batondrop_armv7

baton drop для armv7 MSM8960 Поскольку исправление policyhax также известное как golden key действительно работает на системах Qualcomm, я приобрел рабочий, но продаваемый на запчасти Dell XPS 10, чтобы портировать baton drop на MSM8960. Вот результат. Извлеките image.7z на ваше USB-устройство,...

netgear_r6700v3_circled

استغلال تجاوز سعة المخزن المؤقت على NETGEAR R6700v3 CVE-2022-27646 بمساعدة التنفيذ الرمزي مقدمة يهدف هذا المستودع إلى عرض بعض وظائف Morion، وهي أداة إثبات مفهوم PoC للتجربة مع التنفيذ الرمزي على ثنائيات ARMv7 حقيقية. نعرض بعضًا من قدرات Morion من خلال تقديم مثال ملموس، ألا وهو كيف يمكنها المساعدة...

oob_entry

oobentry استغلال tfp0 لنواة النظام يدعم كل إصدارات armv7 من iOS iOS 3.0-10.3.4. الثغرة المستخدمة في هذا الاستغلال هي CVE-2023-32434. سأنشر تقريرًا تفصيليًا في الأسابيع القادمة حول هذا الاستغلال والطرق المستخدمة...

am335xbootrom

هندسة عكسية لـ AM335x Boot ROM ربما مرّت ثمانية عشر شهرًا منذ أن حصلت لأول مرة على بضع لوحات Beaglebone Black، كانت قد أُنقذت من حاوية النفايات. لسوء الحظ، لم تعمل اللوحات مباشرة. الآن، كانت هذه أول تجربة لي مع واحدة من هذه اللوحات، أو أي حاسوب أحادي اللوحة في هذا الشأن، لذلك لم أكن متأكدًا مما إ...

Glass

Glass как прозрачный и гладкий Быстрый, нативный, в первую очередь для мобильных приложений интерактивный дизассемблер. Духовный преемник IDA Pro для рабочего процесса реверс-инжиниринга Android / iOS, построенный вокруг: smali для работы с APK / DEX / smali armv8-encode для AArch64 и ARMv7 A32 /...

nfcgate

NFCGate ⚠️NFCGate is currently being falsely detected as "NGate" malware. Please seethis issue for up-to-date information.⚠️ NFCGate is an Android application meant to capture, analyze, or modify NFC traffic. It can be used as a researching tool to reverse engineer protocols or assess the security...

Exploit for Improper Initialization in Linux Linux_Kernel

CVE-2022-0847 Dirty Pipe Pre-compiled exploit for CVE-2022-08...

OPENSUSE-SU-2026:20878-1 Security update for sdbootutil

This update for sdbootutil fixes the following issues Security issue: - CVE-2026-25701: use of fixed directory /tmp/pcrlock.d.back in sdbootutil-update-predictions.service bsc1258241. Non security issues: Update to version 1+git20260506.25d47bf: - TPM based system does not auto-unlock encryption...

Astra Linux – Vulnerability in Firefox and Thunderbird

The return registers were overwritten, which could have allowed an attacker to execute arbitrary code. Note: This issue only affected Armv7-A systems. Other operating systems were not affected. This vulnerability affects Firefox 124, Firefox ESR 115.9, and Thunderbird 115.9...

Astra Linux – Vulnerability in glibc

There exists an exploitable signed comparison vulnerability in the ARMv7 memcpy implementation of GNU glibc 2.30.9000. Calling memcpy on ARMv7 targets that utilize the GNU glibc implementation with a negative value for the 'num' parameter results in a signed comparison vulnerability. If an attack...

MiracleLinux 8 : firefox-115.9.1-1.el8.ML.1 (AXSA:2024-7652:13)

The remote MiracleLinux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the AXSA:2024-7652:13 advisory. nss: timing attack against RSA decryption CVE-2023-5388 Mozilla: Crash in NSS TLS method CVE-2024-0743 Mozilla: JIT code failed to save return...

Siemens SIMATIC S7-1500 Signed to Unsigned Conversion Error (CVE-2020-6096)

An exploitable signed comparison vulnerability exists in the ARMv7 memcpy implementation of GNU glibc 2.30.9000. Calling memcpy on ARMv7 targets that utilize the GNU glibc implementation with a negative value for the 'num' parameter results in a signed comparison vulnerability. If an attacker...

EUVD-2020-27250

Malware in sbrugna...

EUVD-2024-27556

Malicious code in bioql PyPI...

EUVD-2021-30857

Malicious code in bioql PyPI...

EUVD-2024-25270

Malicious code in bioql PyPI...

Linux Distros Unpatched Vulnerability : CVE-2024-2607

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Return registers were overwritten which could have allowed an attacker to execute arbitrary code. Note: This issue only affected Armv7-A systems. Other operatin...

Linux Distros Unpatched Vulnerability : CVE-2020-6096

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An exploitable signed comparison vulnerability exists in the ARMv7 memcpy implementation of GNU glibc 2.30.9000. Calling memcpy on ARMv7 targets that utilize th...

CVE-2021-43997

FreeRTOS versions 10.2.0 through 10.4.5 do not prevent non-kernel code from calling the xPortRaisePrivilege internal function to raise privilege. FreeRTOS versions through 10.4.6 do not prevent a third party that has already independently gained the ability to execute injected code to achieve...

CVE-2024-28115

FreeRTOS is a real-time operating system for microcontrollers. FreeRTOS Kernel versions through 10.6.1 do not sufficiently protect against local privilege escalation via Return Oriented Programming techniques should a vulnerability exist that allows code injection and execution. These issues affe...