The vulnerabilities of the System Management Module (SMM/SMM2) and the Fan Power Controller (FPC) in the microprogramming software for Lenovo ThinkSystem, ThinkAgile, NeXtScale storage systems, as well as Lenovo CP-CB-10 laptops, allow attackers to execute arbitrary commands.

The vulnerability of the System Management Module SMM/SMM2 and the Fan Power Controller FPC in the microprogramming operating systems of Lenovo’s ThinkSystem, ThinkAgile, NeXtScale storage systems, and Lenovo CP-CB-10 laptops exists due to the failure to take measures to neutralize the special...

The vulnerabilities of the System Management Module (SMM/SMM2) and the Fan Power Controller (FPC) in the microprogramming software for Lenovo ThinkSystem, ThinkAgile, NeXtScale storage systems, as well as Lenovo CP-CB-10 laptops, allow attackers to execute arbitrary commands.

The vulnerability of the System Management Module SMM/SMM2 and the Fan Power Controller FPC in the microprogramming operating systems of Lenovo’s ThinkSystem, ThinkAgile, NeXtScale storage systems, and Lenovo CP-CB-10 laptops exists due to the failure to take measures to neutralize the special...

The vulnerabilities of the System Management Module (SMM/SMM2) and the Fan Power Controller (FPC) in the microprogramming software for Lenovo ThinkSystem, ThinkAgile, NeXtScale storage systems, as well as Lenovo CP-CB-10 laptops, allow attackers to execute arbitrary commands.

The vulnerability of the System Management Module SMM/SMM2 and the Fan Power Controller FPC in the microprogramming operating systems of Lenovo’s ThinkSystem, ThinkAgile, NeXtScale storage systems, and Lenovo CP-CB-10 laptops exists due to the failure to take measures to neutralize the special...

USN-6707-2: Linux kernel (ARM laptop) vulnerabilities

Lonial Con discovered that the netfilter subsystem in the Linux kernel did not properly handle element deactivation in certain cases, leading to a use-after-free vulnerability. A local attacker could use this to cause a denial of service system crash or possibly execute arbitrary code...

PT-2024-2542 · Lenovo · Lenovo Laptops

Name of the Vulnerable Software and Affected Versions: Lenovo laptops affected versions not specified Description: The issue is related to the implementation of System Management Mode SMM in Lenovo laptop firmware, which is associated with insufficient input validation. This could allow an attack...

CVE-2023-38541

Insecure inherited permissions in some Intel HID Event Filter drivers for Windows 10 for some Intel NUC laptop software installers before version 2.2.2.1 may allow an authenticated user to potentially enable escalation of privilege via local access...

laptops-ausleihen.de Improper Access Control vulnerability OBB-3819242

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

laptops-mieten.de Improper Access Control vulnerability OBB-3776758

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

laptops-miete.de Improper Access Control vulnerability OBB-3776757

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

laptops-leihen.de Improper Access Control vulnerability OBB-3771255

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

AI Hacking Village at DEF CON This Year

At DEF CON this year, Anthropic, Google, Hugging Face, Microsoft, NVIDIA, OpenAI and Stability AI will all open up their models for attack. The DEF CON event will rely on an evaluation platform developed by Scale AI, a California company that produces training for AI applications. Participants wi...

HotKey Clipboard 2.1.0.6 - Privilege Escalation Unquoted Service Path Vulnerability

Exploit Title: HotKey Clipboard 2.1.0.6 - Privilege Escalation Unquoted Service Path Exploit Author : Wim Jaap van Vliet Vendor Homepage: www.clevo.com.tw Software Link: https://enstrong.blob.core.windows.net/en-driver/PDXXPNX1/Others/CC301006.zip Version: 2.1.0.6 Tested on: Windows 11 Pro...

The vulnerability of BIOS microprogramming software in Dell laptops, related to the use of uninitialized resources, allows a hacker to execute arbitrary code.

The vulnerability of BIOS microprogramming software in Dell laptops relates to the use of an uninitialized resource. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of BIOS microprogramming software in Dell laptops, related to insufficient validation of input data, allows a hacker to execute arbitrary code.

The vulnerability of BIOS microprogramming software in Dell laptops is related to insufficient verification of input data. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

The vulnerability of BIOS microprogramming software in Dell laptops, related to the execution of operations beyond buffer boundaries in memory, allows a hacker to execute arbitrary code.

The vulnerability of BIOS microprogramming software in Dell laptops relates to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

The vulnerability of the BIOS microprogramming software in Dell laptops allows a hacker to execute arbitrary code.

The vulnerability of BIOS microprogramming software in Dell laptops is related to insufficient verification of input data. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

The vulnerability of the installed Windows operating system on HP laptops allows attackers to gain elevated privileges.

The vulnerability of the installed Windows operating system on HP laptops relates to incorrect path name restrictions for the restricted access directory. Exploiting this vulnerability can allow attackers to gain increased privileges...

The vulnerability of BIOS microprogramming software in Dell laptops and workstations arises from insufficient validation of input data. This allows attackers to execute arbitrary code.

The vulnerability of the BIOS software on Dell laptops and workstations exists due to insufficient testing of input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Dell Alienware Command Center Input Validation Error Vulnerability

Dell Alienware Command Center is a series of gaming laptops from Dell, U.S.A. An input validation error vulnerability exists in Dell Alienware Command Center version 5.5.37.0 and prior, which stems from incorrect validation of user input. An attacker could use this vulnerability to send malicious...

Dell Alienware m17 R5 BIOS buffer overflow vulnerability

Dell Alienware is a line of gaming laptops from Dell USA. versions prior to Dell Alienware m17 R5 BIOS 1.2.2 contain a buffer overflow vulnerability that stems from a program boundary error when handling untrusted input. An attacker could use this vulnerability to send content larger than the...