CVE-2020-0443

CVE-2020-0443 这是一个概念验证应用，利用 CVE-2020-0443 漏洞使任何 Android 设备变砖。运行该应用并重启后，设备将一直重复启动动画。 该漏洞的补丁已在 2020 年 11 月 Android 安全公告中发布。 因该漏洞而变砖的设备可以通过恢复出厂设置修复，或者如果您在启动循环期间可以访问 ADB： adb shell settings put system systemlocales enUS 自行承担安装和/或运行此应用的风险。我对数据丢失或设备损坏概不负责。 请注意，本项目仅用于教育目的；请勿将其用于恶意活动。...

CatSniffer-Firmware

Firmware de CatSniffer Aquí encontrarás los diferentes firmwares para usar esta herramienta. Es importante tener en cuenta qué versión de CatSniffer posees, ya que el microcontrolador principal cambió en la v3.x; necesitábamos mantener un registro de compatibilidad entre los diferentes procesador...

EUVD-2022-34347

Malicious code in bioql PyPI...

📄 Glass Cage Zero-Click iMessage Exploit Details

Glass Cage, a vulnerability chain discovered on iOS 18.2, enables an attacker to compromise a device silently by sending a single malicious PNG image via iMessage. The exploit bypasses multiple layers of Apple's defenses, including BlastDoor, WebKit sandboxing, and CoreMedia memory protections...

Code injection

fastrack Reflex 2.0 W307SREFLEXv90.89 Activity Tracker allows an Unauthenticated Remote attacker to send a malicious firmware update via BLE and brick the device...

CVE-2021-35954

fastrack Reflex 2.0 W307SREFLEXv90.89 Activity Tracker allows physically proximate attackers to dump the firmware, flash custom malicious firmware, and brick the device via the Serial Wire Debug SWD feature...

CVE-2022-2044

MOXA NPort 5110: Firmware Versions 2.10 is vulnerable to an out-of-bounds write that may allow an attacker to overwrite values in memory, causing a denial-of-service condition or potentially bricking the device...

Code injection

An issue was discovered on Actiontec T2200H T2200H-31.128L.08 devices, as distributed by Telus. By attaching a UART adapter to the UART pins on the system board, an attacker can use a special key sequence Ctrl-\ to obtain a shell with root privileges. After gaining root access, the attacker can...

CVE-2019-12789

An issue was discovered on Actiontec T2200H T2200H-31.128L.08 devices, as distributed by Telus. By attaching a UART adapter to the UART pins on the system board, an attacker can use a special key sequence Ctrl-\ to obtain a shell with root privileges. After gaining root access, the attacker can...

zyxel_070810.txt

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Louhi Networks Oy -= Security Advisory =- Advisory: Zyxel Zywall 2 Multiple vulnerabilities Release Date: 2007-08-10 Last Modified: 2007-08-10 Authors: Henri Lindberg, Associate of ISC² [email protected] Application: ZyNOS Firmware Version:...