CVE-2026-44103: Unrestricted Upload of File with Dangerous Type

An unauthenticated remote attacker can inject malicious firmware into the internal charging module because the JupiCore service transmits firmware updates without performing integrity or verification check. Successful exploitation may compromise the integrity of the affected device. This...

Quantum-Silicon-Core-Loader — Updated!

Quantum Silicon Core Loader Primary Core: qslcl.asm v0.0.2 under development Assistant Module: qslcl.bin v0.7.4 Universal Controller: qslcl.py v2.2.2 Legally Protected Research - This project operates under established legal frameworks for security research, right to repair, and academic freedom...

EUVD-2018-7354

Malware in sbrugna...

EUVD-2018-1391

Malware in sbrugna...

EUVD-2020-28630

Malware in sbrugna...

EUVD-2025-5944

Malicious code in bioql PyPI...

EUVD-2025-18989

Malicious code in bioql PyPI...

CVE-2025-48468

Successful exploitation of the vulnerability could allow an attacker that has physical access to interface with JTAG to inject or modify firmware...

CVE-2025-48468

Successful exploitation of the vulnerability could allow an attacker that has physical access to interface with JTAG to inject or modify firmware...

CVE-2024-44754

Cryptographic key extraction from internal flash in Minut M2 with firmware version 15142 allows physically proximate attackers to inject modified firmware into any other Minut M2 product via USB...

CVE-2024-44754

The Minut M2 outdoor sensor, running firmware version #15142 , is vulnerable to a security flaw involving cryptographic key extraction from internal flash. A physically proximate attacker can exploit this to inject modified firmware into other Minut M2 products via a USB connection . As a tempora...

CVE-2024-44754: Insufficiently Protected Credentials

Cryptographic key extraction from internal flash in Minut M2 with firmware version 15142 allows physically proximate attackers to inject modified firmware into any other Minut M2 product via USB...

CVE-2024-44754

Cryptographic key extraction from internal flash in Minut M2 with firmware version 15142 allows physically proximate attackers to inject modified firmware into any other Minut M2 product via USB...

PT-2025-9109

Name of the Vulnerable Software and Affected Versions Minut M2 version 15142 Description The issue allows physically proximate attackers to extract cryptographic keys from the internal flash of Minut M2 devices with the specified firmware version. This can be used to inject modified firmware into...

PT-2024-9271

Name of the Vulnerable Software and Affected Versions: OpenWrt versions prior to 920c8a1 Description: The issue is related to the Attended SysUpgrade feature of OpenWrt, which allows for the injection of malicious firmware. This is due to a combination of command injection in the ImageBuilder...

IntelliNet 2.0 Remote Root

!/usr/local/bin/node const execSync = require'childprocess'; const readline = require'readline'; let TARGET = ''; let COMMAND = ''; let SESSION = ''; const ESCALATE = '/usr/aes/bin/execsuid'; console.log ⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⡀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀ ⠀⠀⠀⠀⠀⠀⠀⠀⠀⢠⣾⡄⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀ ⠀⠀⠀⠀⠀⠀⠀⠀⢀⣼⣿⣧⣶⣶⣶⣦⣤⣀⡀⠀⠀⠀⠀⠀⠀⠀⠀⠀...

Xerox Administrator Console Password Extractor

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Xerox Administrator Console Password Extractor', 'Description' = %q This module will extract the management console's admin password from the Xer...

Trio Ethernet Firmware Data Compromise

The vulnerability of the microprogrammed Ethernet receiver software from the Trio Q, Trio E, and Trio J series is related to the loading of code without checking its integrity. Exploiting this vulnerability allows a remote attacker to inject additional code into the device’s firmware...

PT-2020-16301

Name of the Vulnerable Software and Affected Versions Inspur NF5266M5 versions 3.21.2 and earlier Description The Baseboard Management Controller BMC program of INSPUR server is weak in checking the firmware and lacks the signature verification mechanism. An attacker who obtains administrator's...

Schneider Electric Easergy T300 Firmware Data Compromise Injection

The vulnerability of the microprogrammed control module software for automation of transformer substations of Schneider Electric Easergy T300 HU250 is related to improper verification of integrity. Exploiting this vulnerability allows a malicious actor to inject additional code into the device’s...