Commands and Tools for Embedded Reverse Engineering

We’ve been training a lot of people to look at embedded systems. The training is intensive, and it can be hard to remember all the commands and tools used. This is just a quick rundown of those tools with enough information to jog your memory! Basic Commands If we want to see the content of a fil...

Serial Number Identification (macOS)

Binary data macosxserialnumber.nbin...

Unspecified Vulnerability in TCL Communication Alcatel Cingular Flip 2 B9HUAH1

The TCL Communication Alcatel Cingular Flip 2 B9HUAH1 is a cell phone from TCL Communication TCL, a Chinese company. A security vulnerability exists in the TCL Communication Alcatel Cingular Flip 2 B9HUAH1. The vulnerability can be exploited to bypass PIN authentication by creating a specially...

CVE-2019-13691

Insufficient validation of untrusted input in navigation in Google Chrome prior to 77.0.3865.75 allowed a remote attacker to spoof the contents of the Omnibox URL bar via a crafted HTML page...

CVE-2012-5644

libuser has information disclosure when moving user's home directory...

CVE-2013-1817

MediaWiki before 1.19.4 and 1.20.x before 1.20.3 contains an error in the api.php script which allows remote attackers to obtain sensitive information...

CVE-2016-1000236

Node-cookie-signature before 1.0.6 is affected by a timing attack due to the type of comparison used...

CVE-2019-11409

creationtimestamp| type| source ---|---|--- 2019-11-13 17:44:06+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/unix/webapp/fusionpbxoperatorpanelexeccmdexec.rb 2019-11-20 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/47697 2025-02-06...

SUSE SLED15 / SLES15 Security Update : ucode-intel (SUSE-SU-2019:2958-1)

This update for ucode-intel fixes the following issues : Updated to 20191112 security release bsc1155988 - Processor Identifier Version Products - Model Stepping F-MO-S/PI Old-New - ---- new platforms ---------------------------------------- - CML-U62 A0 6-a6-0/80 000000c6 Core Gen10 Mobile - CNL...

[SECURITY] Fedora 29 Update: file-5.34-15.fc29

The file command is used to identify a particular file according to the type of data contained by the file. File can identify many different file types, including ELF binaries, system libraries, RPM packages, and different graphics formats...

CVE-2019-8707

creationtimestamp| type| source ---|---|--- 2019-11-08 10:29:26+00:00| seen| MISP/5dc3d86a-32a4-41c7-90f7-4ca0950d210f 2024-03-15 09:11:20+00:00| seen| https://t.me/ctinow/208523 2024-03-15 10:11:55+00:00| seen| https://t.me/ctinow/208581 2024-03-15 10:11:56+00:00| seen| https://t.me/ctinow/20858...

CVE-2019-1223

creationtimestamp| type| source ---|---|--- 2019-11-08 10:29:26+00:00| seen| MISP/5dc3d86a-32a4-41c7-90f7-4ca0950d210f...

Sparrow-Wifi - Next-Gen GUI-based WiFi And Bluetooth Analyzer For Linux

Sparrow-wifi has been built from the ground up to be the next generation 2.4 GHz and 5 GHz Wifi spectral awareness tool. At its most basic it provides a more comprehensive GUI-based replacement for tools like inSSIDer and linssid that runs specifically on linux. In its most comprehensive use case...

YNedut Smart Campus platform has information leakage vulnerability

YNedut Smart Campus Platform is an intelligent scheduling software for campus learning developed by Chengdu Enable Technology Co. There is an information leakage vulnerability in YNedut Smart Campus Platform. An attacker can check the user's name, ID number and other sensitive information in the...

Kernel: net: weak IP ID generation leads to remote device tracking

A flaw was found in the way the Linux kernel derived the IP ID field from a partial kernel space address returned by a nethashmix function. A remote user could observe a weak IP ID generation in this field to track Linux devices...

kernel: unchecked kstrdup of fwstr in drm_load_edid_firmware leads to denial of service

A flaw was found in the Linux kernel’s implementation of Extended Display Identification Data EDID technology. A firmware identifier string is duplicated with the kstrdup function, and the allocation may fail under very low memory conditions. An attacker could abuse this flaw by causing a Denial ...

CVE-2010-0207

In xpdf, the xref table contains an infinite loop which allows remote attackers to cause a denial of service application crash in xpdf-based PDF viewers...

CVE-2011-4931

gpw generates shorter passwords than required...

SUSE-SU-2019:14193-1 Security update for sudo

This update for sudo fixes the following issues: - CVE-2019-14287: Fixed an issue where a user with sudo privileges that allowed them to run commands with an arbitrary uid, could run commands as root, despite being forbidden to do so in sudoers bsc1153674...

The vulnerability of the SRX Series Application Identification (app-id) component of the Junos OS router software, which allows a attacker to execute a “man-in-the-middle” attack.

The vulnerability of the SRX Series Application Identification app-id component of the Junos OS router operating system is related to errors in the certificate validation process. Exploiting this vulnerability allows a malicious actor to execute a “man-in-the-middle” attack remotely...