nfcgate

NFCGate ⚠️NFCGate is currently being falsely detected as "NGate" malware. Please seethis issue for up-to-date information.⚠️ NFCGate is an Android application meant to capture, analyze, or modify NFC traffic. It can be used as a researching tool to reverse engineer protocols or assess the security...

Glass

Glass 透明で滑らか、という意味です 高速でネイティブな、モバイルアプリ最優先 のインタラクティブディスアセンブラ。Android / iOS リバースエンジニアリングのワークフローにおける IDA Pro の精神的な後継であり、以下を中心に構築されています: smali — APK / DEX / smali 処理用 armv8-encode — AArch64 および ARMv7 A32 / Thumb 用 — ネイティブ .so、iOS Mach-O gpui Zed — GPU アクセラレーションによるネイティブ UI 用 redb — コンテンツアドレス型永続化用 内蔵 M...

netgear_r6700v3_circled

NETGEAR R6700v3 스택 버퍼 오버플로우 CVE-2022-27646를 기호 실행으로 익스플로잇하기 소개 이 저장소는 실제 ARMv7 바이너리에서 기호 실행 을 실험하기 위한 개념 증명PoC 도구인 Morion의 일부 기능을 보여주기 위한 것입니다. 구체적인 예를 들어 Morion의 기능을 설명합니다. 즉, NETGEAR R6700v3 라우터의 스택 버퍼 오버플로우 취약점인 CVE-2022-27646 영향을 받는 버전 1.0.4.12010.0.91, 이후 버전에서 수정됨에 대한 작동하는 익스플로잇 을 만드는 과정에서 어...

batondrop_armv7

armv7（MSM8960）向けbaton drop policyhax（別名golden key）の修正がQualcommシステムで実際に動作することを踏まえ、baton dropをMSM8960に移植するため、動作はするが部品取りとして販売されていたDell XPS 10を入手しました。 結果は以下の通りです。 image.7zをGPTのfat32形式でフォーマットしたUSBデバイスに展開し、署名なしEFIブートアプリケーションを\boot.efiにコピーして、MSM8960 Windows RTデバイスで起動してください。お楽しみください。...

am335xbootrom

AM335x ブートROMのリバースエンジニアリング 私が初めて何枚かのBeaglebone...

oob_entry

oobentry すべてのarmv7 iOSバージョン（iOS 3.0-10.3.4）をサポートするtfp0カーネルエクスプロイト。 このエクスプロイトで使用される脆弱性はCVE-2023-32434です。このエクスプロイトと使用された手法について、今後数週間以内にwrite-upを公開する予定です。...

Astra Linux – Vulnerability in glibc

There exists an exploitable signed comparison vulnerability in the ARMv7 memcpy implementation of GNU glibc 2.30.9000. Calling memcpy on ARMv7 targets that utilize the GNU glibc implementation with a negative value for the 'num' parameter results in a signed comparison vulnerability. If an attack...

Astra Linux – Vulnerability in Firefox and Thunderbird

The return registers were overwritten, which could have allowed an attacker to execute arbitrary code. Note: This issue only affected Armv7-A systems. Other operating systems were not affected. This vulnerability affects Firefox 124, Firefox ESR 115.9, and Thunderbird 115.9...

Exploit for Improper Initialization in Linux Linux_Kernel

CVE-2022-0847 Dirty Pipe Pre-compiled exploit for CVE-2022-08...

OPENSUSE-SU-2026:20878-1 Security update for sdbootutil

This update for sdbootutil fixes the following issues Security issue: - CVE-2026-25701: use of fixed directory /tmp/pcrlock.d.back in sdbootutil-update-predictions.service bsc1258241. Non security issues: Update to version 1+git20260506.25d47bf: - TPM based system does not auto-unlock encryption...

MiracleLinux 8 : firefox-115.9.1-1.el8.ML.1 (AXSA:2024-7652:13)

The remote MiracleLinux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the AXSA:2024-7652:13 advisory. nss: timing attack against RSA decryption CVE-2023-5388 Mozilla: Crash in NSS TLS method CVE-2024-0743 Mozilla: JIT code failed to save return...

Siemens SIMATIC S7-1500 Signed to Unsigned Conversion Error (CVE-2020-6096)

An exploitable signed comparison vulnerability exists in the ARMv7 memcpy implementation of GNU glibc 2.30.9000. Calling memcpy on ARMv7 targets that utilize the GNU glibc implementation with a negative value for the 'num' parameter results in a signed comparison vulnerability. If an attacker...

EUVD-2020-27250

Malware in sbrugna...

EUVD-2021-30857

Malicious code in bioql PyPI...

EUVD-2024-27556

Malicious code in bioql PyPI...

EUVD-2024-25270

Malicious code in bioql PyPI...

Linux Distros Unpatched Vulnerability : CVE-2024-2607

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Return registers were overwritten which could have allowed an attacker to execute arbitrary code. Note: This issue only affected Armv7-A systems. Other operatin...

Linux Distros Unpatched Vulnerability : CVE-2020-6096

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An exploitable signed comparison vulnerability exists in the ARMv7 memcpy implementation of GNU glibc 2.30.9000. Calling memcpy on ARMv7 targets that utilize th...

CVE-2021-43997

FreeRTOS versions 10.2.0 through 10.4.5 do not prevent non-kernel code from calling the xPortRaisePrivilege internal function to raise privilege. FreeRTOS versions through 10.4.6 do not prevent a third party that has already independently gained the ability to execute injected code to achieve...

CVE-2024-28115

FreeRTOS is a real-time operating system for microcontrollers. FreeRTOS Kernel versions through 10.6.1 do not sufficiently protect against local privilege escalation via Return Oriented Programming techniques should a vulnerability exist that allows code injection and execution. These issues affe...