shim

shim, un cargador de arranque UEFI de primera etapa shim es una aplicación EFI trivial que, al ejecutarse, intenta abrir y ejecutar otra aplicación. Inicialmente intentará hacerlo mediante las llamadas estándar de EFI LoadImage y StartImage. Si estas fallan porque Secure Boot está habilitado y el...

abstractshimmer

ABSTRACT SHIMMER CVE-2020-15257 Este repositorio contiene el código de exploit de prueba de concepto para CVE-2020-15257, como se describe en nuestra entrada de blog. Aunque está escrito para containerd 1.2.x y 1.3.x, debería funcionar en versiones sin parchear de containerd 1.4.x. root@kitploit:...

shim-review

Este repositorio es para la revisión de solicitudes de firma de shim. Para crear una solicitud de revisión: clona este repositorio preferiblemente haz un fork edita la plantilla a continuación agrega el shim.efi que se va a firmar agrega los registros de compilación agrega cualquier...

ShimMe

ShimMe Herramientas de la charla DEFCON 32 "SHIM me what you got - Manipulando Shim y Office para inyección de código" Office Injector - Invoca un método RPC en el servicio OfficeClickToRun que inyecta una DLL en un proceso suspendido que se ejecuta como NT AUTHORITY\SYSTEM lanzado por el servici...

CVE-2026-8863

CVE-2026-8863 Colección de los binarios firmados de shim UEFI Secure Boot afectados por CVE-2026-8863, con la versión de shim incrustada, el firmante Authenticode y los hashes de revocación de cada imagen. Las versiones que incluyen el shim firmado byte-idéntico se consolidan en una sola fila: un...

MAL-2026-16087 Malicious code in polygon-toolkits-validator (npm)

[email protected] exports Node crypto helper wrappers, but validateinput base64-encodes its argument and POSTs it to https://raydium-clmm.maingoal.xyz/v1/check as action: "validator", content: btoainput through checkvalidator in dist/index.js, then returns true without validating...

EulerOS 2.0 SP12 : shim (EulerOS-SA-2026-3386)

According to the versions of the shim packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Issue summary: A specially crafted PKCS7 or S/MIME signed message could trigger a use-after-free during PKCS7 signature verification. Impact summary...

EulerOS 2.0 SP12 : shim (EulerOS-SA-2026-3311)

According to the versions of the shim package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Issue summary: A specially crafted PKCS7 or S/MIME signed message could trigger a use-after-free during PKCS7 signature verification. Impact summary:...

Astra Linux – Vulnerability in grub2

The GRUB2’s shimlock verifier allows non-kernel files to be loaded on shim-powered secure boot systems. Allowing such files to be loaded may lead to unverified code and modules being loaded in GRUB2, thereby breaking the secure boot trust-chain...

EUVD-2026-59485

In the Linux kernel, the following vulnerability has been resolved: bpf: Reject sleepable BPFLSMCGROUP programs at load time The cgroup shim runs under rcureadlockdontmigrate, so we should not attach any sleepable BPF programs there. Add support to the verifier to explicitly reject attempts to lo...

CVE-2026-74338 bpf: Reject sleepable BPF_LSM_CGROUP programs at load time

In the Linux kernel, the following vulnerability has been resolved: bpf: Reject sleepable BPFLSMCGROUP programs at load time The cgroup shim runs under rcureadlockdontmigrate, so we should not attach any sleepable BPF programs there. Add support to the verifier to explicitly reject attempts to lo...

CVE-2026-53970

ZeroBrew version 0.3.1 and prior contains a missing integrity verification vulnerability in the Ruby compatibility shim that allows network attackers to execute arbitrary code by substituting malicious content at formula resource or URL-based patch URLs without checksum validation. Attackers can...

CVE-2026-53970

ZeroBrew 0.3.1 and earlier is affected by a missing integrity verification vulnerability in the Ruby compatibility shim (shim.rb). An attacker could substitute malicious content at formula resources or URL-based patch URLs without checksum validation, allowing remote code execution when downloads...

EUVD-2026-58684

ZeroBrew version 0.3.1 and prior contains a missing integrity verification vulnerability in the Ruby compatibility shim that allows network attackers to execute arbitrary code by substituting malicious content at formula resource or URL-based patch URLs without checksum validation. Attackers can...

CLEANSTART-2026-TO97243 Security fixes in yunikorn-k8shim 1.8.0-r1

Package yunikorn-k8shim version 1.8.0-r1 fixes 3 vulnerabilities: ghsa-vgwf-h737-ff37, ghsa-f5wc-c3c7-36mc, ghsa-5cgq-3rg8-m6cv...

Linux Distros Unpatched Vulnerability : CVE-2026-19411

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A NULL pointer vulnerability has been found in the the shim application of dp.c library. A missing NULL pointer could allow attackers to perform a denial of...

CVE-2026-19411

A NULL pointer vulnerability has been found in the the shim application of dp.c library. A missing NULL pointer could allow attackers to perform a denial of service attack on a system that uses shim application for UEFI bootloader...

AZL-95637 CVE-2026-19411 affecting package shim-unsigned-x64 16.1-2

A NULL pointer vulnerability has been found in the the shim application of dp.c library. A missing NULL pointer could allow attackers to perform a denial of service attack on a system that uses shim application for UEFI bootloader...

AZL-95634 CVE-2026-19411 affecting package shim-unsigned-aarch64 16.1-2

A NULL pointer vulnerability has been found in the the shim application of dp.c library. A missing NULL pointer could allow attackers to perform a denial of service attack on a system that uses shim application for UEFI bootloader...

DEBIAN-CVE-2026-19411

A NULL pointer vulnerability has been found in the the shim application of dp.c library. A missing NULL pointer could allow attackers to perform a denial of service attack on a system that uses shim application for UEFI bootloader...