Piano LED Visualizer 1.3 - Local File Inclusion

Piano LED Visualizer 1.3 and prior are vulnerable to local file inclusion. id: CVE-2022-24900 info: name: Piano LED Visualizer 1.3 - Local File Inclusion author: 0xAkoko severity: high description: | Piano LED Visualizer 1.3 and prior are vulnerable to local file inclusion. impact: | An attacker...

LG LED Assistant - Unauthenticated Password Reset

The /api/changePw endpoint in LG LED Assistant allows unauthenticated password resets when requests are considered to come from localhost. An attacker can spoof the X-Forwarded-For header with value 127.0.0.1 to trigger the behavior and receive a success response. id: CVE-2024-2862 info: name: LG...

LG LED Assistant - Thumbnail Path Traversal File Upload

A path traversal vulnerability exists in the endpoint handler for /api/thumbnail in Common.js. An unauthenticated remote attacker can exploit this to upload arbitrary files to any location on the disk drive where the product is installed. id: CVE-2024-2863 info: name: LG LED Assistant - Thumbnail...

sleuthkit

The Sleuth Kit INTRODUCTION The Sleuth Kit is an open source forensic toolkit for analyzing Microsoft and UNIX file systems and disks. The Sleuth Kit enables investigators to identify and recover evidence from images acquired during incident response or from live systems. The Sleuth Kit is open...

f32

f32 は、USB-C レセプタクルの真後ろに直接取り付けるように設計された超小型 ESP32 開発ボードです。PCB のサイズはわずか 9.85 mm x 8.45 mm。ESP32-C3FH4 マイクロコントローラを搭載し、主に研究目的と、ESP32 へのちょっとしたストレステストとして作られました。というのも、標準的な設計ガイドラインの多くを意図的に無視しているからです。露出している GPIO は 1 つだけで、オンボード LED に接続されているため、ここでの開発の多くは WiFi/Web 向けになります。 f32...

shining-mask

Shining Mask 破解 本仓库包含用于为 Shining LED 面具创建自定义蓝牙低功耗 BLE 控制器的代码和说明，该控制器会自动更改 BLE 范围内任何面具的面部图像。本仓库是 变脸入侵：蓝牙 LED 面具的万圣节恶作剧 的配套资源。 功能 自动连接 BLE 范围内的任何 Shining LED 面具并上传狐狸脸 脚本运行后无需任何用户交互 物料清单 Adafruit Feather nRF52840 Express 从技术上讲，任何支持 CircuitPython 且具备 BLE 功能的 Feather 开发板 都应该可用，但这是我们使用的型号。 任何适用于 Feathe...

lights-out

Lights Out このリポジトリには、ThinkPad X230のウェブカメラLEDをラップトップへの物理的なアクセスなしで ソフトウェア制御できるようにするツールが含まれています。 これらは、マルウェアがLED表示なしでウェブカメラ経由でビデオを録画できることを実証するために作成されました。 これは、USB経由でウェブカメラのファームウェアを書き換えることで実現されます（X230のウェブカメラは内部でUSB接続されています）。これにより、LEDを任意に制御する機能が追加されます。...

unknownpwn.github.io

Tecnovision LEDビデオウォールの脆弱性とエクスプロイト。SQLiから完全なルートアクセスまで。 はじめに: Tecnovisionは、アリーナ（例：トゥイッケナム・スタジアム）、コンサートホール、ショッピングモール、道路標識など、さまざまな場所で使用されるLEDビデオウォールのメーカーです。DlxSpot Player...

CVE-2026-94128

A security vulnerability has been detected in BioStar VIVID LED DJ 4.0.2411.1500. This affects the function sub1105C of the file BSLED64.sys of the component IOCTL Handler. The manipulation of the argument AssociatedIrp leads to write-what-where condition. Local access is required to approach thi...

EUVD-2026-83823

A security vulnerability has been detected in BioStar VIVID LED DJ 4.0.2411.1500. This affects the function sub1105C of the file BSLED64.sys of the component IOCTL Handler. The manipulation of the argument AssociatedIrp leads to write-what-where condition. Local access is required to approach thi...

CVE-2026-94128 BioStar VIVID LED DJ IOCTL BS_LED64.sys sub_1105C write-what-where

A security vulnerability has been detected in BioStar VIVID LED DJ 4.0.2411.1500. This affects the function sub1105C of the file BSLED64.sys of the component IOCTL Handler. The manipulation of the argument AssociatedIrp leads to write-what-where condition. Local access is required to approach thi...

CVE-2026-94128

BioStar VIVID LED DJ 4.0.2411.1500 contains a write-what-where vulnerability in the IOCTL Handler (function sub_1105C of BS_LED64.sys). Manipulation of the AssociatedIrp argument allows a local attacker with low privileges to corrupt memory, leading to high impact on confidentiality, integrity, a...

CVE-2026-94128: Write-what-where Condition

A security vulnerability has been detected in BioStar VIVID LED DJ 4.0.2411.1500. This affects the function sub1105C of the file BSLED64.sys of the component IOCTL Handler. The manipulation of the argument AssociatedIrp leads to write-what-where condition. Local access is required to approach thi...

Linux Distros Unpatched Vulnerability : CVE-2026-93128

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - platform/x86: lg-laptop: Fix LED resource handling The event notification callback might access kbdbacklight even when it was not successfully registered with t...

AZL-102917 CVE-2026-93128 affecting package kernel 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: platform/x86: lg-laptop: Fix LED resource handling The event notification callback might access kbdbacklight even when it was not successfully registered with the LED subsystem. The same happens inside acpiremove, where the LED...

DEBIAN-CVE-2026-93128

In the Linux kernel, the following vulnerability has been resolved: platform/x86: lg-laptop: Fix LED resource handling The event notification callback might access kbdbacklight even when it was not successfully registered with the LED subsystem. The same happens inside acpiremove, where the LED...

CVE-2026-90060

In the Linux kernel, the following vulnerability has been resolved: ALSA: control: Don't add invalid kcontrols to LED layer The kcontrol LED state layer tries to track the all associated kcontrol elements with naive assumptions that they are readable. But one can create a write-only element that...

CVE-2026-93128 platform/x86: lg-laptop: Fix LED resource handling

In the Linux kernel, the following vulnerability has been resolved: platform/x86: lg-laptop: Fix LED resource handling The event notification callback might access kbdbacklight even when it was not successfully registered with the LED subsystem. The same happens inside acpiremove, where the LED...

CVE-2026-93128

CVE-2026-93128 affects the platform/x86 lg-laptop driver in the Linux kernel . The event notification callback may access the kbd_backlight LED device even when it was not successfully registered with the LED subsystem, and acpi_remove() unconditionally unregisters LED devices. The fix tracks the...

EUVD-2026-82236

In the Linux kernel, the following vulnerability has been resolved: platform/x86: lg-laptop: Fix LED resource handling The event notification callback might access kbdbacklight even when it was not successfully registered with the LED subsystem. The same happens inside acpiremove, where the LED...