10903 matches found
Secure Boot Security Feature Bypass Vulnerability
...
Microsoft Windows Secure Boot 安全特征问题漏洞
Microsoft Windows Secure Boot is a secure boot from Microsoft Corporation USA. Microsoft Windows Secure Boot is vulnerable to a security feature issue. The following products and editions are affected:Windows 10 Version 1809 for 32-bit Systems,Windows 10 Version 1809 for x64-based Systems,Windows...
PT-2022-15180
Name of the Vulnerable Software and Affected Versions Microsoft Windows 11 affected versions not specified Description A security feature bypass allows attackers to circumvent Secure Boot, enabling the installation of UEFI bootkits such as BlackLotus. This issue is exploited by deploying vulnerab...
PT-2022-3346 · Coreos +5 · Ignition +5
Name of the Vulnerable Software and Affected Versions: Ignition versions prior to 2.14.0 Description: A vulnerability was found in Ignition where ignition configs are accessible from unprivileged containers in VMs running on VMware products. This issue is only relevant in user environments where...
UBUNTU-CVE-2021-3997
A flaw was found in systemd. An uncontrolled recursion in systemd-tmpfiles may lead to a denial of service at boot time when too many nested directories are created in /tmp...
EulerOS Virtualization 3.0.2.6 : grub2 (EulerOS-SA-2021-2868)
According to the versions of the grub2 packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - A flaw was found in grub2 in versions prior to 2.06, where it incorrectly enables the usage of the ACPI command when Secure Boot i...
Ubuntu 18.04 LTS / 20.04 LTS : Linux kernel vulnerabilities (USN-5210-1)
The remote Ubuntu 18.04 LTS / 20.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-5210-1 advisory. Nadav Amit discovered that the hugetlb implementation in the Linux kernel did not perform TLB flushes under certain conditions. A local...
CVE-2020-23026
A NULL pointer dereference in the main function dhry1.c of dhrystone 2.1 causes a denial of service DoS...
PT-2025-37516
Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A flaw exists in the Linux kernel's NTFS3 implementation related to the validation of the BOOT record size field. When the record size field is negative, it's interpreted as a shift...
the PVS Target VMs cannot boot due to the following error message: --- Stop Code: SYSTEM THREAD EXCEPTION NOT HANDLED What Failed: CVhdMp.sys
The PVS Target VMs cannot boot due to the following error message: Stop Code: SYSTEM THREAD EXCEPTION NOT HANDLED What Failed: CVhdMp.sys...
Exploit for Uncontrolled Resource Consumption in Siemens 6Bk1602-0Aa12-0Tp0_Firmware
log4j Spring vulnerable POC This is a POC for a simple spring...
Exploit for Uncontrolled Resource Consumption in Siemens 6Bk1602-0Aa12-0Tp0_Firmware
log4shell-rmi-poc A Proof of Concept of the Log4j vulnerabilit...
Metasploit Wrap-Up
Log4Shell - Log4j HTTP Scanner Versions of Apache Log4j impacted by CVE-2021-44228 which allow JNDI features used in configuration, log messages, and parameters, do not protect against attacker controlled LDAP and other JNDI related endpoints. This module will scan an HTTP endpoint for the...
IBM Spectrum Copy Data Management Unauthorized Access Vulnerability
IBM Spectrum Copy Data Management, an IBM company that modernizes, streamlines, and automates data center copy management processes, has a security vulnerability that could be exploited by an attacker to gain unauthorized access to the Spring Boot console...
CVE-2021-39653
In TBD of TBD, there is a possible way to boot with a hidden debug policy due to a missing warning to the user. This could lead to local escalation of privilege after preparing the device, hiding the warning, and passing the phone to a new user, with no additional execution privileges needed. Use...
PT-2021-22697 · Google · Android Kernel
Name of the Vulnerable Software and Affected Versions: Android kernel Description: The issue allows for local escalation of privilege due to a missing warning to the user, enabling a possible way to boot with a hidden debug policy. This could be exploited by preparing the device, hiding the...
Exploit for Uncontrolled Resource Consumption in Siemens 6Bk1602-0Aa12-0Tp0_Firmware
Simple Spring Boot application vulnerable to CVE-2021-44228 L...
CVE-2021-39052
IBM Spectrum Copy Data Management 2.2.13 and earlier could allow a remote attacker to access the Spring Boot console without authorization. IBM X-Force ID: 214523...
