CVE-2025-55575

smm-panel-sqliCVE-2025-55575 Обнаружение SQL-инъекции с временной задержкой для SMM Panel Обзор Этот шаблон обнаруживает SQL-инъекцию с временной задержкой в параметре servicedetail SMM Panel через HTTP POST-запросы к /ajaxdata. Эксплуатация может позволить удалённым злоумышленникам получить дост...

EUVD-2026-66226

SMM IHISI command handler, FMTSWriteUseIntelLib, for FMTS command 0x32, read and write data without checking buffer size and could cause buffer overflow...

GIGABYTE-H510M-K-V2-BIOS-SMM-Reverse-Engineering-CVE-2025-7026-7027-7028-7029-Research

GIGABYTE H510M K V2 BIOS SMM Reverse-Engineering & Forschung zu CVE-2025-7026/7027/7028/7029 Statisches Reverse-Engineering eines GIGABYTE H510M K V2 H510MKV2.F3 BIOS-Images: vollständige UEFI-Firmware-Volume-Extraktionsanalyse des PI-Spezifikations-SMM-Core-Speicher- Allokators und eine gezielte...

smm_usbrt_poc

UsbRt SMM Privilegienerweiterung Dies ist ein Proof-of-Concept-Code, der die Ausnutzung der Schwachstelle CVE-2017-5721 demonstriert. Dieser PoC führt dazu, dass ein System aufgrund einer aufgetretenen Machine Check Exception vollständig hängen bleibt. Alles, was du brauchst, ist ein installierte...

CVE-2026-9805

SMM IHISI command handler, FMTSWriteUseIntelLib, for FMTS command 0x32, read and write data without checking buffer size and could cause buffer overflow...

CVE-2026-9805 FMTSWriteUseIntelLib: FMTS SMM IHISI Buffer Overflow

SMM IHISI command handler, FMTSWriteUseIntelLib, for FMTS command 0x32, read and write data without checking buffer size and could cause buffer overflow...

CVE-2026-9805

CVE-2026-9805 affects Insyde SMM firmware , specifically the IHISI command handler (FMTSWriteUseIntelLib) responsible for processing FMTS command 0x32 . The handler reads and writes data without validating buffer size, potentially leading to a buffer overflow . The CNA-assigned CVSS 3.1 score is ...

SmmExploit

SmmExploit Dies ist ein Bericht und ein Exploit für CVE-2021-26943, die Kernel-zu-SMM lokale Privilegienausweitung Schwachstelle im ASUS UX360CA BIOS Version 303. Das Problem wurde in der Version 304 behoben. Issue Description Zusammenfassung Das UX360CA BIOS Version 303 enthält 3 anfällige Modul...

Platbox

Platbox Ferramenta de Avaliação de UEFI e SMM Funcionalidades Platbox é uma ferramenta que auxilia na avaliação da segurança da plataforma: Despeja os registradores da plataforma que são interessantes do ponto de vista de segurança Travas de Flash Travas de MMIO e Remapeamento Base e Travas de SM...

SmmBackdoor

Backdoor SMM per piattaforme basate su UEFI !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!! Questo è un progetto legacy abbandonato, per la versione corrente della backdoor consulta la pagina del progetto SMM Backdoor Next Gen e la sua documentazione:...

K000162855: Intel SMM vulnerability CVE-2025-20028

Security Advisory Description Time-of-check time-of-use race condition in the WheaERST SMM module for some IntelR reference platforms may allow an escalation of privilege. System software adversary with a privileged user combined with a high complexity attack may enable escalation of privilege...

CVE-2025-31936

A flaw was found in IntelR XeonR 6 processors when using IntelR TDX within System Management Mode SMM. Improper handling of overlap between protected memory ranges may allow a local attacker with privileged user access to escalate privileges. This vulnerability could lead to high impact on...

Linux Distros Unpatched Vulnerability : CVE-2026-20901

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper input validation for some IntelR XeonR processors within firmware may allow an escalation of privilege. Startup code and smm adversary with a privilege...

Linux Distros Unpatched Vulnerability : CVE-2025-31936

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper handling of overlap between protected memory ranges for some IntelR XeonR 6 processors when using IntelR TDX within SMM may allow an escalation of...

CVE-2026-20901

Improper input validation for some IntelR XeonR processors within firmware may allow an escalation of privilege. Startup code and smm adversary with a privileged user combined with a high complexity attack may enable data alteration. This result may potentially occur via local access when attack...

CVE-2026-20901

Improper input validation for some IntelR XeonR processors within firmware may allow an escalation of privilege. Startup code and smm adversary with a privileged user combined with a high complexity attack may enable data alteration. This result may potentially occur via local access when attack...

UBUNTU-CVE-2026-20901

Improper input validation for some IntelR XeonR processors within firmware may allow an escalation of privilege. Startup code and smm adversary with a privileged user combined with a high complexity attack may enable data alteration. This result may potentially occur via local access when attack...

CVE-2026-20901

Improper input validation for some IntelR XeonR processors within firmware may allow an escalation of privilege. Startup code and smm adversary with a privileged user combined with a high complexity attack may enable data alteration. This result may potentially occur via local access when attack...

CVE-2026-20901

CVE-2026-20901 concerns firmware input validation issues in some Intel Xeon processors. The root cause is improper input validation in startup code and SMM pathways, creating a pathway for a local attacker with privileged access and a high-complexity attack to alter data. The exploit requires loc...

EUVD-2026-56788

Improper input validation for some IntelR XeonR processors within firmware may allow an escalation of privilege. Startup code and smm adversary with a privileged user combined with a high complexity attack may enable data alteration. This result may potentially occur via local access when attack...