219 matches found
EmbedOS
EmbedOS EmbedOS - Embedded security testing operating system based on Ubuntu 18.04 preloaded with firmware security testing tools. The virtual machine can be downloaded and imported as an OVF file into VirtualBox or VMWare. Download Link The most recent version is 2020.2 from October 2020 and can...
karonte
Karonte Karonte एक स्थैतिक विश्लेषण उपकरण है जो एम्बेडेड फर्मवेयर में मल्टी-बाइनरी कमजोरियों का पता लगाने के लिए उपयोग किया जाता है। master शाखा Karonte का नवीनतम संस्करण प्रदान करती है, जिसे python3 में पोर्ट किया गया है। हमारे पेपर में प्रस्तुत मूल कार्यान्वयन और प्रयोगों के लिए, कृपया IEEE-SP-...
CVE-2021-38489 HDD Password Stored In Plaintext
HDD password plaintext is stored in a UEFI variable...
TotoLink Router setMacFilterRules - Command Injection
TOTOLINK A3300R V17.0.0cu.557B20221024 was discovered to contain a command injection vulnerability via the enable parameter in the setMacFilterRules function. id: CVE-2024-24328 info: name: TotoLink Router setMacFilterRules - Command Injection author: pussycat0x severity: critical description: |...
chipsec v2.0.8
CHIPSEC: Platform Security Assessment Framework CHIPSEC is a framework for analyzing the security of PC platforms including hardware, system firmware BIOS/UEFI, and platform components. It includes a security test suite, tools for accessing various low level interfaces, and forensic capabilities...
Astra Linux – Vulnerability in edk2
In Ubuntu’s EDK2, a insecure default setting was left enabled, allowing UEFI Shell to be used. This enables an attacker with access to the operating system to bypass Secure Boot...
CVE-2026-6484
In an UEFI, Lack of verified boot to certain FV may cause arbitrary code execution...
CVE-2026-6484
CVE-2026-6484 concerns UEFI firmware where lack of verified boot for certain FV enables arbitrary code execution. The available data indicates a local attack vector with high privileges required and high impact on confidentiality, integrity, and availability (per CVSS 3.1 vector: AV:L/AC:L/PR:H/U...
PT-2026-70961
In an UEFI, Lack of verified boot to certain FV may cause arbitrary code execution...
CVE-2025-30239
In affected TP-Link Aginet devices, use of hardcoded cryptographic keys embedded in the firmware to protect sensitive configuration data may allow an attacker who has access to device storage to recover the keys and decrypt stored data. Successful exploitation may allow access to decrypted...
Security Bulletin: NVIDIA Networking BlueField and ConnectX - June 2026
NVIDIA has released a software update for NVIDIA® Networking BlueField and ConnectX. To protect your system, download and install the latest NVIDIA firmware. Refer to the Security Updates section for updated versions and download links for each product. Go to NVIDIA Product Security. Details The...
Unitree UPK 安全漏洞
Unitree UPK is a robot firmware update package developed by the Chinese company Unitree. Unitree UPK contains a security vulnerability. This vulnerability stems from the encryption algorithm used to protect firmware updates, which uses key material that can be obtained by attackers. This could...
CVE-2025-29948
Improper access control in AMD Secure Encrypted Virtualization SEV firmware could allow a malicious hypervisor to bypass RMP protections, potentially resulting in a loss of SEV-SNP guest memory integrity...
CVE-2019-16734
Use of default credentials for the TELNET server in Petwant PF-103 firmware 4.3.2.50 and Petalk AI 3.2.2.30 allows remote attackers to execute arbitrary system commands as the root user...
kernel: ALSA: usb-audio: Validate UAC3 power domain descriptors, too
In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Validate UAC3 power domain descriptors, too UAC3 power domain descriptors need to be verified with its variable bLength for avoiding the unexpected OOB accesses by malicious firmware, too...
LLMs As Firmware Experts: A Runtime-Grown Tree-Of-Agents Framework
Large Language Models LLMs and their agent systems have recently demonstrated strong potential in automating code reasoning and vulnerability detection. However, when applied to large-scale firmware, their performance degrades due to the binary nature of firmware, complex dependency structures, a...
EUVD-2020-29590
Malware in sbrugna...
EUVD-2020-28135
Malware in sbrugna...