CVE-2020-14364

CVE-2020-14364 私の ring0 エクスプロイト...

AlmaLinux 9.2 [TuxCare] Security Update: iwl100-firmware / iwl1000-firmware / iwl105-firmware / etc (ALMALINUX9.2:CLSA-2024:1729015920)

The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2024:1729015920 advisory. - Improper validation in a model specific register MSR could allow a malicious program with ring0 access to modify SMM configuration while SM...

CVE-2018-1932X

CVE-2018-1932X（Rust Exploit POC）GIGABYTE APP Center v1.05.21 以前向け ターゲットがメモリ安全でないからといって、エクスプロイトもそうでなければならないわけではありません！ 使用された脆弱性 : CVE-2018-19320 - ring0 memcpy 類似機能 CVE-2018-19323 - マシン固有レジスタ（MSR）の読み書き。 テスト環境: 20H1: Windows 10 Kernel Version 19041 MP 1 procs Free x64 参考 Vergilius Project: カーネル構造体...

CVE-2018-19320

CVE-2018-19320 ring0のmemcpyのような機能を悪用して、Driver Signing Enforcement（DSE）を無効にする方法。詳細はこちら: http://deniable.org/windows/windows-callbacks 参考文献 https://cve.mitre.org/cgi-bin/cvename.cgi?name=2018-19320 https://www.secureauth.com/labs/advisories/gigabyte-drivers-elevation-privilege-vulnerabilities...

Astra Linux – Vulnerability in Linux 5.15

There is a use-after-free vulnerability in the ALSA PCM package within the Linux kernel. The SNDRVCTLIOCTLELEMREAD|WRITE32 function lacks locks that could be exploited in a use-after-free situation, potentially leading to an escalation of privileges to gain ring0 access from the system user. We...

CVE-2024-36355

Improper input validation in the SMM handler could allow an attacker with Ring0 access to write to SMRAM and modify execution flow for S3 sleep wake up, potentially resulting in arbitrary code execution...

CVE-2024-36355: Out-of-bounds Write

Improper input validation in the SMM handler could allow an attacker with Ring0 access to write to SMRAM and modify execution flow for S3 sleep wake up, potentially resulting in arbitrary code execution...

EUVD-2008-1149

Malware in sbrugna...

EUVD-2023-24757

Malicious code in bioql PyPI...

EUVD-2023-35626

Malicious code in bioql PyPI...

EUVD-2023-24775

Malicious code in bioql PyPI...

CVE-2024-36354: Improper Prevention of Lock Bit Modification

Improper input validation for DIMM serial presence detect SPD metadata could allow an attacker with physical access, ring0 access on a system with a non-compliant DIMM, or control over the Root of Trust for BIOS update, to bypass SMM isolation potentially resulting in arbitrary code execution at...

SUSE SLED15: kernel-firmware / kernel-firmware-all / kernel-firmware-amdgpu / etc (SUSE-SU-2024:3081-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2024:3081-1 advisory. - CVE-2023-31315: Fixed validation in a model specific register MSR that lead to modification of SMM...

SUSE SLES15: kernel-firmware-all / kernel-firmware-amdgpu / etc (SUSE-SU-2024:2980-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2024:2980-1 advisory. CVE-2023-31315: Fixed validation in a model specific register MSR that lead to modification of SMM configuration by malicious program with...

SUSE SLES15 Security Update : kernel-firmware (SUSE-SU-2024:2944-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2024:2944-1 advisory. - CVE-2023-31315: Fixed validation in a model specific register MSR that lead to modification of SMM configuration by malicious program with...

SUSE SLES12 Security Update : kernel-firmware (SUSE-SU-2024:2911-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2024:2911-1 advisory. - CVE-2023-31315: Fixed validation in a model specific register MSR that lead to modification of SMM configuration by malicious program with...

CVE-2023-31315

Improper validation in a model specific register MSR could allow a malicious program with ring0 access to modify SMM configuration while SMI lock is enabled, potentially leading to arbitrary code execution...

CVE-2023-31315

Improper validation in a model specific register MSR could allow a malicious program with ring0 access to modify SMM configuration while SMI lock is enabled, potentially leading to arbitrary code execution...

CVE-2023-31315

A flaw was found in hw. Improper validation in a model-specific register MSR could allow a malicious program with ring0 access to modify the SMM configuration while the SMI lock is enabled. This issue can lead to arbitrary code execution. Mitigation Mitigation for this issue is either not availab...

CVE-2023-31315: Improper Control of Generation of Code

Improper validation in a model specific register MSR could allow a malicious program with ring0 access to modify SMM configuration while SMI lock is enabled, potentially leading to arbitrary code execution...