reaver-wps-fork-t6x

Overview Reaver implements a brute force attack against Wifi Protected Setup WPS registrar PINs in order to recover WPA/WPA2 passphrases , as described in Brute forcing Wi-Fi Protected Setup When poor design meets poor implementation. by Stefan Viehböck. Reaver has been designed to be a robust an...

nexmon

nexmon이란? Nexmon은 Broadcom/Cypress WiFi 칩을 위한 C 기반 펌웨어 패칭 프레임워크로, radiotap 헤더가 포함된 모니터 모드와 프레임 주입을 활성화하는 등 자체 펌웨어 패치를 작성할 수 있게 해줍니다. 아래에서 nexmon으로 가능한 작업의 개요를 확인할 수 있습니다. 이 저장소는 주로 다양한 칩에서 모니터 모드와 프레임 주입을 활성화하는 데 초점을 맞춥니다. 추가 기능을 원한다면 다음 프로젝트들이 흥미로울 수 있습니다: http://nexmon.org/jammer: 진행 중인 프레임 전송에...

CVE-2019-19231

CVE-2019-19231 https://techdocs.broadcom.com/us/product-content/recommended-reading/security-notices/CA20191218-01-security-notice-for-ca-client-automation-agent-for-windows.html...

internalblue

Broadcom 칩은 약 10억 대의 기기에서 사용되고 있으며, 예를 들어 모든 iPhone , MacBook , Samsung Galaxy S 시리즈, 구형 Google Nexus 시리즈, 구형 Thinkpad , Raspberry Pi , 다양한 IoT 기기 등이 있습니다. 2016년, Cypress 가 Broadcom 의 IoT 사업부를 인수했습니다. 이후 Broadcom 이 Apple 및 Samsung 과 같은 비-IoT 고객을 유지하면서 펌웨어 변형이 약간 분기되었습니다. 그러나 펌웨어 상호 작용 및 업데이트 메커니즘...

Broadpwn

Broadpwn 帮助 加入或咨询：[email protected] Broadpwn：https://goo.gl/xWC4hg | YouTube：https://youtu.be/GTb4Y2Y9shw BlueBorne：https://goo.gl/PSDuwY | YouTube：https://youtu.be/FJGGMyg0W38 Yalu Jailbreak iOS 10.3.1：https://goo.gl/9cSSPU 帮助 Pull Request。 Broadpwn 漏洞（CVE-2017-9417） 通过 Broadcom Wi-Fi...

PT-2026-85031

Name of the Vulnerable Software and Affected Versions VMware Workstation versions 25H2 through 26H1 VMware Fusion versions 25H2 through 26H1 Description An integer overflow exists in the VMXNET3 virtual network adapter within the hypervisor. A malicious actor with local administrative privileges...

The vulnerability of the `bnxt_async_event_process()` function in the `drivers/net/ethernet/broadcom/bnxt/bnxt.c` file of the Ethernet network adapter driver for Broadcom’s Linux operating system, which allows a hacker to compromise the confidentiality and accessibility of protected information.

The vulnerability of the bnxtasynceventprocess function in the drivers/net/ethernet/broadcom/bnxt/bnxt.c file of the Ethernet network adapter driver for Broadcom’s Linux operating system is related to the occurrence of operations outside of the buffer in memory. Exploiting this vulnerability coul...

The vulnerabilities in the functions bcmaspremove() and bcmaspprobe() of the drivers/net/ethernet/broadcom/asp2/bcmasp.c driver, which is part of the Ethernet Broadcom network adapter driver for the Linux operating system, allow attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the functions bcmaspremove and bcmaspprobe in the drivers/net/ethernet/broadcom/asp2/bcmasp.c driver for Broadcom Ethernet network adapters in the Linux operating system is related to the repeated release of previously released memory. Exploiting this vulnerability could allo...

Astra Linux – Vulnerabilities in Linux, Linux-5.10, Linux-5.15, Linux-6.1

In the Linux kernel, the following vulnerability has been resolved: bcm: Fixed a UAF in bcmprocshow. Bug: KASAN: A “slab-use-after-free” issue occurred in bcmprocshow+0x969/0xa80. A size 8 byte read was performed at address ffff888155846230 by the task cat/7862. CPU: 1; PID: 7862; Comm: cat; Not...

Astra Linux – Vulnerabilities in Linux, Linux-5.15, Linux-5.10

In the Linux kernel, the following vulnerability has been resolved: wifi: brcmfmac: cfg80211: The PMK parameter is now passed as binary data, rather than hexadecimal data. It appears that the hexadecimal passphrase mechanism does not work on newer chips/firmwares e.g., BCM4387. There was actually...

Astra Linux – Vulnerability in Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: net: Broadcom – bcm4908enet: Updates TX statistics after actual transmission. Queuing packets does not guarantee their transmission. Updates TX statistics after the hardware confirms that it is consuming the submitted data. This...

Astra Linux – Vulnerabilities in Linux, Linux-5.10, Linux-5.15

A buffer overflow vulnerability was discovered in the Linux kernel’s Broadcom Full MAC Wi-Fi driver. This issue occurs when a user connects to a malicious USB device. It can allow a local user to crash the system or escalate their privileges...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, Linux, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: cpufreq: brcmstb-avs-cpufreq – added a check for the return value of cpufreqcpuget. cpufreqcpuget may return NULL. To avoid NULL-reference checks, it should return 0 in case of an error. This issue was identified by the Linux...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: thermal/drivers/broadcom: Fixed a potential NULL dereferencing in srthermalprobe. The platformgetresource function may return NULL; proper checks should be added to avoid potential NULL dereferencings...

Astra Linux – Vulnerability in Linux 5.10, Linux, Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: can: bcm: bcmtxsetup: fixed KMSAN uninit-value in vfswrite Syzkaller reported the following issues: ===================================================== BUG: KMSAN: uninit-value in aiorwdone fs/aio.c:1520 inline BUG: KMSAN:...

Astra Linux – Vulnerabilities in Linux, Linux-5.10, Linux-5.15, Linux-6.1

The brcm80211 component in the Linux kernel, from version 6.5.10 onwards, has a use-after-free issue in the code for disconnecting devices via hotplug i.e., removing the USB connection. For attackers who have physical access and local privileges, “this could be exploited in a real-world scenario....

Astra Linux – Vulnerabilities in Linux, Linux-5.10, Linux-5.15

A problem with out-of-bound reading was detected in brcmfmac/cfg80211.c within the drivers/net/wireless/broadcom/brcm80211 directory of the Linux kernel. This issue can occur when the associnfo-reqlen data is larger than the size of the buffer, which is defined as WLEXTRABUFMAX, resulting in a...

CVE-2026-72116

A flaw was found in the Linux kernel's Broadcom Controller Area Network CAN bus driver. When a CAN device is removed, the driver may fail to properly manage its receive and transmit operations. This can lead to receive filters not being correctly re-enabled after updates, preventing expected data...

CVE-2026-68192 wifi: brcmfmac: make release_scratchbuffers idempotent

In the Linux kernel, the following vulnerability has been resolved: wifi: brcmfmac: make releasescratchbuffers idempotent brcmfpciereleasescratchbuffers frees the shared.scratch and shared.ringupd DMA buffers with dmafreecoherent but does not clear the pointers afterwards, unlike the sibling...

SUSE CVE-2026-64583

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: udc: bdc: free IRQ and drain funcwakenotify before teardown The Broadcom BDC UDC driver registers its IRQ handler with devmrequestirq in bdcudcinit, so the IRQ is released by devm only after bdcremove returns. devm...