Security Bulletin: This Power System update is being released to address CVE-2026-96263

Summary Power Systems Firmware is affected by a vulnerability in the host firmware boot process image validation path. An attacker with service access to the service processor can supply a maliciously crafted code update image, allowing arbitrary code to be executed on the host system. Successful...

Security Bulletin: This Power System update is being released to address CVE-2026-96266

Summary Power Systems Firmware is affected by a vulnerability in host firmware configuration parsing. An attacker with authenticated service-level access to the FSP can write specially crafted configuration data to cause memory corruption in the host firmware boot stage during system IPL,...

power-tracks-research

Power Tracks 研究 针对 "Power Tracks"、"Stock Galaxy" 和 "Warped Prism" 市场机制的综合研究仓库。该代码库包含用于发现和映射现代市场微观结构中系统性异常的工具、流程和验证套件。 结构 研究分为三大支柱： I. 信号：Power Tracks 与隐写术 检测异常 "心跳" 与隐藏数据通道。 Phase 57 : 检测栈 - 检测 Power Tracks 的主要工具集。 隐写术 : 26天分析 - 对打印数据中隐蔽信号传递的全面研究。 EDGX 解码 : 玻璃屋行动 - 深入分析交易所特定订单类型与操作码。 II...

CVE-2026-97430

A flaw was found in the Linux kernel's USB eXtensible Host Controller Interface xHCI driver. When the host controller is inaccessible during power management operations, such as system suspend or resume, new commands are not properly prevented from being added to the command ring. A local user...

CVE-2026-97431

A flaw was found in the Linux kernel's AMD display driver. When updating display streams, the driver improperly handles phantom streams that have already been destroyed, triggering a null pointer dereference. A local attacker can trigger this issue during display power management operations,...

CVE-2026-97427

A flaw was found in the Linux kernel's AMD GPU power management driver. A local user with write access to the powerplay sysfs interface could trigger a heap-based buffer overflow by providing input data exceeding the allocated buffer size. This issue can lead to memory corruption, resulting in a...

CVE-2009-3999-HP-Power-Manager-4.2-Build-7-Buffer-Overflow

在我准备OSCP的过程中，我遇到了CVE-2009-3999（HP Power Manager 4.2（Build 7）缓冲区溢出漏洞）。 此最新脚本已更新，以解决Python 3中有关字符串和字节处理的兼容性问题，确保payload以原始二进制形式传输，避免内存损坏。...

Eaton-Intelligent-Power-Manager-Local-File-Inclusion

Eaton-Intelligent-Power-Manager-Local-File-Inclusion Inclusión de archivo local en Eaton Intelligent Power Manager v1.6 permite a un atacante incluir un archivo, lo que puede provocar divulgación de información sensible, denegación de servicio y ejecución de código. CVE-2018-12031 Para explotar l...

uhubctl

uhubctl uhubctl es una utilidad para controlar la alimentación USB por puerto en concentradores USB inteligentes. Un concentrador inteligente se define como aquel que implementa conmutación de alimentación por puerto. La idea original de este código se inspiró en hub-ctrl.c de Niibe Yutaka:...

CVE-2026-97414

A flaw was found in the Linux kernel's MediaTek audio driver. When suspending the audio device, the driver fails to verify whether memory allocation for the register backup buffer succeeded before accessing it. A local user capable of triggering power management operations during low-memory...

Overglade-Badges

Overglade Hackathon 徽章 这些是我为新加坡的 overglade hackathon 设计的零功耗 hackathon 徽章！它们由 RP2040 驱动，具有被动 NFC 功能和板载电子墨水屏驱动！ 定制功能 被动 NFC 轻触，随心所欲 电子墨水屏支持，无需电池 20 个 GPIO 引脚引出至排针，便于编程 主动 NFC 模式，可用于更复杂的操作 零功耗，核心功能无需供电 RP2040 SoC，4MB 闪存 酷炫的 PCB 和露铜艺术 PCB 设计 这是一块简单的双层板，每层都有地铜填充。我还对电路板的形状和艺术图案进行了 CAD 设计，确保一切完美对称！ 编程与设...

power-pwn

Mantenido por: Asegura agentes de IA en todas partes. Descripción general Power Pwn es un conjunto de herramientas de seguridad ofensiva y defensiva para Microsoft 365 Power Platform y los servicios de IA. Características clave, entre otras: 💾 PowerDump : Escaneo integral del tenant y recopilació...

Exploits

Exploits CVEs originales, PoCs de exploits y avisos de seguridad por @kmkz · boffsec-services.com · @kmkzsecurity 2026 Archivo| Objetivo| Tipo| CVSSv3 ---|---|---|--- CVE-2026-22191-SicuroWeb-ATI-chain.txt| SicuroWeb / Beghelli Sicuro24| Aviso cadena de 3 CVE| 9.3 CVE-2026-22191-POC.py| SicuroWeb...

CVE-2023-28343

CVE-2023-28343 Altenergy Power System Control Software settimezone 远程命令执行漏洞（CVE-2023-28343） 中文名称：Altenergy Power System Control Software settimezone 远程命令执行漏洞（CVE-2023-28343） CVSS 评分：9.0 描述 ：Altenergy Power System Control Software 是 Altenergy Power System 公司的一款微型逆变器控制软件。 影响 ：Altenergy Power System...

ossem-power-up

OSSEM 一个基于优秀的 OSSEM 项目构建的数据质量评估工具。 目标 回答这个问题：我想开始狩猎 ATT&CK 技术，哪些日志源和事件更合适？ 透明化你的日志源的优势和劣势 提供一种简单的方法来评估你的日志 OSSEM Power-up 概述 Power-up 使用 OSSEM 检测数据模型（DDM）作为其数据质量评估的基础。主要原因是它提供了一种结构化的方式，将 ATT&CK 数据源、通用信息模型实体（CIM）和 数据字典（事件）相互关联起来。 对于那些不熟悉 DDM 结构的人，这里有一个示例： ATT&CK 数据源| 子数据源| 源数据对象| 关系| 目标数据对象| Event...

Powertek Firmware <3.30.30 - Authorization Bypass

Powertek firmware multiple brands before 3.30.30 running Power Distribution Units are vulnerable to authorization bypass in the web interface. To exploit the vulnerability, an attacker must send an HTTP packet to the data retrieval interface /cgi/getparam.cgi with the tmpToken cookie set to an...

CVE-2026-97512

A flaw was found in the Linux kernel's Qualcomm Serial Peripheral Interface spi-qcom-qspi driver. This flaw can result in a Denial of Service DoS or system instability due to incomplete error handling during runtime power management PM suspend and resume operations. If an operation fails midway,...

power_analysis

Ataque de análisis de potencia sobre RSA Índice Introducción Ataques de análisis de potencia RSA: Una breve introducción Ejemplo de RSA Equipo Medición de potencia: una breve introducción Ley de Ohm Ley de Voltaje de Kirchhoff LVK Divisor de voltaje Resistencia shunt Ejemplo de medición de potenc...

CVE-2026-98003

A flaw was found in the Linux kernel's AMD Input-Output Memory Management Unit IOMMU driver. When the system resumes from sleep, the driver reallocates internal logging buffers without releasing previously allocated memory and performs memory requests in an invalid context. A local user with powe...

CVE-2026-93276

A flaw was found in the Linux kernel's Renesas R-Car USB 2.0 PHY driver. A local user could cause a denial of service DoS by unbinding or removing the affected device. Because the driver fails to properly register a power regulator cleanup routine during initialization, device removal leaves the...