Lucene search
+L

1004 matches found

Kitploit
Kitploit
added 2026/08/26 7:22 p.m.1 views

CVE-2025-55575

smm-panel-sqliCVE-2025-55575 Zeitbasierte SQL-Injection-Erkennung für SMM Panel Übersicht Diese Vorlage erkennt eine zeitbasierte SQL-Injection -Schwachstelle im Parameter servicedetail des SMM Panels über HTTP-POST-Anfragen an /ajaxdata. Ausnutzung kann es entfernten Angreifern ermöglichen, auf...

9.8CVSS5.3AI score0.00446EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/08/26 8:55 a.m.2 views

GIGABYTE-H510M-K-V2-BIOS-SMM-Reverse-Engineering-CVE-2025-7026-7027-7028-7029-Research

GIGABYTE H510M K V2 BIOS SMM Reverse-Engineering & Forschung zu CVE-2025-7026/7027/7028/7029 Statisches Reverse-Engineering eines GIGABYTE H510M K V2 H510MKV2.F3 BIOS-Images: vollständige UEFI-Firmware-Volume-Extraktionsanalyse des PI-Spezifikations-SMM-Core-Speicher- Allokators und eine gezielte...

8.2CVSS7.8AI score0.00252EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/08/26 7:11 a.m.3 views

smm_usbrt_poc

UsbRt SMM Privilegienerweiterung Dies ist ein Proof-of-Concept-Code, der die Ausnutzung der Schwachstelle CVE-2017-5721 demonstriert. Dieser PoC führt dazu, dass ein System aufgrund einer aufgetretenen Machine Check Exception vollständig hängen bleibt. Alles, was du brauchst, ist ein installierte...

7.5CVSS7.7AI score0.00865EPSS
SaveExploits0References1
NVD
NVD
added 2026/08/26 5:18 a.m.2 views

CVE-2026-9805

SMM IHISI command handler, FMTSWriteUseIntelLib, for FMTS command 0x32, read and write data without checking buffer size and could cause buffer overflow...

2.7CVSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/08/26 1:00 a.m.8 views

CVE-2026-9805 FMTSWriteUseIntelLib: FMTS SMM IHISI Buffer Overflow

SMM IHISI command handler, FMTSWriteUseIntelLib, for FMTS command 0x32, read and write data without checking buffer size and could cause buffer overflow...

2.7CVSS
SaveExploits0References1
CVE
CVE
added 2026/08/26 1:00 a.m.9 views

CVE-2026-9805

CVE-2026-9805 affects Insyde SMM firmware , specifically the IHISI command handler (FMTSWriteUseIntelLib) responsible for processing FMTS command 0x32 . The handler reads and writes data without validating buffer size, potentially leading to a buffer overflow . The CNA-assigned CVSS 3.1 score is ...

2.7CVSS5.7AI score
SaveExploits0References1
EUVD
EUVD
added 2026/08/26 1:00 a.m.4 views

EUVD-2026-66226

SMM IHISI command handler, FMTSWriteUseIntelLib, for FMTS command 0x32, read and write data without checking buffer size and could cause buffer overflow...

2.7CVSS5.7AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/08/25 11:56 p.m.2 views

SmmExploit

SmmExploit Dies ist ein Bericht und ein Exploit für CVE-2021-26943, die Kernel-zu-SMM lokale Privilegienausweitung Schwachstelle im ASUS UX360CA BIOS Version 303. Das Problem wurde in der Version 304 behoben. Issue Description Zusammenfassung Das UX360CA BIOS Version 303 enthält 3 anfällige Modul...

8.2CVSS8AI score0.00937EPSS
SaveExploits2References3
Kitploit
Kitploit
added 2026/08/25 1:17 a.m.2 views

Platbox

Platbox Ferramenta de Avaliação de UEFI e SMM Funcionalidades Platbox é uma ferramenta que auxilia na avaliação da segurança da plataforma: Despeja os registradores da plataforma que são interessantes do ponto de vista de segurança Travas de Flash Travas de MMIO e Remapeamento Base e Travas de SM...

5.4AI score
SaveExploits0
Kitploit
Kitploit
added 2026/08/21 5:17 p.m.1 views

SmmBackdoor

Backdoor SMM per piattaforme basate su UEFI !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!! Questo è un progetto legacy abbandonato, per la versione corrente della backdoor consulta la pagina del progetto SMM Backdoor Next Gen e la sua documentazione:...

5.3AI score
SaveExploits0References3
F5 Networks
F5 Networks
added 2026/08/20 6:07 p.m.12 views

K000162855: Intel SMM vulnerability CVE-2025-20028

Security Advisory Description Time-of-check time-of-use race condition in the WheaERST SMM module for some IntelR reference platforms may allow an escalation of privilege. System software adversary with a privileged user combined with a high complexity attack may enable escalation of privilege...

7.1CVSS5.5AI score0.00076EPSS
SaveExploits0Affected Software14
RedhatCVE
RedhatCVE
added 2026/08/13 7:12 p.m.7 views

CVE-2025-31936

A flaw was found in IntelR XeonR 6 processors when using IntelR TDX within System Management Mode SMM. Improper handling of overlap between protected memory ranges may allow a local attacker with privileged user access to escalate privileges. This vulnerability could lead to high impact on...

7CVSS5.2AI score0.00096EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 2026/08/12 12:00 a.m.15 views

Linux Distros Unpatched Vulnerability : CVE-2026-20901

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper input validation for some IntelR XeonR processors within firmware may allow an escalation of privilege. Startup code and smm adversary with a privilege...

4CVSS5.4AI score0.00101EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2026/08/12 12:00 a.m.12 views

Linux Distros Unpatched Vulnerability : CVE-2025-31936

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper handling of overlap between protected memory ranges for some IntelR XeonR 6 processors when using IntelR TDX within SMM may allow an escalation of...

7CVSS5.3AI score0.00096EPSS
SaveExploits0References4
NVD
NVD
added 2026/08/11 6:17 p.m.9 views

CVE-2026-20901

Improper input validation for some IntelR XeonR processors within firmware may allow an escalation of privilege. Startup code and smm adversary with a privileged user combined with a high complexity attack may enable data alteration. This result may potentially occur via local access when attack...

4CVSS0.00101EPSS
SaveExploits0References1
UbuntuCve
UbuntuCve
added 2026/08/11 6:17 p.m.11 views

CVE-2026-20901

Improper input validation for some IntelR XeonR processors within firmware may allow an escalation of privilege. Startup code and smm adversary with a privileged user combined with a high complexity attack may enable data alteration. This result may potentially occur via local access when attack...

4CVSS5.2AI score0.00101EPSS
SaveExploits0References4
OSV
OSV
added 2026/08/11 6:17 p.m.6 views

UBUNTU-CVE-2026-20901

Improper input validation for some IntelR XeonR processors within firmware may allow an escalation of privilege. Startup code and smm adversary with a privileged user combined with a high complexity attack may enable data alteration. This result may potentially occur via local access when attack...

4CVSS5.2AI score0.00101EPSS
SaveExploits0References5
Cvelist
Cvelist
added 2026/08/11 5:30 p.m.38 views

CVE-2026-20901

Improper input validation for some IntelR XeonR processors within firmware may allow an escalation of privilege. Startup code and smm adversary with a privileged user combined with a high complexity attack may enable data alteration. This result may potentially occur via local access when attack...

4CVSS0.00101EPSS
SaveExploits0References1
CVE
CVE
added 2026/08/11 5:30 p.m.72 views

CVE-2026-20901

CVE-2026-20901 concerns firmware input validation issues in some Intel Xeon processors. The root cause is improper input validation in startup code and SMM pathways, creating a pathway for a local attacker with privileged access and a high-complexity attack to alter data. The exploit requires loc...

4CVSS5.2AI score0.00101EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/08/11 5:30 p.m.7 views

EUVD-2026-56788

Improper input validation for some IntelR XeonR processors within firmware may allow an escalation of privilege. Startup code and smm adversary with a privileged user combined with a high complexity attack may enable data alteration. This result may potentially occur via local access when attack...

4CVSS5.2AI score0.00101EPSS
SaveExploits0References1
Rows per page
Query Builder