GHSA-3MQ9-XHGQ-R7GJ EVE: SSH as Root Unlockable Without Triggering Measured Boot

Impact On boot, the Pillar container checks for /config/authorizedkeys. If present with a valid public key, it enables SSH on port 22 with root login. The /config partition is not protected by measured boot, is mutable and unencrypted. This enables an attacker with physical access to the device t...

EUVD-2023-24300

Malicious code in bioql PyPI...

Exploit for Improper Initialization in Linux Linux_Kernel

Dirty...Quoi? Il s'agit de la preuve de concept de Max Kellerm...