CVE-2025-34503

Deck Mate 1 executes firmware directly from an external EEPROM without verifying authenticity or integrity. An attacker with physical access can replace or reflash the EEPROM to run arbitrary code that persists across reboots. Because this design predates modern secure-boot or signed-update...

EUVD-2019-2652

Malware in sbrugna...

EUVD-2020-18752

Malware in sbrugna...

EUVD-2020-6255

Malware in sbrugna...

EUVD-2021-10938

Malware in sbrugna...

EUVD-2019-10437

Malware in sbrugna...

EUVD-2022-34742

Malicious code in bioql PyPI...

EUVD-2024-33598

Malicious code in bioql PyPI...

EUVD-2022-51685

Malicious code in bioql PyPI...

EUVD-2025-22915

Malicious code in bioql PyPI...

Two New Supermicro BMC Bugs Allow Malicious Firmware to Evade Root of Trust Security

Cybersecurity researchers have disclosed details of two security vulnerabilities impacting Supermicro Baseboard Management Controller BMC firmware that could potentially allow attackers to bypass crucial verification steps and update the system with a specially crafted image. The medium-severity...

CVE-2025-53696

iSTAR Ultra performs a firmware verification on boot, however the verification does not inspect certain portions of the firmware. These firmware parts may contain malicious code. Tested up to firmware 6.9.2, later firmwares are also possibly affected...

CVE-2025-53696

iSTAR Ultra performs a firmware verification on boot, however the verification does not inspect certain portions of the firmware. These firmware parts may contain malicious code. Tested up to firmware 6.9.2, later firmwares are also possibly affected...

CVE-2025-53696

iSTAR Ultra performs a firmware verification on boot, however the verification does not inspect certain portions of the firmware. These firmware parts may contain malicious code. Tested up to firmware 6.9.2, later firmwares are also possibly affected...

CVE-2025-53696

iSTAR Ultra performs a firmware verification on boot, however the verification does not inspect certain portions of the firmware. These firmware parts may contain malicious code. Tested up to firmware 6.9.2, later firmwares are also possibly affected...

CVE-2025-53696

CVE-2025-53696 affects Johnson Controls iSTAR Ultra family (including Ultra SE, Ultra G2, Ultra G2 SE, Edge G2) with firmware versions 6.9.2 and older. The root cause is incomplete boot-time firmware verification, where the boot verification does not inspect certain portions of the firmware, allo...

PT-2025-31110 · Unknown · Istar Ultra

Name of the Vulnerable Software and Affected Versions: iSTAR Ultra versions up to 6.9.2 Description: iSTAR Ultra performs a firmware verification on boot, however, the verification does not inspect certain portions of the firmware. These firmware parts may contain malicious code. Recommendations:...

AZL-64893 CVE-2025-38348 affecting package kernel for versions less than 6.6.96.1-1

In the Linux kernel, the following vulnerability has been resolved: wifi: p54: prevent buffer-overflow in p54rxeepromreadback Robert Morris reported: |If a malicious USB device pretends to be an Intersil p54 wifi |interface and generates an eepromreadback message with a large |eeprom-v1.len,...

CVE-2023-28904 Bypass of secure boot process

A logic flaw leading to a RAM buffer overflow in the bootloader component of the MIB3 infotainment unit allows an attacker with physical access to the MIB3 ECU to bypass firmware signature verification and run arbitrary code in the infotainment system at boot process...

CVE-2021-24018

A buffer underwrite vulnerability in the firmware verification routine of FortiOS before 7.0.1 may allow an attacker located in the adjacent network to potentially execute arbitrary code via a specifically crafted firmware image...