1646 matches found
Extracting-User-credentials-For-Web-portal-and-WiFi-AP-For-Hathway-Router-CVE-2024-44815-
Extraction des identifiants utilisateur pour le routeur Hathway via la mémoire flash SPI - CVE-2024-44815 Description de la vulnérabilité : Lors de l’évaluation de la sécurité du firmware du routeur, il a été observé que les identifiants de connexion du routeur, à la fois pour le portail web et l...
Sensitive-Information-disclosure-via-SPI-flash-firmware-for-Hathway-router-CVE-2024-46383
Divulgation d'informations sensibles via le firmware de la mémoire flash SPI pour le routeur Hathway - CVE-2024-46383 Description de la vulnérabilité : Lors de l'évaluation de sécurité du firmware du routeur, il a été observé que les informations sensibles concernant les appareils connectés au...
CVE-2026-80752
In the Linux kernel, the following vulnerability has been resolved: Input: psxpad-spi - set driver data before use psxpadspisuspend retrieves the controller state with spigetdrvdata, but probe never stores it, so suspend dereferences a NULL pointer. Store it during probe...
CVE-2026-80752
A NULL pointer dereference exists in the Linux kernel's psxpad-spi input driver. The psxpad_spi_suspend() function calls spi_get_drvdata() to retrieve the controller state, but the probe function never stores that data, so any suspend operation dereferences a NULL pointer, likely causing a kernel...
EUVD-2026-70356
In the Linux kernel, the following vulnerability has been resolved: Input: psxpad-spi - set driver data before use psxpadspisuspend retrieves the controller state with spigetdrvdata, but probe never stores it, so suspend dereferences a NULL pointer. Store it during probe...
CVE-2026-80752 Input: psxpad-spi - set driver data before use
In the Linux kernel, the following vulnerability has been resolved: Input: psxpad-spi - set driver data before use psxpadspisuspend retrieves the controller state with spigetdrvdata, but probe never stores it, so suspend dereferences a NULL pointer. Store it during probe...
CVE-2023-20577
A heap overflow in SMM module may allow an attacker with access to a second vulnerability that enables writing to SPI flash, potentially resulting in arbitrary code execution...
CVE-2023-20576
Insufficient Verification of Data Authenticity in AGESA™ may allow an attacker to update SPI ROM data potentially resulting in denial of service or privilege escalation...
CVE-2023-20577
A heap overflow in the SMM (System Management Mode) module of certain AMD processors allows a local, unauthenticated attacker with a second vulnerability enabling SPI flash writes to achieve arbitrary code execution . The flaw affects multiple AMD product lines including 2nd–4th Gen EPYC , Ryzen ...
CVE-2023-20577
A heap overflow in SMM module may allow an attacker with access to a second vulnerability that enables writing to SPI flash, potentially resulting in arbitrary code execution...
EUVD-2023-60617
A heap overflow in SMM module may allow an attacker with access to a second vulnerability that enables writing to SPI flash, potentially resulting in arbitrary code execution...
EUVD-2023-60616
Insufficient Verification of Data Authenticity in AGESA™ may allow an attacker to update SPI ROM data potentially resulting in denial of service or privilege escalation...
CVE-2023-20576
CVE-2023-20576 is a HIGH severity (CVSS 3.1: 7.7) vulnerability in AMD processor firmware caused by insufficient verification of data authenticity in AGESA (AMD Generic Encapsulated Software Architecture). A local unauthenticated attacker can update SPI ROM data , potentially leading to denial of...
CVE-2023-20576
Insufficient Verification of Data Authenticity in AGESA™ may allow an attacker to update SPI ROM data potentially resulting in denial of service or privilege escalation...
yaml-payload-2
yaml-payload Un payload d'exploitation de désérialisation SnakeYAML pour CVE-2022-1471 , adapté de artsploit/yaml-payload initialement basé sur mbechler/marshalsec. Ce qu'il fait Lorsqu'il est chargé via la méthode non sécurisée Yaml.load de SnakeYAML, ce payload prend le contrôle de l'applicatio...
CVE-2025-51643
CVE-2025-51643 : Une flash SPI non protégée permet l'extraction du firmware sur le Meitrack T366G-L Description Les traceurs GPS Meitrack T366G-L contiennent une puce flash SPI Winbond 25Q64JVSIQ accessible sans authentification ni protection anti-altération. Un attaquant disposant d'un accès...
CVE-2026-80712
A flaw was found in the Linux kernel's spi-qpic-snand driver. This vulnerability arises from an incorrect timing issue where the SETFEATURE command for SPI-NAND flash devices is executed before the intended feature value is properly written. Consequently, the device is programmed with an outdated...
Linux Distros Unpatched Vulnerability : CVE-2026-80712
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - spi: spi-qpic-snand: write the feature value before executing SETFEATURE qcomspisendcmdaddr programs NANDFLASHCMD/NANDEXECCMD and submits the descriptors, which...
SpiMitm
+OPTIONS: ^: SpiMitm - PoC MitM-атаки на чтение SPI-флэша для анти-форенсики прошивок Данный PoC ориентирован на https://up-board.org/upsquared/specifications/UP Squared. Как использовать После копирования всех файлов в папку edk2-platforms следуйте процессу сборки Алана Сгуиньи, описанному...