196 matches found
IoT-Implant-Toolkit
IoT-Implant-Toolkit IoT-Implant-Toolkit is a framework of useful tools for malware implantation research of IoT devices. It is a toolkit consisted of essential software tools on firmware modification, serial port debugging, software analysis and stable spy clients. With an easy-to-use and...
CVE-2024-54085
CVE-2024-54085: Critical Authentication Bypass Vulnerability in AMI MegaRAC BMC Affected Systems The vulnerability affects a wide range of server hardware from major manufacturers: AMI MegaRAC SPx : versions 12.x up to 12.7 and 13.x up to 13.5 HPE Cray XD670 : versions 1.09, 1.13, 1.17 Asus...
CVE-2026-85478
A CM2507 IP camera running firmware version HMT.CM2507 v251211.1507 exposes an interactive bootloader through a physical debug interface without requiring authentication. An attacker with physical access could interrupt the normal boot process and access functionality that permits inspection or...
EUVD-2026-83046
A CM2507 IP camera running firmware version HMT.CM2507 v251211.1507 exposes an interactive bootloader through a physical debug interface without requiring authentication. An attacker with physical access could interrupt the normal boot process and access functionality that permits inspection or...
CVE-2026-85478 CareCam CM2507 Missing Authentication for Critical Function
A CM2507 IP camera running firmware version HMT.CM2507 v251211.1507 exposes an interactive bootloader through a physical debug interface without requiring authentication. An attacker with physical access could interrupt the normal boot process and access functionality that permits inspection or...
CVE-2026-85478
The CareCam CM2507 IP camera running firmware HMT.CM2507 v251211.1507 exposes an interactive bootloader through a physical debug interface with no authentication required . An attacker with physical access can interrupt the normal boot process and inspect or modify boot configuration, firmware da...
CVE-2026-85478 CareCam CM2507 Missing Authentication for Critical Function
A CM2507 IP camera running firmware version HMT.CM2507 v251211.1507 exposes an interactive bootloader through a physical debug interface without requiring authentication. An attacker with physical access could interrupt the normal boot process and access functionality that permits inspection or...
CVE-2026-22017-Firmware-Update-via-BLE-Without-Authentication
CVE-2026-22017 – Firmware Update via BLE Without Authentication Program Code Python bleak peripheral root@kitploit: blefirmwareupdate.py - Simulated BLE peripheral accepting firmware writes from bleak import BleakServer, BleakGATTCharacteristic import asyncio class FirmwareService: def initself:...
CVE-2026-85083
The ANJIA AJL33PC0801 IP camera uses a hard-coded credential for bootloader authentication. An attacker with physical access to the device may leverage this weakness to gain privileged bootloader access, allowing unauthorized modification of firmware and system configuration and potentially...
EUVD-2026-76128
The ANJIA AJL33PC0801 IP camera uses a hard-coded credential for bootloader authentication. An attacker with physical access to the device may leverage this weakness to gain privileged bootloader access, allowing unauthorized modification of firmware and system configuration and potentially...
CVE-2026-85083
CVE-2026-85083 affects the ANJIA AJL33PC0801 IP camera (CareCam Pro), which ships with a hard-coded credential used for bootloader authentication . The affected firmware is linuxlinux202008261138 svn13796 with U-Boot 2010.06 (compiled Aug 26, 2020). An attacker with physical access can exploit th...
PT-2026-88450
🔴 CISA flags hardcoded credential flaw in CareCam Pro IP cameras deployed globally ANJIA AJL33PC0801 IP camera firmware linuxlinux202008261138 svn13796, U-Boot 2010.06 compiled Aug 26 2020 contains hardcoded bootloader credentials. An attacker with physical access can exploit CVE-2026-85083 to ga...
CVE-2026-11736
A stack-based buffer overflow vulnerability affects certain NETGEAR models allowing an authenticated admin user to make unauthorized modification to router software and functionality...
CVE-2026-9214
The CVE-2026-9214 entry concerns NETGEAR R7000 routers. The root cause is insufficient input validation in the affected device. Affected are authenticated administrators on the local network who can tamper with router software and functionality, leading to unauthorized modifications. No exploitat...
CVE-2026-11736 Stack-based buffer overflow vulnerability in some NETGEAR Nighthawk routers
A stack-based buffer overflow vulnerability affects certain NETGEAR models allowing an authenticated admin user to make unauthorized modification to router software and functionality...
CVE-2026-11735
Technical details are not publicly available in the provided documents. Monitor for updates.
CVE-2026-11735 Stack-based buffer overflow vulnerability in some NETGEAR Nighthawk models
A stack-based buffer overflow vulnerability affects the listed NETGEAR models allowing an authenticated admin user to make unauthorized modification to the router's software and functionality...
EUVD-2026-56194
A stack-based buffer overflow vulnerability affects the listed NETGEAR models allowing an authenticated admin user to make unauthorized modification to the router's software and functionality...
CVE-2026-11835 Caliptra Update-Reset Secure-Boot Bypass via Attacker-Chosen AXI Staging Address (TOCTOU)
Time-of-check time-of-use TOCTOU vulnerability combined with missing input validation in Caliptra Core ROM UpdateResetFlow::run in subsystem mode allows a compromised local attacker to silently bypass secure boot by supplying an AXI staging address that is not validated against the strap-configur...
CVE-2026-11835 Caliptra Update-Reset Secure-Boot Bypass via Attacker-Chosen AXI Staging Address (TOCTOU)
Time-of-check time-of-use TOCTOU vulnerability combined with missing input validation in Caliptra Core ROM UpdateResetFlow::run in subsystem mode allows a compromised local attacker to silently bypass secure boot by supplying an AXI staging address that is not validated against the strap-configur...