CVE-2026-25250

🕷️ CVE-2026-25250: التحقق غير السليم من سلسلة محمل الإقلاع الموثوقة محمل إقلاع تابع لجهة خارجية موقّع من مايكروسوفت يقوم بتحميل ملف EFI ثانوي دون أي تحقق من التوقيع أو السلامة، مما ينهار سلسلة الثقة الخاصة بـ Secure Boot من الداخل. 📑 جدول المحتويات السياق البحثي المراجع الرسمية أعد إنتاج الثغرة...

PixelDump_CVE-2016-8462

PixelDump - CVE-2016-8462 PixelDump CVE-2016-8462 Pixel बूटलोडर कमजोरियों में से एक थी जिसे beaups और Jon 'jcase' Sawyer ने खोजा/कार्य किया। अस्वीकरण यह एक गंदा POC है जिसे कभी रिलीज़ करने का इरादा नहीं था, मैंने बस एक और प्रोजेक्ट कॉपी किया, कुछ पंक्तियाँ जोड़ने में कुछ मिनट बिताए, और इसे Google...

ubl-itel-s23

Unlock Bootloader — Itel S23 S665L / Unisoc T606 Guide to unlock the bootloader on the Itel S23 S665L using the CVE-2022-38694 exploit on the Unisoc T606 UMS9230 chipset. Device Info Property| Value ---|--- Brand| Itel Model| S665L S23 Android| 12 SDK 31 Build|...

chipicopwn

chipicopwn Exploit de bootloader pour Google Nest Hub 2e génération elaine Prérequis Google Nest Hub 2e génération Raspberry Pi Pico Hub USB alimenté ou câble USB en Y pico-sdk voir le guide de démarrage pour les instructions d'installation Versions prises en charge firmware d'usine 2020/12 -...

Starlink-FI

رقاقة تعديل طرف مستخدم Starlink يُرافق هذا المستودع المحاضرة المعنونة "Glitched on Earth by Humans: A Black-Box Security Evaluation of the SpaceX Starlink User Terminal". شرائح العرض متاحة هنا، ومن المتوقع أن يتوفر تسجيل للمحاضرة قريبًا. تغطي المحاضرة كيفية تمكنّا من تنفيذ كود عشوائي على طرف مستخ...

cve-2026-43499-firetv-sheldonp-writeup

CVE-2026-43499 on Amazon Fire TV Stick 3rd Gen sheldonp Chaining a Linux kernel privilege escalation into a preloader downgrade and bootloader unlock. Overview This repository documents my authorized reproduction of the CVE-2026-43499 exploitation chain on an Amazon Fire TV Stick 3rd Gen sheldonp...

ROOT-ZTE-X1001

ZTE Blade X1001 — मैजिस्क के साथ रूट एंड्रॉइड 15, यूनिसॉक UMS9230 ⚠️ चेतावनी: किसी डिवाइस को रूट करने से वारंटी समाप्त हो सकती है, गलत तरीके से करने पर डिवाइस ब्रिक हो सकता है, और सभी डेटा नष्ट हो सकता है। अपने जोखिम पर आगे बढ़ें। यह रिपॉजिटरी केवल शैक्षिक उद्देश्यों के लिए है। सामग्री सूची डिवाइस...

huawei-p10-cve-2017-8890-unlock

بحث فتح قفل محمّل الإقلاع في Huawei P10 عبر CVE-2017-8890 يوثّق هذا المستودع مشروع بحث مُصرَّح به من قِبل المالك، تم فيه نقل CVE-2017-8890 إلى إصدار واحد من البرنامج الثابت لجهاز Huawei P10، وتحويل ثغرة use-after-free في النواة إلى قدرة قراءة/كتابة عشوائية في النواة وجذر مؤقت، وإعادة بناء سجل NVE...

vankyo-s30-bootloader-unlock

Vankyo S30 Bootloader Unlock Unlock the bootloader on a Vankyo MatrixPad S30 Unisoc SC9863A using the CVE-2022-38694 FDL1 method. The S30's BootROM accepts unsigned FDL1 in download mode without requiring the ROP bypass, which simplifies the unlock significantly. Quick Start ./unlock.sh --prebuil...

F9360-CVE43499

SM-F9360 Galaxy Z Fold4 / q4q تجاوز قفل الـ Bootloader للحصول على KernelSU Root CVE-2026-43499 root مؤقت → قناة LDPRELOAD لتجاوز DEFEX → إصدار kernelsu.ko بدون LTO مع clang-12 → su + KernelSU Manager بكامل الوظائف الحالة: ✅ تم التحقق على جهاز حقيقي بتاريخ 2026-08-12 البرنامج الثابت F9360ZCSAIZF1،...

CVE-2026-102370

Kasa EC70 v4 and EC71 v4 do not logically disable the production debug interface at the firmware or chip level and do not lock the bootloader. Although the debug traces are physically severed during manufacturing, an attacker with physical access can restore the connection, interrupt the boot...

CVE-2026-102370

The TP-Link Kasa EC70 v4 and EC71 v4 devices are vulnerable because the production debug interface is not logically disabled at the firmware or chip level, and the bootloader remains unlocked. While debug traces are physically severed during manufacturing, an attacker with physical access can res...

CVE-2026-102370 Physical UART Access Leading to an Unauthenticated Root Shell in TP-Link Kasa EC70 and EC71

Kasa EC70 v4 and EC71 v4 do not logically disable the production debug interface at the firmware or chip level and do not lock the bootloader. Although the debug traces are physically severed during manufacturing, an attacker with physical access can restore the connection, interrupt the boot...

CVE-2026-102370 Physical UART Access Leading to an Unauthenticated Root Shell in TP-Link Kasa EC70 and EC71

Kasa EC70 v4 and EC71 v4 do not logically disable the production debug interface at the firmware or chip level and do not lock the bootloader. Although the debug traces are physically severed during manufacturing, an attacker with physical access can restore the connection, interrupt the boot...

Linux Distros Unpatched Vulnerability : CVE-2026-74222

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - U-Boot before 2026.10-rc5 contains a use-after-free vulnerability in the httpcrecvcb function within the lwIP wget implementation. When HTTP data storage fails,...

CVE-2026-102370: On-Chip Debug and Test Interface With Improper Access Control

Kasa EC70 v4 and EC71 v4 do not logically disable the production debug interface at the firmware or chip level and do not lock the bootloader. Although the debug traces are physically severed during manufacturing, an attacker with physical access can restore the connection, interrupt the boot...

Linux Distros Unpatched Vulnerability : CVE-2026-71972

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - U-Boot through 2026.10-rc5 contains an out-of-bounds write vulnerability in the videodisplayrle8bitmap function in drivers/video/videobmp.c. Attackers can suppl...

Linux Distros Unpatched Vulnerability : CVE-2026-71971

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - U-Boot before 2026.10-rc3 with CONFIGIPDEFRAG enabled contains an out-of-bounds write vulnerability in the netdefragment function in net/net.c. Remote attackers...

Linux Distros Unpatched Vulnerability : CVE-2026-71974

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - U-Boot before 2026.10-rc3 contains an out-of-bounds write vulnerability in readslottedpartition that fails to validate image size against partition bounds...

SUSE CVE-2026-74222

U-Boot before 2026.10-rc5 contains a use-after-free vulnerability in the httpcrecvcb function within the lwIP wget implementation. When HTTP data storage fails, the callback frees the connection PCB but returns ERRBUF instead of ERRABRT, causing the TCP input path to access released memory and...