304 matches found
Linksys-WRT54GL-Exploitation
납땜부터 셸까지: Linksys WRT54GL 라우터의 전체 하드웨어 익스플로잇 CVE-2022-43973 JTAG 핀 탐색부터 MIPS 기반 가정용 라우터의 원격 코드 실행까지 — 10단계 임베디드 보안 연구 여정. | ---|--- 저자| Umberto Della Monica 역할| MSc 사이버보안 학생 — 임베디드 보안 연구원 날짜| 2026년 5월 저장소| Linksys-WRT54GL-Exploitation 고지 사항: 본 연구는 제가 개인적으로 소유한 하드웨어에서 교육 및 연구 목적으로만 수행되었습니다. 허가되지 않...
CVE-2018-18852
CERIO 라우터 인증된 RCE 벤더 백도어 자격 증명 CVE-2018-18852 Python PoC hook-s3c github.com/andripwn, 트위터 @andripwn CVE-2018-18852에 대한 동작하는 Python PoC, 원본 출처; https://github.com/andripwn/CVE-2018-18852 개요 CERIO 라우터 모델 및 변형인 DT300N, DT100G, AMR-3204, WMR-200N은 루트 사용자로 인증된 웹 기반 RCE에 취약합니다. 미공개 0day 권고로 존재합니다;...
bowcaster
Bowcaster Exploit 개발 프레임워크 이 프레임워크는 Python으로 구현되었으며, 페이로드, 인코더, connect-back 서버 등 유용한 도구와 모듈을 제공하여 익스플로잇을 개발하는 사람들을 돕기 위한 것입니다. 현재 이 프레임워크는 MIPS CPU 아키텍처에 중점을 두고 있지만, 설계상 임의의 아키텍처를 지원할 수 있을 만큼 모듈화되어 있습니다. 설치하려면 다음을 실행하세요: python setup.py install...
CVE-2026-80627
A flaw was found in the Linux kernel, specifically within the MIPS architecture's memory management component. The maarreswalk function performs an out-of-bounds write when processing memory ranges. This occurs because the function fails to check if its internal array is full before writing new...
CVE-2026-80627
This Linux kernel vulnerability affects the MIPS memory management subsystem. The function maar_res_walk() uses wi->num_cfg as an index into a fixed-size wi->cfg array but checks whether the array is full only after writing the entry. If walk_system_ram_range() reports more than 16 memory r...
EUVD-2026-67503
In the Linux kernel, the following vulnerability has been resolved: MIPS: mm: Fix out-of-bounds write in maarreswalk maarreswalk uses wi-numcfg as the index into the fixed-size wi-cfg array, but checks whether the array is full only after it has filled the selected entry. If walksystemramrange...
Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15
In the Linux kernel, the following vulnerability has been resolved: MIPS: Do not crash in stacktop for tasks without an ABI or vDSO Not all tasks have an ABI associated with them, or a vDSO mapped to them. For example, kthreads never have such an ABI. If such a task calls stacktop, it will...
Astra Linux – Vulnerabilities in Linux, Linux-5.10, Linux-5.15
In the Linux kernel, the following vulnerabilities have been resolved: mips: bmips: BCM6358: disabled RAC flush for TP1 RAC flush causes kernel panics on BCM6358 with EHCI/OHCI when booting from TP1: 3.881739 usb 1-1: new high-speed USB device number 2 using ehci-platform 3.895011 Reserved...
Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15
In the Linux kernel, the following vulnerabilities have been resolved: MIPS: Loongson64: DTS: Actually fixed the PCIe port nodes for ls7a. Fixed the dtc warnings: arch/mips/boot/dts/loongson/ls7a-pch.dtsi:68.16-416.5: Warning interruptprovider: /bus@10000000/pci@1a000000: 'interrupt-cells' found,...
CVE-2026-72181
A flaw was found in the Linux kernel's scheduler component, specifically when handling CPU masks on MIPS architecture with CONFIGCPUMASKOFFSTACK enabled. An incorrect size calculation during the copyfromuser operation could lead to memory corruption. This vulnerability allows a local attacker to...
Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100768)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100768 advisory. In the Linux kernel, the following vulnerability has been resolved: MIPS: Work around LLVM bug when gp is used as global register variable On MIPS, currentthreadinfo...
The vulnerability in the `arch/mips/kernel/relocate.c` component of the Linux operating system allows a hacker to trigger a service failure.
The vulnerability in the arch/mips/kernel/relocate.c component of the Linux operating system relates to the pointer relocation beyond the allocated memory range. Exploiting this vulnerability can allow an attacker to cause a service failure...
CVE-2026-72215
In the Linux kernel, the following vulnerability has been resolved: MIPS: DEC: Ensure 32-bit stack location for o32 promprintf In 64-bit configurations calling any firmware entry points from a kernel thread other than the initial one will result in a situation where the stack has been placed in t...
PT-2026-72502
In the Linux kernel, the following vulnerability has been resolved: regulator: core: regulator lock two should test for EDEADLK not EDEADLOCK Compare against -EDEADLK, which is what ww mutex lock actually returns and what every other deadlock check in this file already uses. Function regulator lo...
Linux Distros Unpatched Vulnerability : CVE-2026-72181
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - mips: sched: Fix CPUMASKOFFSTACK memory corruption This patch addresses a critical memory management flaw. When CONFIGCPUMASKOFFSTACK is enabled, cpumaskvart is...
USN-8620-2 linux-azure-fips vulnerabilities
Maxim Suhanov discovered that the NTFS file system implementation in the Linux kernel did not properly validate file name length in certain situations, leading to an out-of-bounds read. An attacker could use this to construct a malicious NTFS image that, when mounted and operated on, could expose...
CVE-2026-64248
A flaw was found in the Linux kernel, specifically affecting systems using the MIPS architecture. During the shutdown process of a CPU, the kernel's internal mechanism responsible for managing concurrent data access Read-Copy Update or RCU is not properly informed that the CPU is no longer active...
USN-8620-1: Linux kernel vulnerabilities
Maxim Suhanov discovered that the NTFS file system implementation in the Linux kernel did not properly validate file name length in certain situations, leading to an out-of-bounds read. An attacker could use this to construct a malicious NTFS image that, when mounted and operated on, could expose...
USN-8618-1: Linux kernel vulnerabilities
It was discovered that some AMD Zen 2 processors did not properly isolate shared resources in the operation cache. A local attacker could possibly use this issue to corrupt instructions executed at a higher privilege level, resulting in privilege escalation. CVE-2025-54518 Several security issues...
