HP System Management Homepage (SMH) v2.x.x.x - Open Redirect

Open redirect vulnerability in red2301.html in HP System Management Homepage SMH 2.x.x.x allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via the RedirectUrl parameter. id: CVE-2010-1586 info: name: HP System Management Homepage SMH v2.x.x.x - Open...

HPE System Management - Cross-Site Scripting

HPE System Management contains a cross-site scripting vulnerability which allows an attacker to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This can allow the attacker to steal cookie-based authentication credentials and launch other...

CVE-2024-36840-Exploit

CVE-2024-36840: SQL Injection Vulnerability in Boelter Blue System Management Version 1.3 Exploit Details Exploit Title : SQL Injection Vulnerability in Boelter Blue System Management version 1.3 Original Google Dork : inurl:"Powered by Boelter Blue" didn't workedzero url in search Google Dork By...

MCP-God-Mode

Quick Start • Flipper Zero • Tool Categories • Usage Examples • Platform Support • Legal One MCP to rule them all, one MCP to find them, one MCP to compile the tools, and in the God Mode bind them. 🎲⚡ Version 1.7c - Individual Tool Installation & Consolidated Flipper Zero Support 🔢 Canonical Tool...

MaxPatrol EDR System Management Console Code Execution

The vulnerability in the MaxPatrol EDR system management console is related to the failure to implement measures for neutralizing special elements. Exploitation of this vulnerability may allow a remote attacker to execute arbitrary code...

Astra Linux – Vulnerability in Intel Microcode

In some IntelR processors, the incorrect order of behavior during the transition between the executive monitor and the SMI transfer monitor STM may allow a privileged user to potentially enable privilege escalation through local access...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Forcibly leave nested virtualization mode when SMM state is toggled The nested virtualization mode is forcibly exited if the user space toggles the SMM state using KVMSETVCPUEVENTS or KVMSYNCX86EVENTS. If the user space...

smiiiiiiiiiiiiiiii

smiiiiiiiiiiiiiiii Sfruttare la System Management Mode con un interrupt molto molto molto molto molto molto molto lungo. Panoramica Si scopre che puoi rompere la SMM — l'ambiente di esecuzione sicuro e ultra privilegiato che gira invisibilmente in background su ogni CPU x86 — con niente più di...

OPENSUSE-SU-2026:22047-1 Security update for qemu

This update for qemu fixes the following issues: Security issues fixed: - CVE-2026-81627: missing writable RAM alias validation in the VAPIC setup hypercall allows a privileged guest user to bypass chipset DLCK protection and injecting code into System Management Mode memory bsc1282077. -...

SUSE-SU-2026:24159-1 Security update for qemu

This update for qemu fixes the following issues: Security issues fixed: - CVE-2026-81627: missing writable RAM alias validation in the VAPIC setup hypercall allows a privileged guest user to bypass chipset DLCK protection and injecting code into System Management Mode memory bsc1282077. -...

CVE-2026-97947

A flaw was found in the Linux kernel's x86 AMD node component, which may lead to a Denial of Service DoS. If initialization of the AMD System Management Network SMN interface fails, exported read and write functions remain accessible without validating that internal device structures were...

CVE-2026-93287

A flaw was found in the Linux kernel's I2C System Management Bus SMBus subsystem. A local user can trigger an out-of-bounds memory read by submitting a transfer request with an oversized or invalid block length. This occurs because the kernel does not properly validate user-supplied transfer...

AZL-105275 CVE-2026-81627 affecting package qemu for versions less than 10.1.0-2

A flaw was found in QEMU. The VAPIC setup hypercall in hw/i386/vapic.c does not validate that the writable RAM alias remains within the option ROM window. A privileged guest user on a Q35/KVM machine can position this alias over locked SMRAM, bypassing chipset DLCK protection and injecting code...

CVE-2026-81627: Out-of-bounds Write

A flaw was found in QEMU. The VAPIC setup hypercall in hw/i386/vapic.c does not validate that the writable RAM alias remains within the option ROM window. A privileged guest user on a Q35/KVM machine can position this alias over locked SMRAM, bypassing chipset DLCK protection and injecting code...

Astra Linux – Vulnerability in Linux

In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Immediately reset the MMU context when the SMM flag is cleared The MMU context should be reset immediately when the SMM flag of the vCPU is cleared, so that the SMM flag in the MMU context is always synchronized with th...

CVE-2023-20577

A heap overflow in SMM module may allow an attacker with access to a second vulnerability that enables writing to SPI flash, potentially resulting in arbitrary code execution...

EUVD-2026-59848

A security flaw has been discovered in DefaultFuction Notice-System-Managent 2.0. This issue affects the function GroovyShell.evaluate of the file /execute of the component NoticeController. The manipulation results in code injection. The attack can be launched remotely. The exploit has been...

CVE-2026-18909

A stack-based buffer overflow vulnerability exists in ELAN Microelectronics Corp. ELAN Smart-Pad on Windows ETD.sys and ETDSMBus.sys. During Intel SMBus recovery, ETDSMBus.sys does not enforce an upper-bound check on the hardware-derived report count, allowing an out-of-range value to be forwarde...

UFIDA NC Portal - Arbitrary File Read Detection

There is any file reading in the getFileLocal interface of UFIDA Mobile System Management. !/usr/bin/env python3 -- coding: utf-8 -- """There is any file reading in the getFileLocal interface of UFIDA Mobile System Management.""" from kittysploit import from lib.protocols.http.httpclient import...

IBM Advanced System Management Panel - Detect

IBM Advanced System Management panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """IBM Advanced System Management panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'IBM Advanced System...