12692 matches found
CVE-2026-8301: Improper Neutralization of Special Elements used in an OS Command
Improper neutralization of special elements used in an OS command 'OS command injection' vulnerability in TUBITAK BILGEM Software Technologies Research Institute Pardus Boot Repair allows OS Command Injection. This issue affects Pardus Boot Repair: before 1.0.8...
CVE-2026-89169: Improper Verification of Cryptographic Signature
live-boot ff8867c allows attackers to bypass the dm-verity-enforce-roothash-signature protection mechanism when the .verity file is missing...
PT-2026-90328
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the NTFS boot sector processing where MFT and MFTMirr locations, stored as unsigned 64-bit LCNs Logical Cluster Numbers, are incorrectly decoded into signed 64-bit...
Linux Distros Unpatched Vulnerability : CVE-2026-89169
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - live-boot ff8867c allows attackers to bypass the dm-verity-enforce-roothash-signature protection mechanism when the .verity file is missing. CVE-2026-89169 Note...
CLEANSTART-2026-ED42524 Applications which accept user-supplied Spring Expression Language (SpEL) expressions may be vulnerable to a Denial of Service (DoS) attack if the evaluation of a SpEL expression triggers unbounded...
Multiple security vulnerabilities affect the spring-boot package. Applications which accept user-supplied Spring Expression Language SpEL expressions may be vulnerable to a Denial of Service DoS attack if the evaluation of a SpEL expression triggers unbounded cache growth. See references for...
TALKINGEBN
|-------------------| TALKINGBEN : --- Un malware BootKit que primero realiza una escalada de privilegios en la máquina víctima. Utilizando parcheo en NtTraceEvent y AMSI escáner de búfer de memoria, lo que le permite evadir Windows Defender y cargar un payload sin ser detectado. Luego usamos...
...[ More ]
This Metasploit module exploits CVE-2026-20079, an authentication bypass in the web interface of Cisco Secure Firewall Management Center FMC. It upgrades a boot-created machine session, obtains its session-specific action token, writes a Makeself-compatible shell script, and executes the selected...
AZL-100017 CVE-2026-6485 affecting package qemu 10.1.0-1
UEFI BIOS embedded Shell could be used to bypass Secure Boot via shell commands or startup scripts...
AZL-99990 CVE-2026-6485 affecting package edk2 20240524git3e722403cd16-20
UEFI BIOS embedded Shell could be used to bypass Secure Boot via shell commands or startup scripts...
CVE-2026-6485
UEFI BIOS embedded Shell could be used to bypass Secure Boot via shell commands or startup scripts...
CVE-2026-6485 UEFI BIOS embedded Shell can be used to bypass Secure Boot
UEFI BIOS embedded Shell could be used to bypass Secure Boot via shell commands or startup scripts...
EUVD-2026-74613
UEFI BIOS embedded Shell could be used to bypass Secure Boot via shell commands or startup scripts...
CVE-2026-6485
CVE-2026-6485 affects UEFI BIOS firmware that embeds the TianoCore EDK II UEFI Shell in SPI Flash. A logic error in the Shell boot option removal process allows an attacker with root privileges to create multiple boot entries, bypassing the Secure Boot check and gaining access to the Shell's phys...
CVE-2026-6485 UEFI BIOS embedded Shell can be used to bypass Secure Boot
UEFI BIOS embedded Shell could be used to bypass Secure Boot via shell commands or startup scripts...
PT-2026-88810
UEFI BIOS embedded Shell could be used to bypass Secure Boot via shell commands or startup scripts...
CVE-2026-6485: Active Debug Code
UEFI BIOS embedded Shell could be used to bypass Secure Boot via shell commands or startup scripts...
CVE-2026-77892
No cwe for this issue in Windows Boot Manager allows an unauthorized attacker to elevate privileges with a physical attack...
CVE-2026-69713
Dependency on vulnerable third-party component in Windows Secure Boot allows an authorized attacker to bypass a security feature locally...
CVE-2026-20293
A vulnerability in the Unified Extensible Firmware Interface UEFI Shell implementation of Cisco UCS Servers and UCS-based appliances could allow an authenticated attacker with valid credentials for a user account with the role of user or admin or an unauthenticated attacker with physical access t...