143 matches found
SmmBackdoor
SMM backdoor for UEFI based platforms !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!! This is legacy abandoned project, for current version of the backdoor check SMM Backdoor Next Gen project page and its documentation: https://github.com/Cr4sh/SmmBackdoorNg...
ShadeBIOS
Shade BIOS README is present in each Pkg folder ModuleLoaderPkg: DXE module that loads & executes DXE modules from a USB stick ShadeBiosPkg: Main Shade BIOS package VarPrintPkg: Library that allows printing debug messages or statuses to the UEFI variables Author Kazuki Matsuo. © FFRI Security, In...
PT-2026-106521
In the Linux kernel, the following vulnerability has been resolved: wifi: wcn36xx: Fix potential use-after-free in TX ack timer teardown wcn36xx dxe deinit tears down the TX ack timer with timer delete, which only dequeues the timer and does not wait for a callback that is already executing; the...
Astra Linux – Vulnerability in edk2
Unlimited recursion in DxeCore in EDK II...
CVE-2025-20073
Improper buffer restrictions in the UEFI DXE module for some IntelR Reference Platforms within UEFI may allow an information disclosure. System software adversary with a privileged user combined with a high complexity attack may enable data exposure. This result may potentially occur via local...
CVE-2025-20073
Improper buffer restrictions in the UEFI DXE module for some IntelR Reference Platforms within UEFI may allow an information disclosure. System software adversary with a privileged user combined with a high complexity attack may enable data exposure. This result may potentially occur via local...
CVE-2025-20073: Improper Restriction of Operations within the Bounds of a Memory Buffer
Improper buffer restrictions in the UEFI DXE module for some IntelR Reference Platforms within UEFI may allow an information disclosure. System software adversary with a privileged user combined with a high complexity attack may enable data exposure. This result may potentially occur via local...
MiracleLinux 9 : edk2-20230524-4.el9 (AXSA:2023-6904:04)
The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2023-6904:04 advisory. edk2: Function GetEfiGlobalVariable2 return value not checked in DxeImageVerificationHandler CVE-2019-14560 openssl: Possible DoS translating ASN.1...
CVE-2023-45076
A memory leakage vulnerability was reported in the 534D0140 DXE driver that may allow a local attacker with elevated privileges to write to NVRAM variables...
CVE-2023-45077
A memory leakage vulnerability was reported in the 534D0740 DXE driver that may allow a local attacker with elevated privileges to write to NVRAM variables...
EUVD-2017-9439
Malware in sbrugna...
EUVD-2022-52332
Malicious code in bioql PyPI...
EUVD-2023-49398
Malicious code in bioql PyPI...
EUVD-2023-49396
Malicious code in bioql PyPI...
EUVD-2022-43402
Malicious code in bioql PyPI...
EUVD-2023-49397
Malicious code in bioql PyPI...
EUVD-2023-24776
Malicious code in bioql PyPI...
EUVD-2023-24773
Malicious code in bioql PyPI...
The vulnerability of the NetworkPkg/IScsiDxe/IScsiProto.c component in the development environment for UEFI applications in EDK2 allows a attacker to compromise data integrity and cause service failures.
The vulnerability of the NetworkPkg/IScsiDxe/IScsiProto.c component in the UEFI applications of EDK2 development environment is related to a numerical overflow condition. Exploiting this vulnerability can allow an attacker to compromise data integrity and cause service failures...
Linux Distros Unpatched Vulnerability : CVE-2021-28213
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Example EDK2 encrypted private key in the IpSecDxe.efi present potential security risks. CVE-2021-28213 Note that Nessus relies on the presence of the package a...