USB Spy

USB SPY usb-spy is a USB Mass Storage traffic analyzer built around a WiFi or Ethernet-enabled microcontroller. The board exposes a disk image FAT or any filesystem as a fake USB Mass Storage device to a target system, while the actual storage data is provided by a remote server over WiFi or...

cve-2022-31705

CVE-2022-31705 Introducción https://www.vmware.com/content/vmware/vmware-published-sites/us/security/advisories/VMSA-2022-0033.html.html Probado en Windows VMware Workstation 16.2.0, con sistema operativo invitado Ubuntu Server 22 Al menos un dispositivo USB debe estar conectado a la máquina...

USBArmyKnife

🚀 USB Army Knife v2 se está gestando — y va a ser una bestia Tras dos años de desarrollo activo de la v1, la v2 está pensada para convertir el USB Army Knife en una plataforma completa de red team en tu bolsillo. Un gran anuncio llegará este otoño, pero quería adelantar algo:...

CVE-2026-89621

A flaw was found in the Linux kernel's HID Human Interface Device mcp2221 driver. A malicious USB device can exploit this vulnerability by sending a specially crafted, short HID report with an invalid size. This can cause the system to read past valid memory, leading to the disclosure of sensitiv...

CVE-2026-80973

A flaw was found in the Linux kernel's ALSA Advanced Linux Sound Architecture subsystem, specifically within the 6fire driver. This vulnerability allows a malicious USB device to trigger an out-of-bounds read by sending a specially crafted MIDI event with an excessive length. This can lead to the...

CVE-2026-89621

In the Linux kernel, the following vulnerability has been resolved: HID: mcp2221: validate report size in mcp2221rawevent mcp2221rawevent never validates the size of incoming HID reports. In the MCP2221I2CGETDATA path it trusts the device-supplied data3 as the copy length without checking that 4 ...

CVE-2026-89621

CVE-2026-89621 is a Linux kernel vulnerability in the HID mcp2221 driver's mcp2221_raw_event() function. The function fails to validate the size of incoming HID reports in the MCP2221_I2C_GET_DATA path, trusting a device-supplied data[3] field as the copy length without verifying that 4 + data[3]...

EUVD-2026-76533

In the Linux kernel, the following vulnerability has been resolved: HID: mcp2221: validate report size in mcp2221rawevent mcp2221rawevent never validates the size of incoming HID reports. In the MCP2221I2CGETDATA path it trusts the device-supplied data3 as the copy length without checking that 4 ...

EUVD-2026-76296

In the Linux kernel, the following vulnerability has been resolved: ALSA: 6fire: bound the MIDI event length from the device usb6firecommreceiverhandler forwards a MIDI event using a length byte the device supplies, with no bound and no check that the transfer delivered that many bytes: if...

usbrip

usbrip heredado de "USB Ripper", no "USB R.I.P." es una herramienta forense simple con interfaz de línea de comandos que le permite rastrear artefactos de dispositivos USB es decir, historial de eventos USB en máquinas Linux. Índice: Descripción Inicio Rápido Demostración Estructura del Registro...

usbrip

usbrip inherited from "USB Ripper", not "USB R.I.P." is a simple forensics tool with command line interface that lets you keep track of USB device artifacts i.e., USB event history on Linux machines. Table of Contents: Description Quick Start Showcase System Log Structure Dependencies deb pip...

CVE-2023-40930

Introducción Es una introducción sobre cómo configurar el entorno de repetición de CVE-2023-40930 Obtén más información sobre este problema CVE en "issue detail.pdf" Configuración General Puedes usar un rasperry pi zero 2W o cualquier otro dispositivo con arquitectura ARM64 también ARM32 para...

kernel: USB: serial: io_ti: fix heap overflow in get_manuf_info()

A flaw was found in the Linux kernel's ioti USB serial driver. A malicious USB device, when plugged into a host running this driver, can exploit a heap overflow vulnerability in the getmanufinfo function. This occurs because the driver does not properly validate the size of data read from the...

rinhit

RinHit RinHit - macOS ecosystem reconnaissance framework. Collects artifacts from the Apple ecosystem to build timelines of network activity, cross-device identity, and physical location correlation. This is the open-source reconnaissance module. The closed-source Swift payload rinhit-agent is...

zephyr_cve-2021-3625

CVE-2021-3625 Este repositorio contiene algunos exploits de ejemplo para CVE-2021-3625. Todos los dispositivos USB basados en Zephyr hasta la versión 2.5.0 incluida sufren un desbordamiento de búfer que permite la lectura de hasta 65 kB. Dependiendo del dispositivo real esto puede provocar la fug...

vUSBf

vusbf-Framework root@kitploit: / / / / / / / / // | | / / / / / / / / / / / / / /\ / | | |/ / / / / // // / // / / / // // / // / |/ /,/,// //// / / / // / / / // // / / / / / // / / / // // / / // ,/ ///// A KVM/QEMU based USB-fuzzing framework. Sergej Schumilo, OpenSource Security...

blackleak

BlackLeak Prueba de concepto para CVE-2024-30212 Tabla de contenidos 1. Acerca del PoC 2. Primeros pasos Requisitos previos Instalación 3. Uso 4. Licencia 5. Contacto 6. Agradecimientos Acerca del PoC Esta es la prueba de concepto para CVE-2024-30212. Para más detalles, consulta...

CVE-2026-80780

CVE-2026-80780 is an out-of-bounds write in the Linux kernel's HID: pidff driver, specifically in hid_pidff_init_with_quirks(). The function calls list_entry() on hid->inputs without verifying the list is non-empty. When hid->inputs is empty—possible with a USB device whose report descripto...

CVE-2026-80773

In the Linux kernel, the following vulnerability has been resolved: HID: huawei: fix missing hidisusb check tousbinterface can only be used on a hiddevice whose parent is really USB; uhid can create devices that identify as being on BUSUSB, but don't actually have a USB parent. Fix the use of...

Linux Distros Unpatched Vulnerability : CVE-2026-80780

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - HID: pidff: fix OOB write when hid-inputs is empty hidpidffinitwithquirks derives its inputdev from listentryhid-inputs.next, struct hidinput, list without firs...