ME2-Writeup

用热风枪和刀逆向工程 ME2 的 USB 背景 2024 年，bjiru 上传了一个关于 ME2 手持设备的视频，这是一个大约 2008 年生产的玩具，其特色是能够通过 USB 在设备与在线世界之间同步积分和宝石。这款游戏极为小众，因此没有软件、驱动程序或资源被存档，至少直到 bjiru 公开了在线游戏客户端之前是这样。 我是 Miuchiz Reborn 的领导者，该计划始于 2015 年，旨在保存、逆向工程、模拟 并维护一款类似游戏的可用性，该游戏同样包含通过 USB 连接的在线部分和手持部分。由于类似的年代和游戏类型，ME2 早在 2018 年就由我的 Miuchiz...

PT-2025-53947

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the Linux kernel’s ath9k driver related to the handling of skb socket buffer memory within the ath9k hif usb reg in cb function. Specifically, the issue...

CVE-2020-9063

NCR SelfServ ATMs running APTRA XFS 05.01.00 or earlier do not authenticate or protect the integrity of USB HID communications between the currency dispenser and the host computer, permitting an attacker with physical access to internal ATM components the ability to inject a malicious payload and...

CVE-2019-6535

Mitsubishi Electric Q03/04/06/13/26UDVCPU: serial number 20081 and prior, Q04/06/13/26UDPVCPU: serial number 20081 and prior, and Q03UDECPU, Q04/06/10/13/20/26/50/100UDEHCPU: serial number 20101 and prior. A remote attacker can send specific bytes over Port 5007 that will result in an Ethernet...

CVE-2019-6535: Uncontrolled Resource Consumption

Mitsubishi Electric Q03/04/06/13/26UDVCPU: serial number 20081 and prior, Q04/06/13/26UDPVCPU: serial number 20081 and prior, and Q03UDECPU, Q04/06/10/13/20/26/50/100UDEHCPU: serial number 20101 and prior. A remote attacker can send specific bytes over Port 5007 that will result in an Ethernet...