225 matches found
ipxe
iPXE 网络启动加载器 iPXE 是领先的开源网络引导固件。它提供了完整的 PXE 实现，并增强了诸如以下功能： 通过 HTTP 或 HTTPS 从 Web 服务器启动， 从 iSCSI、FCoE 或 AoE SAN 启动， 使用脚本控制引导过程， 创建交互式表单和菜单。 您可以使用 iPXE 替换网络卡上的现有 PXE ROM，或者链加载到 iPXE 中以获得 iPXE 的功能，而无需重新刷写的麻烦。 iPXE 是免费的开源软件，根据 GNU GPL 许可证授权（部分内容采用与 GPL 兼容的许可证）。 您可以下载滚动发布二进制文件（从最新提交构建），或使用最新的稳定发布版。...
PXEThief
PXEThief PXEThief 是一套工具，实现了在 DEF CON 30 演讲《从 Configuration Manager 中提取密码》（https://forum.defcon.org/node/241925）中讨论的攻击路径，针对 Microsoft Endpoint Configuration Manager（ConfigMgr，仍常称为...
bitlocker-bypass-research
BitLocker 绕过研究 个人安全研究项目——利用 CVE-2023-21563（BitPixie）绕过 BitLocker 全盘加密。 这是什么 2025年10月，我对一台启用了 BitLocker 的企业笔记本电脑进行了物理恢复评估。员工忘记了密码，恢复密钥也找不到。我利用一个已知漏洞（CVE-2023-21563）从内存中提取了卷主密钥，绕过了 BitLocker，恢复了对系统的完全访问权限。 使用的工具/技术 CVE-2023-21563 — 通过 PXE 软重启绕过 BitLocker（BitPixie 框架） CVE-2024-1086 — Linux 内核...
Linux Distros Unpatched Vulnerability : CVE-2026-56115
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Bootimus through 0.1.70 contains a broken access control vulnerability that allows authenticated low- privileged users to perform administrative actions by...
USN-8421-1: Ironic vulnerabilities
Dmitry Tantsur and Tuomo Tanskanen discovered that Ironic did not properly validate file paths when handling ISO images. A privileged authenticated remote user could use this issue to perform path traversal via a crafted ISO image and overwrite arbitrary files on the Ironic conductor...
USN-8421-1 ironic vulnerabilities
Dmitry Tantsur and Tuomo Tanskanen discovered that Ironic did not properly validate file paths when handling ISO images. A privileged authenticated remote user could use this issue to perform path traversal via a crafted ISO image and overwrite arbitrary files on the Ironic conductor...
CVE-2026-44917
OpenStack Ironic before 35.0.2 allows a malicious authenticated project admin or manager to read local files on the Ironic conductor via a pxetemplate...
CVE-2026-44917
OpenStack Ironic before 35.0.2 allows a malicious authenticated project admin or manager to read local files on the Ironic conductor via a pxetemplate...
CVE-2026-44917
OpenStack Ironic before 35.0.2 allows a malicious authenticated project admin or manager to read local files on the Ironic conductor via a pxetemplate...
CVE-2026-44917
OpenStack Ironic before 35.0.2 allows a malicious authenticated project admin or manager to read local files on the Ironic conductor via a pxetemplate...
EUVD-2026-34202
OpenStack Ironic before 35.0.2 allows a malicious authenticated project admin or manager to read local files on the Ironic conductor via a pxetemplate...
CVE-2026-44917
OpenStack Ironic before 35.0.2 allows a malicious authenticated project admin or manager to read local files on the Ironic conductor via a pxetemplate...
CVE-2026-44917
OpenStack Ironic before 35.0.2 allows a malicious authenticated project admin or manager to read local files on the Ironic conductor via a pxetemplate...
OpenStack Ironic 安全漏洞
OpenStack Ironic is an integrated OpenStack application. It is used to configure bare machines rather than virtual machines. Versions of OpenStack Ironic prior to 35.0.2 contained a security vulnerability. This vulnerability stemmed from allowing malicious project administrators or managers to re...
CVE-2025-62877 Harvest may expose OS default ssh login password via SUSE Virtualization Interactive Installer
Projects using the SUSE Virtualization Harvester environment may expose the OS default ssh login password if they are using the 1.5.x or 1.6.x interactive installer to either create a new cluster or add new hosts to an existing cluster. The environment is not affected if the PXE boot mechanism is...
CVE-2025-62877
CVE-2025-62877 affects SUSE Virtualization (Harvester) where the interactive installer on Harvester 1.5.x–1.6.x may expose the OS default SSH password when creating a new cluster or adding hosts. The issue does not occur when PXE boot with the Harvester configuration is used. Affected component i...
CVE-2025-62877 Harvest may expose OS default ssh login password via SUSE Virtualization Interactive Installer
Projects using the SUSE Virtualization Harvester environment may expose the OS default ssh login password if they are using the 1.5.x or 1.6.x interactive installer to either create a new cluster or add new hosts to an existing cluster. The environment is not affected if the PXE boot mechanism is...
EUVD-2020-24555
Malware in sbrugna...