CVE-2025-2486

The Ubuntu edk2 UEFI firmware packages accidentally allowed the UEFI Shell to be accessed in Secure Boot environments, possibly allowing bypass of Secure Boot constraints. Versions 2024.05-2ubuntu0.3 and 2024.02-2ubuntu0.3 disable the Shell. Some previous versions inserted a secure-boot-based...

CVE-2025-2486

The Ubuntu edk2 UEFI firmware packages accidentally allowed the UEFI Shell to be accessed in Secure Boot environments, possibly allowing bypass of Secure Boot constraints. Versions 2024.05-2ubuntu0.3 and 2024.02-2ubuntu0.3 disable the Shell. Some previous versions inserted a secure-boot-based...

CVE-2025-55471

Incorrect access control in the getUserFormData function of youlai-boot v2.21.1 allows attackers to access sensitive information for other users...

CVE-2025-55469

Incorrect access control in youlai-boot v2.21.1 allows attackers to escalate privileges and access the Administrator backend...

PT-2025-48165

Name of the Vulnerable Software and Affected Versions youlai-boot version 2.21.1 Description An issue with access control in youlai-boot version 2.21.1 allows attackers to escalate privileges and gain access to the Administrator backend. Recommendations At the moment, there is no information abou...

CVE-2025-55469

Incorrect access control in youlai-boot v2.21.1 allows attackers to escalate privileges and access the Administrator backend...

CVE-2025-55469

CVE-2025-55469 affects youlai-boot v2.21.1. The underlying issue is an incorrect access-control mechanism that allows unauthenticated attackers (CVSS: 9.8, CRITICAL; AV:N/AC:L/PR:N/UI:N/S:U) to escalate privileges and access the Administrator backend. Multiple sources (Red Hat, EUVD/ENISA, NVD, C...

PT-2025-48166

Name of the Vulnerable Software and Affected Versions youlai-boot version 2.21.1 Description An access control issue exists in the getUserFormData function. This allows unauthorized access to sensitive information belonging to other users. The issue involves insufficient restrictions on who can...

CVE-2025-55471

Incorrect access control in the getUserFormData function of youlai-boot v2.21.1 allows attackers to access sensitive information for other users...

youlai-boot 安全漏洞

youlai-boot is a privilege management system open-sourced by China youlaiorg. A security vulnerability exists in youlai-boot version v2.21.1, which stems from improper access control and may result in elevation of privilege...

Ubuntu EDK2 安全漏洞

Ubuntu EDK2 is an open source firmware development kit for Ubuntu. A security vulnerability exists in Ubuntu edk2 that stems from the Secure Boot environment that allows access to the UEFI Shell, which could lead to Secure Boot constraints being bypassed...

youlai-boot 安全漏洞

youlai-boot is a privilege management system open source by China youlaiorg. A security vulnerability exists in youlai-boot version v2.21.1, which stems from improper access control of the getUserFormData function and may lead to information leakage...

CVE-2025-55471

CVE-2025-55471 affects youlai-boot v2.21.1; the root cause is incorrect access control in the getUserFormData function , enabling attackers to access sensitive information of other users. The CVE is described with a HIGH impact (C at least Confidentiality). Public references indicate multiple ven...

kernel security update

5.14.0-611.7.1 - Disable UKI signing Orabug: 36571828 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list olkmodsigningkey.pem Orabug: 29539237 - Update x509.genkey Orabug: 248176...

This Week in Spring - Spring Boot 4 edition! - November 25th, 2025

Hi, Spring fans! Welcome to another illustrious installment of This Week in Spring! It’s Thanksgiving week here in the United States. Thanksgiving is traditionally celebrated with friends and family every fourth Thursday of November, gathered around a table full of food and, usually, a giant...

SUSE CVE-2025-61661

A vulnerability has been identified in the GRUB Grand Unified Bootloader component. This flaw occurs because the bootloader mishandles string conversion when reading information from a USB device, allowing an attacker to exploit inconsistent length values. A local attacker can connect a malicious...

A Bootiful Podcast: The legendary Sébastien Deleuze on all that's new and nice in Spring Framework 7

Hi, Spring fans! Happy Spring Boot 4.0 release day! Make sure to get the bits on the Spring Initializr you know - start.spring.io! This release is packed with new features, a lot of which comes from Spring Framework 7. To help break it down for us this week, we’re joined by none other than the...

November 20, 2025—KB5070312 (OS Build 22631.6276) Preview

None None...

EUVD-2025-198081

A vulnerability has been identified in the GRUB Grand Unified Bootloader component. This flaw occurs because the bootloader mishandles string conversion when reading information from a USB device, allowing an attacker to exploit inconsistent length values. A local attacker can connect a malicious...

DEBIAN-CVE-2025-61661

A vulnerability has been identified in the GRUB Grand Unified Bootloader component. This flaw occurs because the bootloader mishandles string conversion when reading information from a USB device, allowing an attacker to exploit inconsistent length values. A local attacker can connect a malicious...