chipicopwn

chipicopwn 针对 Google Nest Hub（第 2 代）elaine 的引导程序漏洞利用 要求 Google Nest Hub（第 2 代） Raspberry Pi Pico 带电源的 USB 集线器或 USB Y 型线缆 pico-sdk（安装说明请参阅入门指南） 支持的版本 出厂固件 2020/12 - U-Boot 2019.01-gbfc19012ea-dirty 2020年12月11日 - 04:19:32 出厂固件 2022/01, 2022/02 - U-Boot 2019.01-g9542d3593d-dirty 2021年5月21日 - 20:52:4...

EUVD-2017-14722

Malware in sbrugna...

EUVD-2022-52274

Malicious code in bioql PyPI...

CVE-2023-21472

Improper input validation with Exynos Fastboot USB Interface prior to SMR Apr-2023 Release 1 allows a physical attacker to execute arbitrary code in bootloader...

GNU GRUB2 Buffer Overflow Vulnerability

GNU GRUB2 is an open source bootloader used to load the operating system kernel when the computer boots. GNU GRUB2 suffers from a buffer overflow vulnerability that originates from an integer overflow when reading data from the squash4 file system. An attacker can exploit this vulnerability to...

Cisco NX-OS Software Image Verification Bypass (cisco-sa-nxos-image-sig-bypas-pQDRQvjL)

According to its self-reported version, the remote device is affected by a vulnerability. - A vulnerability in the bootloader of Cisco NX-OS Software could allow an unauthenticated attacker with physical access to an affected device, or an authenticated, local attacker with administrative...

CVE-2016-8467

An elevation of privilege vulnerability in the bootloader could enable a local attacker to execute arbitrary modem commands on the device. This issue is rated as High because it is a local permanent denial of service device interoperability: completely permanent or requiring re-flashing the entir...