usbsas

usbsas is a free and open source GPLv3 tool and framework for securely reading untrusted USB mass storage devices. Overview Following the concept of defense in depth and the principle of least privilege, usbsas's goal is to reduce the attack surface of the USB stack. To achieve this, most of the...

umap

umap - USB 호스트 보안 평가 도구 Travis Goodspeed의 Facedancer 기반: http://goodfet.sourceforge.net/hardware/facedancer21/ NCC Group Plc에 의해 오픈 소스로 공개됨 - http://www.nccgroup.com/ 개발자: Andy Davis, andy dot davis at nccgroup dot com https://www.github.com/nccgroup/umap AGPL 라이선스로 공개됨. 자세한 내용은 LICENSE 참조. 문서...

AutoGadgetFS

이더리움 기부 : 0xA919e40ddB0563918dDc174320D91992e0048477 목차 1. AutoGadgetFS란 무엇인가? 2. 요구사항 3. 설정 a. 기기 테스트 전용 b. 중간에 최소 agfs 설정 c. 디버깅 지원을 포함한 완전한 중간 agfs 설정 4. USB 기기 클래스 지원 5. 기능 6. 로드맵 7. 설치 a. Linux b. Raspberry Pi Zero with WIFI 8. AutogadgetFS 튜토리얼 9. 스크린샷 10. Youtube 재생목록 11. Slack 12. 지원 13. ...

SUSE-SU-2026:22755-1 Security update for the Linux Kernel (Live Patch 0 for SUSE Linux Enterprise 16)

This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.5.1 fixes various security issues The following security issues were fixed: - CVE-2025-71089: iommu: disable SVA when CONFIGX86 is set bsc1256615. - CVE-2026-23393: bridge: cfm: Fix race condition in peermep deletion bsc1260524. -...

EUVD-2018-8951

Malware in sbrugna...

EUVD-2011-0657

Malware in sbrugna...

EUVD-2018-17888

Malware in sbrugna...

EUVD-2017-6569

Malware in sbrugna...

EUVD-2015-1460

Malware in sbrugna...

EUVD-2021-13609

Malware in sbrugna...

EUVD-2011-0656

Malware in sbrugna...

EUVD-2021-28237

Malicious code in bioql PyPI...

CVE-2024-3334 USB Security Feature Bypass in Digital Guardian Windows Agent Prior to version 8.2.0

A security bypass vulnerability exists in the Removable Media Encryption RMEcomponent of Digital Guardian Windows Agents prior to version 8.2.0. This allows a user to circumvent encryption controls by modifying metadata on the USB device thereby compromising the confidentiality of the stored data...

CVE-2024-41721

The CVE-2024-41721 entry concerns bhyve(8) on FreeBSD with XHCI USB emulation. The issue is an insufficient boundary validation in the USB code, causing an out-of-bounds read on the heap that could lead to an arbitrary write and remote code execution. Impact can allow a malicious, privileged gues...

CVE-2024-42236 usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: configfs: Prevent OOB read/write in usbstringcopy Userspace provided string 's' could trivially have the length zero. Left unchecked this will firstly result in an OOB read in the form if str0 - 1 == '\n' followed...

CVE-2024-26748 usb: cdns3: fix memory double free when handle zero packet

In the Linux kernel, the following vulnerability has been resolved: usb: cdns3: fix memory double free when handle zero packet 829 if request-complete 830 spinunlock&privdev-lock; 831 usbgadgetgivebackrequest&privep-endpoint, 832 request; 833 spinlock&privdev-lock; 834 835 836 if request-buf ==...

Unbreakable Enterprise kernel-container security update

5.4.17-2136.328.3.el7 - IB/cm: Cancel mad on the DREQ event when the state is MRAREPRCVD Mark Zhang Orabug: 36143228 - KSPLICE: make sure the stack is zeroed. Gregory Herrero Orabug: 36154654 - sched/fair: Fix tg-load when offlining a CPU Vincent Guittot Orabug: 36185207 - i2c: core: Fix atomic...

Unbreakable Enterprise kernel-container security update

5.4.17-2136.325.5.el7 - perf symbols: Symbol lookup with kcore can fail if multiple segments match stext Krister Johansen Orabug: 35905508 - char: misc: Increase the maximum number of dynamic misc devices to 1048448 D Scott Phillips Orabug: 35905508 - perf/arm-cmn: Fix invalid pointer when access...

GSD-2022-1006217 usb: host: ohci-ppc-of: Fix refcount leak bug

usb: host: ohci-ppc-of: Fix refcount leak bug This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.14.291 by commit...

GSD-2022-1004856 net: usb: ax88179_178a needs FLAG_SEND_ZLP

net: usb: ax88179178a needs FLAGSENDZLP This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.14.290 by commit...