site scripting XSS vulnerability in bios.php in PHP Scripts Now President Bios allows remote attackers to inject arbitrary web script or HTML via the rank parameter...

Sql injection

SQL injection vulnerability in bios.php in PHP Scripts Now President Bios allows remote attackers to execute arbitrary SQL commands via the rank parameter...

CVE-2009-2887

Cross-site scripting XSS vulnerability in bios.php in PHP Scripts Now President Bios allows remote attackers to inject arbitrary web script or HTML via the rank parameter...

CVE-2009-2887

CVE-2009-2887 describes a Cross-site scripting (XSS) vulnerability in bios.php of PHP Scripts Now President Bios. The vulnerability allows remote attackers to inject arbitrary web script or HTML via the rank parameter. The NVD entry provides a CVSS v2 base score of 4.3 (Medium) with network attac...

CVE-2009-2886

The CVE refers to a SQL injection vulnerability in the PHP Scripts Now product’s bios.php (President Bios) that allows remote attackers to execute arbitrary SQL commands through the rank parameter. Affected component: bios.php in the President Bios module. Root cause: improper input handling/unsa...

ASUS Eee PC主板BIOS SMM权限提升漏洞

BUGTRAQ ID: 35995 Eee PC是华硕推出的系列小型笔记本电脑。 华硕主板的BIOS固件包含有带有多个SMI处理器的特殊代码，在引导的时候这些处理器以系统管理模式运行并加载到受保护的内存部分（SMRAM）。 以下是其中的一个SMI处理器$SMISS处理器代码的反汇编： 0003F073: 50 push ax 0003F074: B4A1 mov ah,0A1 0003F076: 9A197D00F0 call 0F000:07D19 0003F07B: 2404 and al,004 0003F07D: 7414 je 00003F093 0003F07F: B434...

Rootkit techniques the main principle of explanation-vulnerability warning-the black bar safety net

Article author: hackisle rootkit main categories: Application-level-kernel-the hardware level Early rootkits mainly for application-level rootkits application-level rootkits mainly by replacing the login, ps, ls, netstat and other system tools, or modify. rhosts etc system configuration files, et...

Intel System Management Mode Local Privilege Escalation (INTEL-SA-00018)

The version of the Intel BIOS on the remote host is vulnerable to an unspecified privilege escalation attack. Software running in ring 0 could potentially change code running in System Management Mode SMM. SMM is a privileged operating system that runs independently from the system's operating...

GLinks 2.1 (cat) Remote Blind SQL Injection Vulnerability

Exploit for unknown platform in category web applications ========================================================= GLinks 2.1 cat Remote Blind SQL Injection Vulnerability ========================================================= + GLinks v2.1 cat Remote Blind SQL Injection Vulnerability + Softwa...

Groones GLink ORGanizer 2.1 - cat Blind SQL Injection

Groones GLink ORGanizer 2.1 - cat Blind SQL Injection 0000000000000000000000000000000000 000000000000000000000 00000000000000000000000000000000000 0000000000000000 00000000000000000000000000000000 + GLinks v2.1 cat Remote Blind SQL Injection Vulnerability + Software : President Bios + Author :...

GLinks 2.1 (cat) Remote Blind SQL Injection Vulnerability

No description provided by source. 0000000000000000000000000000000000 000000000000000000000 00000000000000000000000000000000000 0000000000000000 00000000000000000000000000000000 + GLinks v2.1 cat Remote Blind SQL Injection Vulnerability + Software : President Bios + Author : 599eme Man + Contact ...

Groone's GLink ORGanizer 2.1 - 'cat' Blind SQL Injection

0000000000000000000000000000000000 000000000000000000000 00000000000000000000000000000000000 0000000000000000 00000000000000000000000000000000 + GLinks v2.1 cat Remote Blind SQL Injection Vulnerability + Software : President Bios + Author : 599eme Man + Contact : [email protected] + Thanks : Moudi,...

President Bios SQL Injection / XSS

0000000000000000000000000000000000 000000000000000000000 00000000000000000000000000000000000 0000000000000000 00000000000000000000000000000000 + President Bios Multiple Vulnerabilities + Software : President Bios + Author : 599eme Man + Contact : [email protected] + Thanks : Moudi, Neocoderz, Sheiry,...

PHP Scripts Now (Multiple Products) - 'bios.php?rank' SQL Injection

source: https://www.securityfocus.com/bid/44306/info Multiple PHP Scripts Now products are prone to an input-validation vulnerability that can be exploited to conduct SQL-injection and cross-site scripting attacks. Exploiting this vulnerability could allow an attacker to steal cookie-based...

Oracle Enterprise Linux 4.8 kernel security and bug fix update

2.6.9-89 -fix regression in cxgb3 driver spinlock usage Andy Gospodarek 495557 -cxgb3: fixup possible workqueue deadlocks Andy Gospodarek 495558 -e1000: network driver doesn t reset nic during shutdown and prevents pxe reloads George Beshers 465620 -cxgb3: fix msix bringup so we dont leak vectors...