7354 matches found
IoT-Implant-Toolkit
IoT-Implant-Toolkit IoT-Implant-Toolkit is a framework of useful tools for malware implantation research of IoT devices. It is a toolkit consisted of essential software tools on firmware modification, serial port debugging, software analysis and stable spy clients. With an easy-to-use and...
The vulnerability of the Serial Wire Debug interface (SWD) in the highly integrated wireless system on chip (SoC) Realtek RTL8762C allows a hacker to circumvent existing security restrictions and expose sensitive information.
The vulnerability of the Serial Wire Debug SWD interface in the highly integrated wireless system on chip SoC Realtek RTL8762C is related to improper protection against voltage and clock failures. Exploiting this vulnerability can allow attackers to circumvent existing security restrictions and...
CVE-2025-45512
U-Boot 1.1.3 Exploit PoC 사용 가이드 소개 이 PoCProof of Concept는 2019년 8월 27일에 컴파일된 U-Boot 부트로더 버전 1.1.3의 취약점을 확인하기 위해 제작되었습니다. 이 코드는 OWASP IoT 보안 테스트 가이드ISTG 카테고리와 관련된 5가지 취약점을 구현합니다. 경고: 이 PoC는 테스트 권한이 있는 장치에서만 사용하십시오. 권한 없이 시스템에 사용하면 관련 법률을 위반할 수 있습니다. 요구사항 1. Python 3.6+ 2. 직렬 인터페이스UART를 통한 대상 장치의 물...
bread
🍞 BREAD BREAD BIOS Reverse Engineering & Advanced Debugger는 다른 PC에서 시리얼 케이블을 통해 임의의 리얼 모드 코드실제 하드웨어에서를 디버깅할 수 있는 '주입 가능한' 리얼 모드 x86 디버거입니다. 소개 BREAD는 레거시 BIOS를 리버스 엔지니어링하려는 많은 실패한 시도에서 탄생했습니다. 대부분의 BIOS 분석이 디스어셈블러를 사용하여 정적으로 수행된다는 점을 감안할 때, 주어진 코드 조각에서 레지스터나 메모리의 값을 알 방법이 없기 때문에 BIOS를 이해하는 것이 매우...
pyFlipper
PyFlipper Flipper Zero Python CLI 래퍼 글 레스토랑 해킹 방법 기능 및 특징: Flipper 시리얼 CLI 래퍼 Websocket 클라이언트 인터페이스 일반 TCP 인터페이스 새로운 기능 펌웨어 1.x 호환성 이번 릴리스는 래퍼를 현재 Flipper Zero CLI에 맞게 업데이트합니다 실제 하드웨어, 펌웨어 unlshd-089e에서 검증됨: 새로운info 모듈: flipper.info.deviceinfo / powerinfo / powerdebuginfo 최신 info device / info...
linux-fingerprint-r503
linux-fingerprint-r503 — Grow R503 + Arduino を使用した Linux 向け指紋ログイン 部品から組み立てる Linux デスクトップ向け USB 指紋リーダーです。部品の合計コストは 15 ドル未満。アップストリームの fprintd のドロップイン代替品で、PAM、KDE 設定、GNOME 設定、fprintd-verify、指での sudo、指での画面ロック解除がすべて動作します。 fw=1.0 / r503d 1.0.0 の時点で、Arduino↔ホスト間の配線は認証されます。すべてのコマンドとレスポンスには、EEPROM 内の TOFU...
wmi-static-spoofer
wmi-static-spoofer 動機： 当初の動機は、アンチチートなどの侵入的なソフトウェアや、ソフトウェアに実装されたライセンス制限によって使用されるHWID検出方法をバイパスすることです。この概念は新しいものではありませんが、他のソリューションでは常にドライバをロードしておく必要があり、不安定になる可能性のあるカーネルフックが必要です。このプロジェクトは直接メモリ操作のみを使用し、関数をフックしたり、カーネルモジュールを常にロードしておくことなく、シリアルを偽装することを可能にします。 説明：...
MeshTNC
MeshTNC MeshTNC는 LoRa 데이터를 소비자용 라디오와 주고받기 위한 도구입니다. 코드 - github.com/datapartyjs/MeshTNC 릴리즈 - github.com/datapartyjs/MeshTNC/releases 지원 - ko-fi/dataparty 기능 펌웨어에 내장된 간단한 시리얼 CLI 시리얼 CLI를 사용하여 LoRA를 통해 원시 바이트hex 전송 LoRA 패킷 로깅을 시리얼hex로 출력 BLE 패킷 스니핑 KISS-TNC 모드 컴파일 Visual Studio Code용 PlatformIO...
TPMGenie
TPM Genie TPM Genieは、Trusted Platform Moduleの脆弱性研究を支援するために設計されています。シリアルバスインターセプタとして、ホストマシンと個別TPMチップ間のI2Cチャネルを流れるすべてのトラフィックを傍受および変更できます。 研究以外では、TPM Genieが示す脅威モデルでは、攻撃者はインターセプタデバイスを埋め込むために、影響を受けるマシンに一時的に物理アクセスする必要があります。このような攻撃は、「Evil...
CVE-2026-6085
A Stored Cross-Site Scripting (XSS) vulnerability exists in the StockAgile API and management panel developed by Novadigits technologies. The flaw is located on the server side within the REST endpoint /inventory/configuration/serial-number-types. It allows a remote, previously authenticated atta...
CVE-2026-6085 Stored Cross-Site Scripting in StockAgile by Novadigits technologies
Stored Cross-Site Scripting XSS vulnerability in StockAgile API and management panel. The vulnerability is present on the server side in REST endpoint '/inventory/configuration/serial-number-types' that allow the injection and persistence of malicious JavaScript code through parameters such as...
ABL_ROP
ABLシリアルをROPで更新する: このノートブックを実行すると、ABLをロードし、ROPチェーンを介してmemmoveを呼び出し、デバイスのシリアル番号を更新しようとします。eShardの https://github.com/eshard/pixel6-boot/blob/main/runablpublic.ipynb を元に、 https://eshard.com/posts/pixel6bootloader に沿って作成されています。 出力 root@kitploit: partition misc not found failed to read miscvendor...
EXOS < 31.7.4 / 32.0.0 < 32.7.4.15 / 33.0.0 < 33.1.100, 33.7.0 < 33.7.1 Privilege Escalation (SA-2026-088)
The version of EXOS installed on the remote host is missing a security update. It is, therefore, affected by an privilege escalation vulnerability. - ExtremeXOS shell environment utilities fail to safely canonicalize paths and can follow symbolic links from a writable user directory to a privileg...
AZL-103814 CVE-2026-97480 affecting package kernel 6.6.157.1-1
In the Linux kernel, the following vulnerability has been resolved: tty: serial: 8250: protect against NULL uart-port.dev in register serial8250register8250port conditionally copies uart-port.dev from up-port.dev only when up-port.dev is non-NULL: if up-port.dev uart-port.dev = up-port.dev; ... S...
EUVD-2026-86078
In the Linux kernel, the following vulnerability has been resolved: tty: serial: 8250: protect against NULL uart-port.dev in register serial8250register8250port conditionally copies uart-port.dev from up-port.dev only when up-port.dev is non-NULL: if up-port.dev uart-port.dev = up-port.dev; ... S...
CVE-2026-97480
A vulnerability exists in the Linux kernel within the tty serial 8250 driver. The function serial8250_register_8250_port() fails to ensure that uart->port.dev is non-NULL when both the existing uart slot and the new up structure have NULL ->dev pointers. This leads to a NULL pointer derefer...
CVE-2026-97480 tty: serial: 8250: protect against NULL uart->port.dev in register
In the Linux kernel, the following vulnerability has been resolved: tty: serial: 8250: protect against NULL uart-port.dev in register serial8250register8250port conditionally copies uart-port.dev from up-port.dev only when up-port.dev is non-NULL: if up-port.dev uart-port.dev = up-port.dev; ... S...
adups-get-super-serial
adups-get-super-serial CVE-2015-2231 概念実証 CVE-2015-2231 'Get Super Serial' のデモに使用していた POC です。この脆弱性を持つ他の ADUPS ファームウェア搭載デバイスでも同様のことが行えるように、公開してほしいと何人かの人に依頼されました。ノートパソコンを整理しているので、失われる前に投稿しておきます。 使用方法 このアプリケーションは、クリック可能なボタンを 1 つ作成するだけで、それをクリックすると system として sh /data/local/tmp/yay/shell.sh...
ROS-20260923-73-0082
The vulnerability of the arcserialprobe function in the drivers/tty/serial/arcuart.c file of the console TTY driver in the Linux kernel’s serial port module is related to improper memory release. Exploiting this vulnerability could allow an attacker to cause a service failure...
EUVD-2026-84512
Lantronix SLC8000 before firmware v9.7.0.2, EMG8500/EMG7500 before firmware v9.7.0.1, and all firmware versions of SLB882/SLCx-03/SLCx-02 contain a stack-based buffer overflow vulnerability that allows authenticated attackers to potentially execute arbitrary code by exploiting an undocumented mfc...