221 matches found
karonte
Karonte Karonte 是一款静态分析工具，用于检测嵌入式固件中的多二进制漏洞。 master 分支提供 Karonte 的最新版本，已移植到 Python 3。如需查看我们论文中的原始实现和实验，请切换到 IEEE-SP-20 分支，并查看我们的 Docker 容器。 概览 研究论文 我们在以下研究论文中介绍了我们的方法和发现： KARONTE: 检测嵌入式固件中的不安全多二进制交互 PDF Nilo Redini, Aravind Machiry, Ruoyu Wang, Chad Spensky, Andrea Continella, Yan Shoshitaishvili...
EmbedOS
EmbedOS EmbedOS - 基于 Ubuntu 18.04 的嵌入式安全测试操作系统，预装固件安全测试工具。该虚拟机可下载为 OVF 文件，导入到 VirtualBox 或 VMWare 中使用。 下载链接 最新版本为 2020.2（2020 年 10 月），可通过以下链接下载： Google Drive 直接下载 root@kitploit: shasum -a 256 EmbedOS2020.2-disk1.vmdk f95f8c72e6dc1a57369a37ed4699c50a6ce7c0f7d86b23715a031151e09c4635...
TotoLink Router setMacFilterRules - Command Injection
TOTOLINK A3300R V17.0.0cu.557B20221024 was discovered to contain a command injection vulnerability via the enable parameter in the setMacFilterRules function. id: CVE-2024-24328 info: name: TotoLink Router setMacFilterRules - Command Injection author: pussycat0x severity: critical description: |...
Astra Linux – Vulnerability in edk2
In Ubuntu’s EDK2, a insecure default setting was left enabled, allowing UEFI Shell to be used. This enables an attacker with access to the operating system to bypass Secure Boot...
CVE-2021-38489 HDD Password Stored In Plaintext
HDD password plaintext is stored in a UEFI variable...
PT-2026-84908
HDD password plaintext is stored in a UEFI variable...
chipsec v2.0.8
CHIPSEC: Platform Security Assessment Framework CHIPSEC is a framework for analyzing the security of PC platforms including hardware, system firmware BIOS/UEFI, and platform components. It includes a security test suite, tools for accessing various low level interfaces, and forensic capabilities...
Intel Processor Firmware August 2026 Security Update
Intel has informed HP of a potential security vulnerability identified in some Intel® Processors, which might allow escalation of privilege. Intel is releasing microcode updates to mitigate this potential vulnerability. Intel has released updates to mitigate the potential vulnerabilities. HP has...
CVE-2026-6484
In an UEFI, Lack of verified boot to certain FV may cause arbitrary code execution...
CVE-2026-6484
CVE-2026-6484 concerns UEFI firmware where lack of verified boot for certain FV enables arbitrary code execution. The available data indicates a local attack vector with high privileges required and high impact on confidentiality, integrity, and availability (per CVSS 3.1 vector: AV:L/AC:L/PR:H/U...
PT-2026-70961
In an UEFI, Lack of verified boot to certain FV may cause arbitrary code execution...
CVE-2025-30239
In affected TP-Link Aginet devices, use of hardcoded cryptographic keys embedded in the firmware to protect sensitive configuration data may allow an attacker who has access to device storage to recover the keys and decrypt stored data. Successful exploitation may allow access to decrypted...
Security Bulletin: NVIDIA Networking BlueField and ConnectX - June 2026
NVIDIA has released a software update for NVIDIA® Networking BlueField and ConnectX. To protect your system, download and install the latest NVIDIA firmware. Refer to the Security Updates section for updated versions and download links for each product. Go to NVIDIA Product Security. Details The...
Unitree UPK 安全漏洞
Unitree UPK is a robot firmware update package developed by the Chinese company Unitree. Unitree UPK contains a security vulnerability. This vulnerability stems from the encryption algorithm used to protect firmware updates, which uses key material that can be obtained by attackers. This could...
CVE-2025-29948
Improper access control in AMD Secure Encrypted Virtualization SEV firmware could allow a malicious hypervisor to bypass RMP protections, potentially resulting in a loss of SEV-SNP guest memory integrity...
CVE-2019-16734
Use of default credentials for the TELNET server in Petwant PF-103 firmware 4.3.2.50 and Petalk AI 3.2.2.30 allows remote attackers to execute arbitrary system commands as the root user...
kernel: ALSA: usb-audio: Validate UAC3 power domain descriptors, too
In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Validate UAC3 power domain descriptors, too UAC3 power domain descriptors need to be verified with its variable bLength for avoiding the unexpected OOB accesses by malicious firmware, too...
LLMs As Firmware Experts: A Runtime-Grown Tree-Of-Agents Framework
Large Language Models LLMs and their agent systems have recently demonstrated strong potential in automating code reasoning and vulnerability detection. However, when applied to large-scale firmware, their performance degrades due to the binary nature of firmware, complex dependency structures, a...
