10903 matches found
CVE-2022-23968
Xerox VersaLink devices on specific versions of firmware before 2022-01-26 allow remote attackers to brick the device via a crafted TIFF file in an unauthenticated HTTP POST request. There is a permanent denial of service because image parsing causes a reboot, but image parsing is restarted as so...
JavaQuarkBBS Cross-Site Scripting Vulnerability
JavaQuarkBbs is a simple Java community based on Spring Boot implementation in China.JavaQuarkBBS in v2 and its previous versions suffers from a cross-site scripting vulnerability, which stems from a lack of data validation filtering of user-supplied data and output. An attacker could exploit thi...
The vulnerability in the implementation of the Secure Boot protocol for operating system bootloaders like Grub2 allows a perpetrator to gain access to confidential data, affect the integrity of the data, and cause service failures.
The vulnerability of the Secure Boot implementation in the Grub2 operating system is related to improper restrictions on the use of ACPI commands. Exploiting this vulnerability can allow an attacker to access confidential data, compromise data integrity, and cause service failures...
USN-5210-2: Linux kernel regression | Cloud Foundry
Severity Unknown Vendor Canonical Ubuntu Versions Affected Canonical Ubuntu 18.04 Description USN-5210-1 fixed vulnerabilities in the Linux kernel. Unfortunately, that update introduced a regression that caused failures to boot in environments with AMD Secure Encrypted Virtualization SEV enabled...
Return of Pseudo Ransomware
Return of Pseudo Ransomware By Trellix, Max Kersten and Raj Samani · January 20, 2022 Arnab Roy, Filippo Sitzia and Mo Cashman contributed to the research supporting this blog Recent news reports of a “ransomware” campaign targeting Ukraine has resulted in significant press coverage regarding not...
Destructive Wiper Targeting Ukraine Aimed at Eroding Trust
Russia is positioned for a hot-war attack on Ukraine that the Biden administration warned could come “at any point” — but the country is already suffering an attack of a different kind. A sweeping malware campaign remains ongoing, which experts agree is intended to permanently disrupt organizatio...
A New Destructive Malware Targeting Ukrainian Government and Business Entities
Cybersecurity teams from Microsoft on Saturday disclosed they identified evidence of a new destructive malware operation dubbed "WhisperGate" targeting government, non-profit, and information technology entities in Ukraine amid brewing geopolitical tensions between the country and Russia. "The...
Microsoft Warns of Destructive Malware Targeting Ukrainian Organizations
Microsoft has released a blog post on possible Master Boot Record MBR Wiper activity targeting Ukrainian organizations, including Ukrainian government agencies. According to Microsoft, powering down the victim device executes the malware, which overwrites the MBR with a ransom note; however, the...
Denial Of Service (DoS)
systemd is vulnerable to denial of service DoS attacks. An uncontrolled recursion in systemd-tmpfiles may lead to denial of service at boot time...
Ubuntu: Security Advisory (USN-5210-2)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
USN-5210-2: Linux kernel regression
USN-5210-1 fixed vulnerabilities in the Linux kernel. Unfortunately, that update introduced a regression that caused failures to boot in environments with AMD Secure Encrypted Virtualization SEV enabled. This update fixes the problem. We apologize for the inconvenience. Original advisory details:...
USN-5210-2 linux, linux-gcp, linux-gcp-5.4, linux-hwe-5.4 regression
USN-5210-1 fixed vulnerabilities in the Linux kernel. Unfortunately, that update introduced a regression that caused failures to boot in environments with AMD Secure Encrypted Virtualization SEV enabled. This update fixes the problem. We apologize for the inconvenience. Original advisory details:...
CVE-2022-21894
creationtimestamp| type| source ---|---|--- 2022-01-12 00:17:56+00:00| seen| https://t.me/cibsecurity/35295 2022-08-18 13:42:44+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/2984 2022-08-18 15:53:26+00:00| seen| https://t.me/crackcodes/1040 2022-08-18 15:56:07+00:00| seen|...
CVE-2022-21894
Secure Boot Security Feature Bypass Vulnerability...
CVE-2022-21894
Secure Boot Security Feature Bypass Vulnerability...
CVE-2022-21894
Secure Boot Security Feature Bypass Vulnerability...
Security feature bypass
Secure Boot Security Feature Bypass Vulnerability...
CVE-2022-21894 Secure Boot Security Feature Bypass Vulnerability
...
CVE-2022-21894
CVE-2022-21894 is a Secure Boot security feature bypass exploited by the BlackLotus UEFI bootkit. It bypasses Secure Boot to load malicious EFI components, enabling persistence, disabling HVCI and Defender, and prior to OS load. Attack requires elevated privileges or physical access; bootkit impl...
