CVE-2020-14372

CVE-2020-14372: 「簡単なトリック」で（それほどでもない）セキュアブートをバイパスする 脆弱性の詳細 ある日、GRUB2のコンソールで「help」と入力したところ、とても「面白い」コマンドを見つけました: readbyte ADDR: ADDRから8ビット値を読み取る writebyte ADDR VAL: ADDRに8ビット値VALを書き込む 私はすぐに、これは最も楽しいSecure Bootバイパスを見つけたと思いましたが、これらのコマンドはSecure Boot下で次のような出力をします: root@kitploit: error: Secure Boot forbi...

Kernel-Process-Hollowing

Windows カーネルモードの Process Hollowing このプロジェクトは、Process Hollowing 技術がカーネルレベルでどのように動作するかを示す概念実証です。 リソース SSDT Hook Process Hollowing...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: grub2 (UTSA-2026-017485)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-017485 advisory. A flaw was found in grub2 in versions prior to 2.06, where it incorrectly enables the usage of the ACPI command when Secure Boot is enabled. This flaw allows an...

EUVD-2007-5020

Malware in sbrugna...

EUVD-2007-4950

Malware in sbrugna...

EUVD-2007-4949

Malware in sbrugna...

EUVD-2007-5021

Malware in sbrugna...

EUVD-2007-4951

Malware in sbrugna...

EUVD-2007-4952

Malware in sbrugna...

EUVD-2007-5024

Malware in sbrugna...

EUVD-2007-5025

Malware in sbrugna...

EUVD-2008-1736

Malware in sbrugna...

EUVD-2007-5023

Malware in sbrugna...

EUVD-2007-5022

Malware in sbrugna...

CVE-2022-50433

In the Linux kernel, the following vulnerability has been resolved: efi: ssdt: Don't free memory if ACPI table was loaded successfully Amadeusz reports KASAN use-after-free errors introduced by commit 3881ee0b1edc "efi: avoid efivars layer when loading SSDTs from variables". The problem appears t...

UBUNTU-CVE-2022-50433

In the Linux kernel, the following vulnerability has been resolved: efi: ssdt: Don't free memory if ACPI table was loaded successfully Amadeusz reports KASAN use-after-free errors introduced by commit 3881ee0b1edc "efi: avoid efivars layer when loading SSDTs from variables". The problem appears t...

Linux Distros Unpatched Vulnerability : CVE-2019-20908

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in drivers/firmware/efi/efi.c in the Linux kernel before 5.4. Incorrect access permissions for the efivarssdt ACPI variable could be use...

CVE-2024-39362

This CVE ID has been rejected or withdrawn by its CVE Numbering Authority for the following reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...

CVE-2024-39362

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...

CVE-2024-39362

CVE-2024-39362 is cited in Oracle Linux advisory ELSA-2024-12618 and in Nessus, tied to the I2C ACPI subsystem. The described issue is: i2c: acpi: Unbind mux adapters before delete. The sources do not provide exact root-cause details beyond this remediation note. Remediation is to apply the updat...