katana

Katana A BootROM exploit for Qualcomm devices released within 2016 til 2019. Brief Explanation of the Exploit With the MSM8998 Nazgul SoC, the command 0x13 SAHARARESETSTATEMACHINEID was added. The command called into bootsaharaentry, which is supposed to reinitialize Sahara. The flaw is that each...

Qualcomm Snapdragon Primary Bootloader Memory Corruption

Qualcomm Snapdragon Primary Bootloader contains a write-what-where condition while processing a crafted ELF file. This proof of concept provides read-only Sahara/EDL reconnaissance, including identity, memory, PBL, and fuse reads...

sahara-dashboard (10.0.2) potentially affected by CVE-2026-55748 via horizon (15.3.2)

horizon PYPI version 15.3.2 is affected by a known vulnerability. The following packages have a transitive dependency on horizon and may be impacted: - sahara-dashboard 10.0.2 Source cves: CVE-2026-55748 Source advisory: OSV:PYSEC-2026-2519...

blazar-dashboard (1.2.0), freezer-web-ui (7.0.0.0b1) +3 more potentially affected by CVE-2026-55748 via horizon (17.1.0)

horizon PYPI version 17.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on horizon and may be impacted: - blazar-dashboard 1.2.0 - freezer-web-ui 7.0.0.0b1 - monasca-ui 1.13.0 - sahara-dashboard =9.0.0.0b3, =2.4.0, =3.0.1 Source cves: CVE-2026-55748...

Exploit for Classic Buffer Overflow in Qualcomm Apq8097_Firmware

Katana A BootROM exploit for Qualcomm devices released within...

sahara-dashboard (10.0.2) potentially affected by CVE-2026-55748 via horizon (15.3.2)

horizon PYPI version 15.3.2 is affected by a known vulnerability. The following packages have a transitive dependency on horizon and may be impacted: - sahara-dashboard 10.0.2 Source cves: CVE-2026-55748 Source advisory: OSV:GHSA-6WRM-X65G-HR4P...

blazar-dashboard (1.2.0), freezer-web-ui (7.0.0.0b1) +3 more potentially affected by CVE-2026-55748 via horizon (17.1.0)

horizon PYPI version 17.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on horizon and may be impacted: - blazar-dashboard 1.2.0 - freezer-web-ui 7.0.0.0b1 - monasca-ui 1.13.0 - sahara-dashboard =9.0.0.0b3, =2.4.0, =3.0.1 Source cves: CVE-2026-55748...

PT-2026-34740

Name of the Vulnerable Software and Affected Versions Qualcomm Snapdragon chips MDM and MSM series Description A hardware-level flaw exists in the BootROM of certain legacy and mid-range Snapdragon chipsets. The issue is exposed via the Sahara protocol in Emergency Download Mode EDL, allowing an...

CISA and Partners Release Advisory Update on Akira Ransomware

Today, Cybersecurity and Infrastructure Security Agency CISA, in collaboration with the Federal Bureau of Investigation, Department of Defense Cyber Crime Center, Department of Health and Human Services, and international partners, released an updated joint Cybersecurity Advisory, StopRansomware:...

EUVD-2014-1117

Malware in sbrugna...

EUVD-2021-17258

Malware in sbrugna...

CVE-2021-30327

Buffer overflow in sahara protocol while processing commands leads to overwrite of secure configuration data in Snapdragon Mobile, Snapdragon Compute, Snapdragon Auto, Snapdragon IOT, Snapdragon Connectivity, Snapdragon Voice & Music...

Hackers Targeting Human Rights Activists in Morocco and Western Sahara

Human rights activists in Morocco and the Western Sahara region are the targets of a new threat actor that leverages phishing attacks to trick victims into installing bogus Android apps and serve credential harvesting pages for Windows users. Cisco Talos is tracking the activity cluster under the...

Starry Addax targets human rights defenders in North Africa with new malware

Cisco Talos is disclosing a new threat actor we deemed "Starry Addax" targeting mostly human rights activists associated with the Sahrawi Arab Democratic Republic SADR cause with a novel mobile malware. Starry Addax conducts phishing attacks tricking their targets into installing malicious Androi...

sahara-villes.com Cross Site Scripting vulnerability OBB-3896373

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2021-30327

Buffer overflow in sahara protocol while processing commands leads to overwrite of secure configuration data in Snapdragon Mobile, Snapdragon Compute, Snapdragon Auto, Snapdragon IOT, Snapdragon Connectivity, Snapdragon Voice & Music...

CVE-2021-30327

Buffer overflow in sahara protocol while processing commands leads to overwrite of secure configuration data in Snapdragon Mobile, Snapdragon Compute, Snapdragon Auto, Snapdragon IOT, Snapdragon Connectivity, Snapdragon Voice & Music...

Buffer overflow

Buffer overflow in sahara protocol while processing commands leads to overwrite of secure configuration data in Snapdragon Mobile, Snapdragon Compute, Snapdragon Auto, Snapdragon IOT, Snapdragon Connectivity, Snapdragon Voice & Music...

CVE-2021-30327

CVE-2021-30327 describes a buffer overflow in the Sahara protocol during command processing that overwrites secure configuration data in Qualcomm Snapdragon products. Affected are Snapdragon Mobile, Compute, Auto, IOT, Connectivity, and Voice & Music lines. Root cause: buffer overflow in Sahara p...

CVE-2021-30327

Buffer overflow in sahara protocol while processing commands leads to overwrite of secure configuration data in Snapdragon Mobile, Snapdragon Compute, Snapdragon Auto, Snapdragon IOT, Snapdragon Connectivity, Snapdragon Voice & Music...