Switcheroo

Switcheroo Nintendo Switch 탈옥 PoC 이는 CVE-2016-4657 취약점을 악용하여 닌텐도 스위치 콘솔의 향후 탈옥을 가능하게 하는 개념 증명입니다. 이는 완전한 탈옥이 아니며, 여기에 공유된 코드는 오직 학술 목적 으로만 제공됩니다! 우리는 코드 및 첨부 문서를 악의적인 활동에 사용하는 것을 권장하지 않습니다. 개발자 Idan A. @iDaN5x Avraam I. @avraaif Netanel O. 특별 감사 Alona K. 여사님 M.Sc의 지도와 지원에 감사드립니다. @LiveOverflow의 교...

CVE-2016-4657-NintendoSwitch

CVE-2016-4657-NintendoSwitch NintendoSwitch rwx용 CVE-2016-4657 이는 교육용으로만 사용해야 합니다!...

Prineo_RE

About PriPara internal name Prineo is an arcade rythm game developed by SynSophia. Goal The goal of this project was to reverse the model format of the arcade series in order to port exclusive characters to the newer version of the game on Nintendo Switch. Screenshots Some interesting screenshots...

NXLoader

NXLoader 첫 번째 Android 앱: 순정 Android에서 Fusée Gelée 페이로드 실행 Fusée Gelée 및 ShofEL2를 기반으로 크게 제작되었습니다. fusee.bin이 기본 페이로드로 번들되어 있습니다. 참고: 이 소프트웨어는 독점 페이로드를 테스트하거나 지원하지 않습니다. 귀하의 기기에서 작동하나요? 여기에 보고 APK 릴리스 받기 이 앱은 현재 "Alpha" 상태입니다. 첫 번째 Android 앱이며 상당히 지저분한 코드가 있습니다 UI 스레드에서 잠재적으로 차단되는 작업 🤢. 곧™ 개선될...

fusee-gelee

fusee-gelee Nintendo Switch向けのFusee Geleeエクスプロイト（CVE-2018-6242）の実装です。2018年3月にKate Temkin / ReSwitchedによって公開された脆弱性に基づいています。 USBリカバリモード（RCM）にあるTegra X1デバイス上で任意のペイロード（例：hekate）を起動し、ブートROMの署名検証を完全にバイパスします。 背景 RCMとは？ RCM（リカバリモード）は、Tegra...

nxboot

nxboot CLI tool for Nintendo Switch RCM payload launching Fusée Gelée. Uses Zig and libusb. Requirements Zig 0.15.2 Usage 1. Put the console in RCM and connect it to your machine via USB. 2. Run: zig build -Doptimize=ReleaseSafe run -- /path/to/payload.bin Note: with a Debug build -Doptimize=Debu...

NXLoader

NXLoader 순정 Android에서 Fusée Gelée 페이로드를 실행합니다. 여기에서 APK 파일 받기 크게 Fusée Gelée와 ShofEL2에 기반을 두고 있습니다. fusee.bin이 기본 페이로드로 번들되어 있습니다. 참고: 이 소프트웨어는 독점 페이로드를 테스트하거나 지원하지 않습니다. 당신의 기기에서 작동하나요? 모두가 알 수 있게 해주세요! 이 앱은 현재 ALPHA 상태입니다. 이해해 주셔서 감사합니다! 사용 방법: 1. USB를 통해 Switch를 RCM 모드로 연결하세요. 2. 페이로드가 즉시...

webkit-vulnerability

webkit 취약점 CVE-2016-4657 iOS 9.3용 web-kit 취약점, Nintendo Switch 브라우저 취약점 네 마음속에 뭐가 있는지 안다. Nintendo Switch에는 브라우저가 없다. 하지만 로그인을 통해 확인해야 하는 Wi-Fi를 사용해야 할 때, Safari의 CVE-2016-45657 webkit이 필요하다 webkit의 메모리 손상memory corruption으로, 사용자가 링크를 클릭하면 공격자가 이를 이용할 수 있으며, 사용자가 링크를 클릭할 때 공격자가 기기를 손상시킬 수 있다. 공격에...

CVE-2026-82079

A stack-based buffer overflow vulnerability in the Nintendo Switch local wireless networking functionality may allow an attacker within wireless range to execute arbitrary code using return-oriented programming ROP through crafted network traffic. This issue affects Nintendo Switch: before 23.0.0...

CVE-2026-82079 Potential Leakage of Nintendo Switch System Information Through a Proximity-Based Remote Attack

A stack-based buffer overflow vulnerability in the Nintendo Switch local wireless networking functionality may allow an attacker within wireless range to execute arbitrary code using return-oriented programming ROP through crafted network traffic. This issue affects Nintendo Switch: before 23.0.0...

CVE-2026-82079

A stack-based buffer overflow in the Nintendo Switch local wireless networking functionality allows an attacker within wireless range to execute arbitrary code via return-oriented programming (ROP) using crafted network traffic. The vulnerability affects Nintendo Switch firmware before 23.0.0 , w...

CVE-2026-82079 Potential Leakage of Nintendo Switch System Information Through a Proximity-Based Remote Attack

A stack-based buffer overflow vulnerability in the Nintendo Switch local wireless networking functionality may allow an attacker within wireless range to execute arbitrary code using return-oriented programming ROP through crafted network traffic. This issue affects Nintendo Switch: before 23.0.0...

EUVD-2026-75252

A stack-based buffer overflow vulnerability in the Nintendo Switch local wireless networking functionality may allow an attacker within wireless range to execute arbitrary code using return-oriented programming ROP through crafted network traffic. This issue affects Nintendo Switch: before 23.0.0...

CVE-2026-82079: Stack-based Buffer Overflow

A stack-based buffer overflow vulnerability in the Nintendo Switch local wireless networking functionality may allow an attacker within wireless range to execute arbitrary code using return-oriented programming ROP through crafted network traffic. This issue affects Nintendo Switch: before 23.0.0...

PT-2026-89278

Name of the Vulnerable Software and Affected Versions Nintendo Switch versions prior to 23.0.0 Description A stack-based buffer overflow exists in the local wireless networking functionality. An attacker within wireless range can execute arbitrary code using return-oriented programming ROP by...

Nintendo: [Switch, PIA/MK8DX] Stack buffer overflow and potential RCE in PIA (LAN/LDN, possibly NEX) room info deserialization

The vulnerability was a stack buffer overflow and potential remote code execution issue in the LAN/LDN and possibly NEX room information deserialization process of the PIA application on the Nintendo Switch. The vulnerability could have been exploited by an attacker in a LAN/LDN or NEX room...

Wallarm at Black Hat USA 2023 Booth #3131

Wallarm is excited to be back at Black Hat USA this year and meet with our friends in the community wanting or perhaps needing to learn more about integrated web app and API protection. We look forward to seeing you there! Expo Hours If you’re attending in person, the Business Hall is open for tw...

RenderDoc 1.26 Local Privilege Escalation / Remote Code Execution

Qualys Security Advisory LPE and RCE in RenderDoc: CVE-2023-33865, CVE-2023-33864, CVE-2023-33863 ======================================================================== Contents ======================================================================== Summary CVE-2023-33865, a symlink...

Video game playing FISH live streams credit card 'theft'

A fish is in hot water metaphorically speaking after having performed some incredible antics on a video game live stream. The fish, known for playing popular video game titles to completion on live streams, decided to take that whole gamer lifestyle thing a little too far and went on a rip-roarin...

CVE-2022-47949

The Nintendo NetworkBuffer class, as used in Animal Crossing: New Horizons before 2.0.6 and other products, allows remote attackers to execute arbitrary code via a large UDP packet that causes a buffer overflow, aka ENLBufferPwn. The victim must join a game session with the attacker. Other affect...