Lucene search
+L

1035 matches found

Kitploit
Kitploit
added 2026/09/16 1:57 a.m.9 views

skitter-creek-bath-salts

skitter-creek-bath-salts Unlockingeverything on the CPU with DRAM scrambling — PSP, C6, microcode, SMM, and anything else the specs left out. &x == &x. Usually. Poke the DRAM controller and an address can be made to land wherever you want in memory. skitter-creek-bath-salts modifies the bottom...

7.6AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/16 12:15 a.m.9 views

mmiotic

mmiotic An exploratory tool for MMIO timing — time any physical address, and dissect the hardware off the latency. Unexpectedly useful for hardware reverse-engineering, hypervisor fingerprinting, side-channelling device activity, register characterization, calibrating malicious triggers, and...

6AI score
SaveExploits0References3
Kitploit
Kitploit
added 2026/09/15 11:29 p.m.11 views

SmmExploit

SmmExploit This is a report and an exploit of CVE-2021-26943, the kernel-to-SMM local privilege escalation vulnerability in ASUS UX360CA BIOS version 303. The issue was fixed in the version 304. Issue Description Summary UX360CA BIOS version 303 has 3 vulnerable modules that allow an attacker wit...

8.2CVSS8.3AI score0.00937EPSS
SaveExploits2References3
Kitploit
Kitploit
added 2026/09/15 11:02 p.m.8 views

z3

Z3 Z3 is a theorem prover from Microsoft Research. It is licensed under the MIT license. Windows binary distributions include C++ runtime redistributables If you are not familiar with Z3, you can start here. Pre-built binaries for stable and nightly releases are available here. Z3 can be built...

5.8AI score
SaveExploits0References11
Kitploit
Kitploit
added 2026/09/15 10:43 p.m.8 views

SmmBackdoor

SMM backdoor for UEFI based platforms !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!! This is legacy abandoned project, for current version of the backdoor check SMM Backdoor Next Gen project page and its documentation: https://github.com/Cr4sh/SmmBackdoorNg...

6AI score
SaveExploits0References3
Kitploit
Kitploit
added 2026/09/15 8:02 a.m.7 views

Platbox

Platbox UEFI and SMM Assessment Tool Features Platbox is a tool that helps assessing the security of the platform: Dumps the platform registers that are interesting security-wise Flash Locks MMIO and Remapping Locks SMM Base and Locks MSRs RW access to the PCI configuration space of devices. RW t...

6AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/15 5:53 a.m.5 views

smm_usbrt_poc

UsbRt SMM Privilege Elevation This is a Proof-of-Concept code that demonstrates the exploitation of the CVE-2017-5721 vulnerability. This PoC causes a system to be completely stuck because of Machine Check Exception occurred. All you need is CHIPSEC Framework installed. And don't forget to put...

7.5CVSS7.7AI score0.00865EPSS
SaveExploits0References1
OSV
OSV
added 2026/09/14 12:00 a.m.6 views

UBUNTU-CVE-2026-89604

In the Linux kernel, the following vulnerability has been resolved: efivarfs: Rate limit statfs handler Ravi reports that statfs may be called by unprivileged users on the efivarfs mount point, which may result in a flood of calls to the QueryVariableInfo runtime service. These calls are...

5.9AI score0.00205EPSS
SaveExploits0References7
UbuntuCve
UbuntuCve
added 2026/09/14 12:00 a.m.5 views

CVE-2026-89604

In the Linux kernel, the following vulnerability has been resolved: efivarfs: Rate limit statfs handler Ravi reports that statfs may be called by unprivileged users on the efivarfs mount point, which may result in a flood of calls to the QueryVariableInfo runtime service. These calls are...

5.8AI score0.00205EPSS
SaveExploits0References6
Tenable Nessus
Tenable Nessus
added 2026/09/12 12:00 a.m.8 views

Linux Distros Unpatched Vulnerability : CVE-2026-89604

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - efivarfs: Rate limit statfs handler Ravi reports that statfs may be called by unprivileged users on the efivarfs mount point, which may result in a flood of cal...

5.8AI score0.00205EPSS
SaveExploits0References3
NVD
NVD
added 2026/09/11 8:19 p.m.6 views

CVE-2026-89604

In the Linux kernel, the following vulnerability has been resolved: efivarfs: Rate limit statfs handler Ravi reports that statfs may be called by unprivileged users on the efivarfs mount point, which may result in a flood of calls to the QueryVariableInfo runtime service. These calls are...

0.00205EPSS
SaveExploits0References6
OSV
OSV
added 2026/09/11 8:19 p.m.6 views

DEBIAN-CVE-2026-89604

In the Linux kernel, the following vulnerability has been resolved: efivarfs: Rate limit statfs handler Ravi reports that statfs may be called by unprivileged users on the efivarfs mount point, which may result in a flood of calls to the QueryVariableInfo runtime service. These calls are...

5.9AI score0.00205EPSS
SaveExploits0References1
OSV
OSV
added 2026/09/11 8:19 p.m.6 views

AZL-100856 CVE-2026-89604 affecting package kernel 6.6.150.1-1

In the Linux kernel, the following vulnerability has been resolved: efivarfs: Rate limit statfs handler Ravi reports that statfs may be called by unprivileged users on the efivarfs mount point, which may result in a flood of calls to the QueryVariableInfo runtime service. These calls are...

5.8AI score0.00205EPSS
SaveExploits0References1
CVE
CVE
added 2026/09/11 7:45 p.m.9 views

CVE-2026-89604

CVE-2026-89604 affects the Linux kernel's efivarfs filesystem. Unprivileged users can repeatedly call statfs() on the efivarfs mount point, triggering a flood of calls to the QueryVariableInfo() UEFI runtime service. On x86 systems where the EFI variable store is backed by SMM (System Management ...

5.8AI score0.00205EPSS
SaveExploits0References6
OSV
OSV
added 2026/09/11 7:45 p.m.6 views

CVE-2026-89604 efivarfs: Rate limit statfs() handler

In the Linux kernel, the following vulnerability has been resolved: efivarfs: Rate limit statfs handler Ravi reports that statfs may be called by unprivileged users on the efivarfs mount point, which may result in a flood of calls to the QueryVariableInfo runtime service. These calls are...

5.9AI score
SaveExploits0References9
Debian CVE
Debian CVE
added 2026/09/11 7:45 p.m.9 views

CVE-2026-89604

In the Linux kernel, the following vulnerability has been resolved: efivarfs: Rate limit statfs handler Ravi reports that statfs may be called by unprivileged users on the efivarfs mount point, which may result in a flood of calls to the QueryVariableInfo runtime service. These calls are...

5.9AI score0.00205EPSS
SaveExploits0
Cvelist
Cvelist
added 2026/09/11 7:45 p.m.24 views

CVE-2026-89604 efivarfs: Rate limit statfs() handler

In the Linux kernel, the following vulnerability has been resolved: efivarfs: Rate limit statfs handler Ravi reports that statfs may be called by unprivileged users on the efivarfs mount point, which may result in a flood of calls to the QueryVariableInfo runtime service. These calls are...

0.00205EPSS
SaveExploits0References6
Kitploit
Kitploit
added 2026/09/11 3:23 p.m.5 views

GIGABYTE-H510M-K-V2-BIOS-SMM-Reverse-Engineering-CVE-2025-7026-7027-7028-7029-Research

GIGABYTE H510M K V2 BIOS SMM Reverse-Engineering & CVE-2025-7026/7027/7028/7029 Research Static reverse-engineering of a GIGABYTE H510M K V2 H510MKV2.F3 BIOS image: full UEFI firmware-volume extraction analysis of the PI-spec SMM Core memory allocator and a targeted hunt for the four SMM...

8.2CVSS7.9AI score0.00262EPSS
SaveExploits1
Positive Technologies
Positive Technologies
added 2026/09/11 12:00 a.m.8 views

PT-2026-90320

In the Linux kernel, the following vulnerability has been resolved: efivarfs: Rate limit statfs handler Ravi reports that statfs may be called by unprivileged users on the efivarfs mount point, which may result in a flood of calls to the QueryVariableInfo runtime service. These calls are...

5.8AI score0.00205EPSS
SaveExploits0References5
Kitploit
Kitploit
added 2026/09/09 11:51 a.m.7 views

CVE-2025-55575

smm-panel-sqliCVE-2025-55575 Time-based SQL Injection Detection for SMM Panel Overview This template detects a time-based SQL Injection vulnerability in the servicedetail parameter of the SMM Panel via HTTP POST requests to /ajaxdata. Exploitation can allow remote attackers to access sensitive da...

9.8CVSS6.2AI score0.00446EPSS
SaveExploits1
Rows per page
Query Builder