hardware-compliance-handbook

Base de connaissances sur la conformité matérielle Une référence ouverte et vérifiée sur les lois de l'UE qui régissent la cybersécurité du matériel et de l'IoT — CRA, RED, NIS2 et la loi sur la cybersécurité/EUCC, réunis en un seul endroit plutôt que quatre. Préparé par Platanor Technologies...

cve-2016-5345

CVE-2016-5345 تصعيد امتيازات في مشغّل راديو FM من Qualcomm. تم اختبار الاستغلال على جهاز ASUS. بعض الامتيازات مطلوبة مسبقًا لفتح مشغّل الجهاز الهش. اكتُشف CVE الأصلي بواسطة Aravind Machiry donfos من فريق Shellphish Grill...

CVE-2026-81660

CVE-2026-81660 affects the Groundhogg — CRM, Newsletters, and Marketing Automation WordPress plugin in versions prior to 4.5.13 . The vulnerability stems from insufficient validation and escaping of values submitted to optional web form dropdown and radio fields , which are then stored and render...

433Screen-SignalHacker

433Screen-SignalHacker Stato del progetto: Questo repository è un prototipo più vecchio di hacking di segnali a 433 MHz. È stato sostituito da EMWaver , la piattaforma di esplorazione hardware di Continual MI, che a sua volta è stata ritirata e archiviata a luglio 2026. L'intera storia di EMWaver...

CVE-2024-54385

CVE-2024-54385 Radio Player = 2.0.82 - Server-Side Request Forgery non autenticata Descrizione Il plugin per WordPress Radio Player – Live Shoutcast, Icecast and Any Audio Stream Player è vulnerabile a Server-Side Request Forgery in tutte le versioni fino alla 2.0.82 inclusa. Ciò consente a utent...

QCSuper

QCSuper QCSuper è uno strumento che comunica con telefoni e modem basati su Qualcomm, consentendo di catturare frame radio 2G/3G/4G grezzi e su alcuni modelli 5G, tra le altre cose. Ti permetterà di generare catture PCAP utilizzando un telefono Android rooted, un dongle USB o una cattura esistent...

gps-sdr-sim

GPS-SDR-SIM GPS-SDR-SIM generates GPS baseband signal data streams, which can be converted to RF using software-defined radio SDR platforms, such as ADALM-Pluto, bladeRF, HackRF, and USRP. Windows build instructions 1. Start Visual Studio. 2. Create an empty project for a console application. 3. ...

CVE-2026-18323

The Forminator Forms – Contact Form, Payment Form & Custom Form Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Radio Field Save and Continue Draft in all versions up to, and including, 1.57.0.2 due to insufficient input sanitization and output escaping. This makes i...

EUVD-2026-65314

The Forminator Forms – Contact Form, Payment Form & Custom Form Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Radio Field Save and Continue Draft in all versions up to, and including, 1.57.0.2 due to insufficient input sanitization and output escaping. This makes i...

CVE-2026-18323

The Forminator Forms plugin for WordPress (versions up to and including 1.57.0.2 ) is vulnerable to unauthenticated Stored XSS via the Radio Field "Save and Continue Draft" feature. The root cause is insufficient input sanitization and output escaping: the Save-and-Continue AJAX endpoint is regis...

CVE-2026-18323 Forminator Forms <= 1.57.0.2 - Unauthenticated Stored Cross-Site Scripting via Radio Field (Save and Continue Draft)

The Forminator Forms – Contact Form, Payment Form & Custom Form Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Radio Field Save and Continue Draft in all versions up to, and including, 1.57.0.2 due to insufficient input sanitization and output escaping. This makes i...

Astra Linux – Vulnerabilities in Linux, Linux-5.15, Linux-5.10

In the Linux kernel, the following vulnerability has been resolved: media: radio-shark: Added endpoint checks The syzbot fuzzer was able to trigger a WARNING message from the radio-shark2 driver: ------------ Cut here ------------ usb 1-1: BOGUS urb xfer, pipe 1 != type 3 WARNING: CPU: 0 PID: 327...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: NFC: NULLed the dev-rfkill to prevent UAF The commit 3e3b5dfcd16a “NFC: reordered the logic in nfcun,registerdevice” assumes that the deviceisregistered function in the nfcdevup function will help to check when the rfkill is...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: ax25: Fixed the reference count leak issue of netdevice. There is a reference count leak issue with the object “netdevice” in ax25devdevicedown. When the ax25 device is being shut down, ax25devdevicedown reduces the reference cou...

CVE-2026-54491 Koel: Incomplete fix for CVE-2026-47260 — systemic SSRF in podcast & radio fetch paths

Koel is a free, open-source music streaming solution. Prior to 9.7.1, outbound podcast and radio fetch paths perform a point-in-time App\Helpers\Network::isPublicHost or isSafeUrl check without pinning the validated address, and most paths lack redirect-hop validation and do not revalidate every...

CVE-2026-54491

Koel versions prior to 9.7.1 contain an authenticated SSRF: any low-privilege user can supply a URL that 302-redirects to internal addresses or cloud metadata IPs (e.g., 169.254.169.254), since isPublicHost()/isSafeUrl() checks are point-in-time with no IP pinning and per-hop redirect validation ...

CVE-2026-54491 Koel: Incomplete fix for CVE-2026-47260 — systemic SSRF in podcast & radio fetch paths

Koel is a free, open-source music streaming solution. Prior to 9.7.1, outbound podcast and radio fetch paths perform a point-in-time App\Helpers\Network::isPublicHost or isSafeUrl check without pinning the validated address, and most paths lack redirect-hop validation and do not revalidate every...

CVE-2026-54491 Koel: Incomplete fix for CVE-2026-47260 — systemic SSRF in podcast & radio fetch paths

Koel is a free, open-source music streaming solution. Prior to 9.7.1, outbound podcast and radio fetch paths perform a point-in-time App\Helpers\Network::isPublicHost or isSafeUrl check without pinning the validated address, and most paths lack redirect-hop validation and do not revalidate every...

The vulnerability in the `drivers/media/radio/radio-keene.c` component of the Linux operating system allows a hacker to trigger a service failure.

The vulnerability in the drivers/media/radio/radio-keene.c component of the Linux operating system is related to improper memory release before deleting the last reference. Exploiting this vulnerability can allow an attacker to cause a service failure...

CVE-2026-72821

Grav Form plugin versions before 9.1.15 contain a stored cross-site scripting vulnerability in radio and toggle field option labels rendered with the Twig |raw filter. Attackers with form authoring permissions can inject HTML and script payloads in option labels that execute in the browsers of...