215 matches found
s6_pcie_microblaze
Kit de hacking DIY para PCI Express Información general Contenido Configuración de la placa SP605 Configuración del software Ejemplos Uso de la API de Python Ataques DMA prácticos Ataques a la Option ROM Solución de problemas Compilación del proyecto desde el código fuente Información general Est...
PongoOS
pongoOS Un entorno de ejecución previo al arranque para placas Apple construido sobre checkra1n. Compilación en macOS Instale Xcode + utilidades de línea de comandos Ejecute make all Compilación en Linux Instale clang si tiene dudas, desde apt.llvm.org Instale ld64 y strip de cctools. En...
Astra Linux – Vulnerability in edk2
The BootPerformanceTable pointer is retrieved from an NVRAM variable within PEI. It is recommended that the PcdFirmwarePerformanceDataTableS3Support be set to FALSE...
UEFI Shell module embedded in SPI Flash can be used to bypass Secure Boot
Overview The UEFI Shell program may expose raw memory access capabilities that, if present in platform firmware for debugging or advanced support use cases, could be abused to undermine UEFI Secure Boot protections. When the UEFI Shell is included in SPI flash, an attacker with the ability to...
slot2 Amazon Linux 2023 UEFI Bootkit
slot2 is a two-stage UEFI GRUB2 bootkit designed to establish a persistent pre-OS implant on Amazon Linux 2023 x8664 EC2 instances. It installs a custom GRUB EFI image and Unified Kernel Image, creates a UEFI NVRAM boot entry ahead of the stock Amazon entry, executes an implant with network and...
CVE-2026-8863 CVE-2026-8863
Multiple Microsoft-sigend UEFI SHIM bootloaders are vulnerable to SecureBoot bypass. An attacker with administrative privileges or the ability to modify the boot process could use one of the vulnerable shim bootloaders to bypass Secure Boot protections and execute arbitrary code before the...
YellowKey Bitlocker Bypass Mitigation
YellowKey is a zero-day physical attack vulnerability discovered in May 2026 that allows attackers with physical access to completely bypass BitLocker encryption on Windows 11 devices. This is a mitigation that modifies the Windows Recovery Environment to remove or disable the vulnerable...
This Android vulnerability can break your lock screen in under 60 seconds
A vulnerability in Android devices can allow attackers to gain access to a phone in less than a minute. The vulnerability, tracked as CVE-2026-20435, affects certain MediaTek SoCs System-on-a-Chip using Trustonic’s TEE Trusted Execution Environment. That may sound rare, but reportedly that’s abou...
FreeRDP DoS Vulnerability (GHSA-3p57-rq4q-233x)
FreeRDP is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:freerdpproject:freerdp...
CVE-2025-14304 ASRock, ASRockRack, ASRockInd｜Motherboard - Protection Mechanism Failure
Certain motherboard models developed by ASRock and its subsidiaries, ASRockRack and ASRockInd. has a Protection Mechanism Failure vulnerability. Because IOMMU was not properly enabled, unauthenticated physical attackers can use a DMA-capable PCIe device to read and write arbitrary physical memory...
CVE-2025-14303
Certain motherboard models developed by MSI has a Protection Mechanism Failure vulnerability. Because IOMMU was not properly enabled, unauthenticated physical attackers can use a DMA-capable PCIe device to read and write arbitrary physical memory before the OS kernel and its security features are...
EUVD-2025-203865
Certain motherboard models developed by GIGABYTE has a Protection Mechanism Failure vulnerability. Because IOMMU was not properly enabled, unauthenticated physical attackers can use a DMA-capable PCIe device to read and write arbitrary physical memory before the OS kernel and its security feature...
MSI Motherboards 安全漏洞
MSI Motherboards are a line of motherboards from Taiwan, China-based Micro-Star MSI. A security vulnerability exists in MSI Motherboards that stems from not properly enabling the IOMMU, which could allow an unauthenticated physical attacker to read or write arbitrary physical memory before the...
Clevo UEFI firmware embedded BootGuard keys compromising Clevo's implementation of BootGuard
Overview Clevo’s UEFI firmware update packages included sensitive private keys used in their Intel Boot Guard implementation. This accidental exposure of the keys could be abused by an attacker to sign malicious firmware using Clevo’s Boot Guard trust chain, potentially compromising the pre-boot...
EUVD-2008-3881
Malware in sbrugna...
EUVD-2008-3886
Malware in sbrugna...
EUVD-2008-3888
Malware in sbrugna...
EUVD-2015-6792
Malware in sbrugna...