Physical Attacks Leading to Bypass of ASP Boot ROM Secure Boot

Summary Researchers shared a report titled “Code Execution on Zen 4 PSP using Voltage Fault Injection.” In the paper, the researchers reported their findings on Voltage Fault Injection VFI attacks targeting AMD “Zen 4” CPUs, specifically the Ryzen™ 8600G model. The researchers claim these types o...

Linux Distros Unpatched Vulnerability : CVE-2025-1272

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The Linux Kernel lockdown mode for kernel versions starting on 6.12 and above for Fedora Linux has the lockdown mode disabled without any warning. This may allo...

PT-2025-32327 · Undefined · Undefined

BREAKING: GRUB2 flaw CVE-2025-02725 in SUSE Linux enables pre-OS persistence. 🚨 Patch NOW: zypper patch --cve=CVE-2025-02725 Validate Secure Boot. Rebuild initramfs. Read more: 👉 https://t.co/0U2XsMxKqt https://t.co/kkKHlOi9JT...

PT-2025-32326 · Undefined · Undefined

📢BREAKING: Critical GRUB2 flaw in SUSE Linux CVE-2025-02724-1 allows Secure Boot bypass. Why it matters: ➤ 78% bootkit surge in 2024 ➤ Requires PHYSICAL access ➤ Patch w/ zypper patch --cve=SUSE-2025-02724-1 Read more: 👉 https://t.co/sNB7l9PO82 https://t.co/wVhCFQETKH...

Linux Distros Unpatched Vulnerability : CVE-2020-15780

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in drivers/acpi/acpiconfigfs.c in the Linux kernel before 5.7.7. Injection of malicious ACPI tables via configfs could be used by...

CISCO-SA-20190513-SECUREBOOT

creationtimestamp| type| source ---|---|--- 2025-07-30 03:49:44+00:00| seen| https://gist.github.com/iseki0/cde82900ce5cf723909622f903fd261b 2026-08-09 05:11:07+00:00| seen| Telegram/7Dig03ZzYy6YuIMrxr0eoO8Sk-WmRTHI4lqpQ9NI8qVQ 2026-08-10 00:00:09+00:00| seen|...

Exploit for Improper Input Validation in Samsung Samsung_Mobile

PoC exploit for CVE-2016-4038, a 0day vulnerability in System Management Mode code execution for Lenovo ThinkPad model line. The exploit targets the SystemSmmRuntimeRt UEFI driver GUID: 7C79AC8C-5E6C-4E3D-BA6F-C260EE7C172E and allows arbitrary code execution in System Management Mode. The...

The vulnerability of the Secure Boot component in Espressif Systems’ ESP series microcontrollers allows a hacker to redirect the execution of commands to an arbitrary address.

The vulnerability of the Secure Boot v2 component in Espressif Systems’ microcontrollers is related to synchronization errors when using a common resource “Race Condition”. Exploiting this vulnerability could allow an attacker to redirect the execution of commands to an arbitrary address...

July 22, 2025—KB5062663 (OS Builds 22631.5699) Preview

None None...

July 22, 2025—KB5062660 (OS Build 26100.4770) Preview

None None...

July 22, 2025—KB5062649 (OS Build 19045.6159) Preview

None None...

July 13, 2025—KB5064489 (OS Build 26100.4656) Out-of-band for Windows

None None...

CBL Mariner 2.0 Security Update: grub2 (CVE-2025-0624)

The version of grub2 installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-0624 advisory. - A flaw was found in grub2. During the network boot process, when trying to search for the configuration file,...

EulerOS 2.0 SP10 : grub2 (EulerOS-SA-2025-1776)

According to the versions of the grub2 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A flaw was found in command/gpg. In some scenarios, hooks created by loaded modules are not removed when the related module is unloaded. This flaw...

EulerOS 2.0 SP10 : grub2 (EulerOS-SA-2025-1799)

According to the versions of the grub2 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A flaw was found in command/gpg. In some scenarios, hooks created by loaded modules are not removed when the related module is unloaded. This flaw...

KB5062558: Cumulative security update for Internet Explorer: July 8, 2025

None None...

KB5062799: Servicing stack update for Windows 10, version 1607 and Windows Server 2016: July 8, 2025

None None...

EulerOS 2.0 SP13 : grub2 (EulerOS-SA-2025-1703)

According to the versions of the grub2 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A flaw was found in command/gpg. In some scenarios, hooks created by loaded modules are not removed when the related module is unloaded. This flaw...

EulerOS 2.0 SP13 : grub2 (EulerOS-SA-2025-1688)

According to the versions of the grub2 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A flaw was found in command/gpg. In some scenarios, hooks created by loaded modules are not removed when the related module is unloaded. This flaw...

CVE-2023-28904 Bypass of secure boot process

A logic flaw leading to a RAM buffer overflow in the bootloader component of the MIB3 infotainment unit allows an attacker with physical access to the MIB3 ECU to bypass firmware signature verification and run arbitrary code in the infotainment system at boot process...