CVE-2017-16778-Intercom-DTMF-Injection

Invocación de Tonos DTMF para la Concesión de Acceso Físico en el Sistema de Intercomunicador para Ascensores Fermax CVE-2017-16778 Menciones Especiales En primer lugar, a @dizijoyjoy por su ayuda en el montaje de la demostración para que la grabación fuera un éxito. Un agradecimiento especial a...

EUVD-2026-67961

IGEL OS 12 before 12.7.6 and IGEL OS 11 before 11.11.150 contain a boot registry parameter injection vulnerability that allows attackers with physical access to execute arbitrary Linux loader parameters by writing to an unencrypted and unsigned configuration area read by the signed bootloader...

EUVD-2026-67962

IGEL OS 12 before 12.9.0, 12.8.3 LTS and IGEL OS 11 before 11.11.150 contain a secure boot bypass vulnerability in the GRUB boot stage that allows physically present attackers to gain unauthorized root access by placing an unsigned empty file named igel.conf on a partition. Attackers can exploit...

CVE-2022-38694_unlock_bootloader

CVE-2022-38694 Un atacante con acceso físico al dispositivo puede sobrescribir un puntero a función en algún lugar de la sección de datos de la BootROM o una dirección de retorno almacenada en la pila y ejecutar su propio código con privilegios de BootROM. Para obtener información detallada, lea ...

bitlocker-attacks

Ataques a BitLocker Una lista de ataques públicos a BitLocker. Cualquier ataque público con el potencial de atacar BitLocker pero cuyo método exacto aún no sea público como baton drop queda fuera del alcance. La mayoría de los ataques son para cuando la VMK está sellada únicamente por el TPM, que...

CVE-2026-82018

IGEL OS 12 (before 12.9.0 / 12.8.3 LTS ) and IGEL OS 11 (before 11.11.150 ) contain a secure boot bypass in the GRUB boot stage . A physically present attacker can place an unsigned empty file named igel.conf on a partition, exploiting GRUB's fail-open signature verification behavior to reach an ...

CVE-2026-82017

IGEL OS 12 (before 12.7.6 ) and 11 (before 11.11.150 ) are affected by a boot registry parameter injection vulnerability. The root cause is an unencrypted and unsigned configuration area that is read by the signed bootloader. An attacker with physical access can write malicious Linux kernel comma...

CVE-2025-51643

CVE-2025-51643: Flash SPI non protetto consente l'estrazione del firmware in Meitrack T366G-L Descrizione I dispositivi Meitrack T366G-L GPS Tracker contengono un chip di memoria flash SPI Winbond 25Q64JVSIQ accessibile senza autenticazione o protezione anti-manomissione. Un attaccante con access...

CVE-2025-65731

CVE-2025-65731 CWE-1191: Interface de Depuração e Teste no Chip com Controle de Acesso Inadequado Acesso à Shell Root via UART no D-Link DIR-605L Hardware F1, Firmware V6.02CN02 Resumo Uma vulnerabilidade crítica de segurança de hardware foi identificada no roteador D-Link DIR-605L, Versão de...

CVE-2025-63296

CVE-2025-63296 Resumo KERUI K259 5MP Wi-Fi / Tuya Smart Security Camera firmware v33.53.87 contém uma vulnerabilidade de execução de código em sua lógica de inicialização/atualização: durante a inicialização, /usr/sbin/anykaservice.sh examina cartões TF/SD montados e, se /mnt/update.nor.sh estive...

Code-27-Companion-Hub-Exploits

Schwachstellen im Code 27 3D Companion Hub CVE-2026-36027, CVE-2026-36028 Der Code 27 3D Companion Hub ist ein physisches Desktop-Gerät, das eine benutzerdefinierte KI-Figur einen "Codie" als animierten 3D-Begleiter darstellt. Benutzer können beliebige 3D-Modelle hochladen oder erstellen, und...

KDE_Vuln

Gedanken zur KDE-vFAT-Sicherheitslücke. 1: Der Umfang ist nicht so groß, wie ich zunächst angenommen habe. Die meisten Systeme sind vermutlich auf neuere Versionen von KDE aktualisiert oder verwenden eine andere GUI. Ich müsste mir jedoch einige tatsächliche Statistiken ansehen, um eine genaue Za...

Insular

Insular Isola la tua app del grande fratello. Questo è un fork basato sull'eccellente Island. Un ringraziamento speciale a Shelter che mi ha ispirato a creare il fork completamente FLOSS di Island. Documentazione Per informazioni su come abilitare Insular tramite adb, accesso ai file tra profili,...

CVE-2026-81717

opensslencrypt pip package openssl-encrypt before 1.4.9 contains two weaknesses in the portable USB drive feature, whose threat model treats the removable drive as untrusted attacker with physical write access. USBDriveCreator.verifyintegrityfile only validates files listed in the manifest, so...

CVE-2026-81681

opensslencrypt pip package openssl-encrypt versions = 1.4.8 advertise a portable USB workspace as an 'Encrypted USB Workspace' with AES-256-GCM encryption and write a marker declaring the workspace encrypted, but the workspace directory is actually stored in cleartext and the derived encryption k...

Extracting-User-credentials-For-Web-portal-and-WiFi-AP-For-Hathway-Router-CVE-2024-44815-

Estrazione delle credenziali utente per router Hathway tramite SPI flash-CVE-2024-44815 Descrizione della vulnerabilità: Durante la valutazione della sicurezza del firmware del router, è stato osservato che le credenziali di accesso del router, sia del portale web che del punto di accesso Wi-Fi...

EUVD-2026-67046

openssl-encrypt pip package before 1.4.9 contains a symlink-following flaw in its verify-usb v2 added-file allowlist scan. The scan enumerated the drive with rglob, which in CPython does not descend into symlinked directories and treats the symlink as an ordinary directory, while ONOFOLLOW on the...

CVE-2026-81690 verify-usb before 1.4.9 Symlink Directory Traversal Code Execution

openssl-encrypt pip package before 1.4.9 contains a symlink-following flaw in its verify-usb v2 added-file allowlist scan. The scan enumerated the drive with rglob, which in CPython does not descend into symlinked directories and treats the symlink as an ordinary directory, while ONOFOLLOW on the...

CVE-2026-81690

openssl-encrypt (pip package) versions before 1.4.9 contain a symlink-following flaw in its verify-usb v2 added-file allowlist scan. The vulnerability arises because rglob() in CPython does not descend into symlinked directories, while O_NOFOLLOW on the hash side binds only the final path compone...

CVE-2026-81681

openssl_encrypt (pip package openssl-encrypt) versions ≤ 1.4.8 advertise a portable USB workspace as an "Encrypted USB Workspace" with AES-256-GCM encryption and write a marker declaring it encrypted, but the workspace directory is actually stored in cleartext — the derived encryption key is neve...