emba

EMBA The security analyzer for firmware of embedded devices EMBA is designed as the central firmware analysis and SBOM tool for penetration testers, product security teams, developers and responsible product managers. It supports the complete security analysis process starting with firmware...

firmware-mod-kit

免责声明 从 googlecode.com/p/firmware-mod-kit 自动导出 固件修改工具包 本工具包是一套脚本和工具，用于提取和重建基于 Linux 的固件映像。 将固件映像提取为其组成部件 用户对固件文件系统或 Web UI（webif）进行所需修改 重建固件 将修改后的固件刷写到设备上并使其变砖（哈哈） 警告：使用本工具包后你的设备将会变砖（也许不会，但最好还是说会）。变砖意味着设备实际上变成了一块无功能的“砖头”。有时无需硬件修改即可恢复。有时需要硬件修改（例如在 PCB 上焊接串行或 JTAG 接头）。有时根本不可行，或者总恢复成本超过设备本身价值。...

FreshTomato 路径遍历漏洞

FreshTomato is a Linux-based open source firmware from FreshTomato Open Source. The firmware provides a variety of features for Broadcom-based routers. A security vulnerability exists in FreshTomato version 2022.5, which stems from its httpd update.cgi function that allows an attacker to cause...

DD-WRT httpd unescape memory corruption vulnerability

Summary A memory corruption vulnerability exists in the httpd unescape functionality of DD-WRT Revision 32270 - Revision 48599. A specially-crafted HTTP request can lead to memory corruption. An attacker can send a network request to trigger this vulnerability. Tested Versions DD-WRT Revision 322...

Samsung SmartThings Hub hubCore Port 39500 HTTP Header Injection Vulnerability(CVE-2018-3911)

Summary An exploitable HTTP header injection vulnerability exists in the remote servers of Samsung SmartThings Hub. The hubCore process listens on port 39500 and relays any unauthenticated message to SmartThings' remote servers, which insecurely handle JSON messages, leading to partially controll...