23 matches found
CVE-2021-34600
CVE-2021-34600 的概念验证（PoC） 关于此 PoC 工作原理的详细说明，请参阅我们的博客文章。 在面向用户的方面，我们只添加了两个新命令：hf 14a getchallenge 和 hf 14a opendoor 。为了使这些命令正常工作，我们必须将 iceman 分支中的一些代码混入官方 proxmark3 代码中。我们最初尝试在 iceman 分支的基础上进行开发，但出于某种原因，在模拟标签时读卡器无法与 proxmark 通信。官方代码没有这个问题，因此我们选择了（有些笨拙的）阻力最小的路径，将 desfirecrypto.c,h 及其依赖项复制到官方...
EUVD-2020-8063
Malware in sbrugna...
EUVD-2023-37391
Malicious code in bioql PyPI...
CVE-2024-29941
Insecure storage of the ICT MIFARE and DESFire encryption keys in the firmware binary allows malicious actors to create credentials for any site code and card number that is using the default ICT encryption...
CVE-2023-33221
When reading DesFire keys, the function that reads the card isn't properly checking the boundaries when copying internally the data received. This allows a heap based buffer overflow that could lead to a potential Remote Code Execution on the targeted device. This is especially problematic if you...
CVE-2020-16097
On controllers running versions of v8.20 prior to vCR8.20.200221b distributed in v8.20.1093MR2, v8.10 prior to vGR8.10.179 distributed in v8.10.1211MR5, v8.00 prior to vGR8.00.165 Distributed in v8.00.1228MR6, v7.90 prior to vGR7.90.165 distributed in v7.90.1038MRX, v7.80 or earlier, It is possib...
CVE-2024-29941
Insecure storage of the ICT MIFARE and DESFire encryption keys in the firmware binary allows malicious actors to create credentials for any site code and card number that is using the default ICT encryption...
CVE-2024-29941 Credential Cloning
Insecure storage of the ICT MIFARE and DESFire encryption keys in the firmware binary allows malicious actors to create credentials for any site code and card number that is using the default ICT encryption...
CVE-2024-29941
CVE-2024-29941 describes insecure storage of ICT MIFARE and DESFire encryption keys in the firmware binary, enabling credential cloning by creating credentials for any site code and card number that uses the default ICT encryption. The Red Hat/NVD entries corroborate that the issue arises from st...
PT-2024-23162 · Ict · Ict
Name of the Vulnerable Software and Affected Versions: ICT affected versions not specified Description: Insecure storage of the ICT MIFARE and DESFire encryption keys in the firmware binary allows malicious actors to create credentials for any site code and card number that is using the default I...
ICT MIFARE DESFire 安全漏洞
ICT MIFARE DESFire is an advanced encryption technology from ICT. A security vulnerability exists in ICT MIFARE DESFire that stems from insecure storage of encryption keys and a binary file that allows malicious actors to create credentials for any site code and card number using default values...
CVE-2023-33221
When reading DesFire keys, the function that reads the card isn't properly checking the boundaries when copying internally the data received. This allows a heap based buffer overflow that could lead to a potential Remote Code Execution on the targeted device. This is especially problematic if you...
Heap overflow
When reading DesFire keys, the function that reads the card isn't properly checking the boundaries when copying internally the data received. This allows a heap based buffer overflow that could lead to a potential Remote Code Execution on the targeted device. This is especially problematic if you...
CVE-2023-33221
The CVE-2023-33221 issue is a boundary-check flaw in the DesFire card reading function that copies internal data, causing a heap-based buffer overflow and potential remote code execution. Reported across multiple sources (e.g., PT-Security; Red Hat; NVD), it specifically notes risk when the Defau...
CVE-2023-33221 Heap Buffer Overflow when reading DESFire card
When reading DesFire keys, the function that reads the card isn't properly checking the boundaries when copying internally the data received. This allows a heap based buffer overflow that could lead to a potential Remote Code Execution on the targeted device. This is especially problematic if you...
WordPress Plugin SIGMA Lite & Lite+ Buffer Error Vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in the...
PT-2023-24231 · Desfire · Desfire
Name of the Vulnerable Software and Affected Versions: DesFire affected versions not specified Description: The function that reads the card isn't properly checking the boundaries when copying internally the data received, allowing a heap-based buffer overflow. This could lead to a potential Remo...
CVE-2020-16097
On controllers running versions of v8.20 prior to vCR8.20.200221b distributed in v8.20.1093MR2, v8.10 prior to vGR8.10.179 distributed in v8.10.1211MR5, v8.00 prior to vGR8.00.165 Distributed in v8.00.1228MR6, v7.90 prior to vGR7.90.165 distributed in v7.90.1038MRX, v7.80 or earlier, It is possib...
CVE-2020-16097
On controllers running versions of v8.20 prior to vCR8.20.200221b distributed in v8.20.1093MR2, v8.10 prior to vGR8.10.179 distributed in v8.10.1211MR5, v8.00 prior to vGR8.00.165 Distributed in v8.00.1228MR6, v7.90 prior to vGR7.90.165 distributed in v7.90.1038MRX, v7.80 or earlier, It is possib...
Design/Logic Flaw
On controllers running versions of v8.20 prior to vCR8.20.200221b distributed in v8.20.1093MR2, v8.10 prior to vGR8.10.179 distributed in v8.10.1211MR5, v8.00 prior to vGR8.00.165 Distributed in v8.00.1228MR6, v7.90 prior to vGR7.90.165 distributed in v7.90.1038MRX, v7.80 or earlier, It is possib...