bn-uefi-helper

bn-uefi-helper ATTENTION : Ce plugin a été déprécié. Voir EFI Resolver Description Plugin d'aide pour analyser le firmware UEFI. Ce plugin contient les fonctionnalités suivantes : Appliquer le prototype correct à la fonction point d'entrée Corriger les segments pour que tous soient RWX et aient l...

BlackLotus

بلاك لوتس BlackLotus هو بوت‌كيت UEFI مبتكر مصمم خصيصًا لنظام ويندوز. يتضمن تجاوزًا مدمجًا للإقلاع الآمن Secure Boot وحماية على مستوى Ring0/Nucleus للحماية من أي محاولات إزالة. يخدم هذا البرنامج غرض العمل كمُحمّل HTTP. بفضل استمراريته القوية، لا حاجة لتحديث الوكيل Agent بشكل متكرر بطرق تشفير جديدة...

HvLoader

Présentation de HvLoader HvLoader.efi est une application EFI permettant de charger un chargeur d'hyperviseur externe. HvLoader.efi charge un binaire de chargeur d'hyperviseur donné DLL, EFI, etc. et appelle son point d'entrée en passant le ImageHandle de HvLoader.efi. Ainsi, le binaire du charge...

shim

shim, un chargeur d'amorçage UEFI de premier étage shim est une application EFI simple qui, lorsqu'elle est exécutée, tente d'ouvrir et d'exécuter une autre application. Elle tente d'abord de le faire via les appels EFI standard LoadImage et StartImage. Si ceux-ci échouent parce que Secure Boot e...

CVE-2021-43614

Error in handling the PlatformLangCodes UEFI variable could cause a buffer overflow, leading to resource exhaustion and failure...

CVE-2021-43613

An issue was discovered in SysPasswordDxe in Insyde InsydeH2O. User and administrator password hashes are exposed in runtime UEFI variables, leading to escalation of privilege...

CVE-2021-38489

HDD password plaintext is stored in a UEFI variable...

CVE-2021-38489

CVE-2021-38489 affects the HddPasswordPei driver in Insyde InsydeH2O 5.x firmware, as shipped in Siemens SIMATIC products. The root cause is that the HDD password is stored in plaintext within a UEFI variable, exposing it to attackers with local, high-privilege access. The vulnerability carries a...

CVE-2021-38489 HDD Password Stored In Plaintext

HDD password plaintext is stored in a UEFI variable...

EUVD-2021-34870

HDD password plaintext is stored in a UEFI variable...

CVE-2021-43614

CVE-2021-43614 affects the VariableEditSmm component in Insyde UEFI firmware . The root cause is an error in handling the PlatformLangCodes UEFI variable, which can cause a buffer overflow leading to resource exhaustion and failure; the CVE title further suggests potential for code execution . Th...

EUVD-2021-34869

Error in handling the PlatformLangCodes UEFI variable could cause a buffer overflow, leading to resource exhaustion and failure...

CVE-2021-43614 VariableEditSmm: Error checking of UEFI variables could cause buffer overflow, leading to code execution

Error in handling the PlatformLangCodes UEFI variable could cause a buffer overflow, leading to resource exhaustion and failure...

TALKINGEBN

|-------------------| TALKINGBEN : --- Вредоносное ПО класса BootKit, которое сначала выполняет повышение привилегий на машине жертвы. Используя патчинг NtTraceEvent и AMSI сканера буфера памяти, что позволяет ему обходить Windows Defender, оно загружает полезную нагрузку без её обнаружения. Зате...

CVE-2021-43613 SysPasswordDxe: Password hashes are exposed in runtime UEFI variables, leading to escalation of privilege

An issue was discovered in SysPasswordDxe in Insyde InsydeH2O. User and administrator password hashes are exposed in runtime UEFI variables, leading to escalation of privilege...

EUVD-2021-34868

An issue was discovered in SysPasswordDxe in Insyde InsydeH2O. User and administrator password hashes are exposed in runtime UEFI variables, leading to escalation of privilege...

CVE-2021-43613

A vulnerability in the SysPasswordDxe driver of Insyde InsydeH2O 5.x exposes user and administrator password hashes in runtime UEFI variables, enabling privilege escalation . The affected firmware is also used in Siemens SIMATIC industrial products. The CVSS 3.1 score is 6.5 (Medium) with a local...

CVE-2021-3972

CVE-2021-3972 code de preuve sans autre chose root@kitploit: BYTE value = 0x1; SetFirmwareEnvironmentVariableExT"ChgBootSecureBootDisable",T"6ACCE65D-DA35-4B39-B64B-5ED927A7DC7E",&value,sizeofBYTE,0x7;...

CVE-2026-25250 — Updated!

🕷️ CVE-2026-25250: Improper Trusted Bootloader Chain Validation A Microsoft-signed third-party bootloader that loads a secondary EFI binary with no signature or integrity verification, collapsing the Secure Boot chain of trust from within. 📑 Table of Contents Research Context Official References...

CVE-2025-4275 — Updated!

🐞 CVE-2025-4275: Hydroph0bia SecureFlash Certificate Shadowing This repository contains research material related to CVE-2025-4275, a Secure Boot bypass vulnerability affecting UEFI-compatible firmware based on Insyde H2O. It centralizes technical analysis of the vulnerability, the binaries...