146 matches found
netgear_r6700v3_circled
Ausnutzen eines Stack-Buffer-Overflows auf dem NETGEAR R6700v3 CVE-2022-27646 mit Hilfe symbolischer Ausführung Einführung Dieses Repository soll einige Funktionalitäten von Morion demonstrieren, einem Proof-of-Concept PoC-Werkzeug, um mit symbolischer Ausführung an realen ARMv7 Binärdateien zu...
am335xbootrom
Reverse Engineering des AM335x Boot-ROM Es ist wohl achtzehn Monate her, seit ich ein paar Beaglebone-Black-Boards in die Hände bekam, die aus dem Mülleimer gerettet wurden. Leider funktionierten die Boards nicht auf Anhieb. Nun war es mein erstes Mal, mit einem dieser Boards zu arbeiten – oder...
oob_entry
oobentry tfp0-Kernel-Exploit, der jede armv7-iOS-Version iOS 3.0-10.3.4 unterstützt. Die in diesem Exploit verwendete Schwachstelle ist CVE-2023-32434. Ich werde in den kommenden Wochen einen Write-up über diesen Exploit und die verwendeten Methoden veröffentlichen...
batondrop_armv7
baton drop für armv7 MSM8960 Da der Fix von policyhax aka golden key tatsächlich auf Qualcomm-Systemen funktioniert, habe ich ein funktionierendes, aber als Ersatzteile verkauftes Dell XPS 10 aufgetrieben, um baton drop auf MSM8960 zu portieren. Hier ist das Ergebnis. Extrahieren Sie image.7z auf...
Glass
Glass wie in durchsichtig und glatt Ein schneller, nativer, mobile-app first interaktiver Disassembler. Geistiger Nachfolger von IDA Pro für den Android‑/iOS‑Reverse‑Engineering‑Workflow, aufgebaut um: smali für APK / DEX / smali‑Handhabung armv8-encode für AArch64 und ARMv7 A32 / Thumb — native...
nfcgate
NFCGate ⚠️NFCGate is currently being falsely detected as "NGate" malware. Please seethis issue for up-to-date information.⚠️ NFCGate is an Android application meant to capture, analyze, or modify NFC traffic. It can be used as a researching tool to reverse engineer protocols or assess the security...
Exploit for Improper Initialization in Linux Linux_Kernel
CVE-2022-0847 Dirty Pipe Pre-compiled exploit for CVE-2022-08...
OPENSUSE-SU-2026:20878-1 Security update for sdbootutil
This update for sdbootutil fixes the following issues Security issue: - CVE-2026-25701: use of fixed directory /tmp/pcrlock.d.back in sdbootutil-update-predictions.service bsc1258241. Non security issues: Update to version 1+git20260506.25d47bf: - TPM based system does not auto-unlock encryption...
Astra Linux – Vulnerability in Firefox and Thunderbird
The return registers were overwritten, which could have allowed an attacker to execute arbitrary code. Note: This issue only affected Armv7-A systems. Other operating systems were not affected. This vulnerability affects Firefox 124, Firefox ESR 115.9, and Thunderbird 115.9...
Astra Linux – Vulnerability in glibc
There exists an exploitable signed comparison vulnerability in the ARMv7 memcpy implementation of GNU glibc 2.30.9000. Calling memcpy on ARMv7 targets that utilize the GNU glibc implementation with a negative value for the 'num' parameter results in a signed comparison vulnerability. If an attack...
MiracleLinux 8 : firefox-115.9.1-1.el8.ML.1 (AXSA:2024-7652:13)
The remote MiracleLinux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the AXSA:2024-7652:13 advisory. nss: timing attack against RSA decryption CVE-2023-5388 Mozilla: Crash in NSS TLS method CVE-2024-0743 Mozilla: JIT code failed to save return...
Siemens SIMATIC S7-1500 Signed to Unsigned Conversion Error (CVE-2020-6096)
An exploitable signed comparison vulnerability exists in the ARMv7 memcpy implementation of GNU glibc 2.30.9000. Calling memcpy on ARMv7 targets that utilize the GNU glibc implementation with a negative value for the 'num' parameter results in a signed comparison vulnerability. If an attacker...
EUVD-2020-27250
Malware in sbrugna...
EUVD-2024-27556
Malicious code in bioql PyPI...
EUVD-2021-30857
Malicious code in bioql PyPI...
EUVD-2024-25270
Malicious code in bioql PyPI...
Linux Distros Unpatched Vulnerability : CVE-2024-2607
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Return registers were overwritten which could have allowed an attacker to execute arbitrary code. Note: This issue only affected Armv7-A systems. Other operatin...
Linux Distros Unpatched Vulnerability : CVE-2020-6096
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An exploitable signed comparison vulnerability exists in the ARMv7 memcpy implementation of GNU glibc 2.30.9000. Calling memcpy on ARMv7 targets that utilize th...
CVE-2021-43997
FreeRTOS versions 10.2.0 through 10.4.5 do not prevent non-kernel code from calling the xPortRaisePrivilege internal function to raise privilege. FreeRTOS versions through 10.4.6 do not prevent a third party that has already independently gained the ability to execute injected code to achieve...
CVE-2024-28115
FreeRTOS is a real-time operating system for microcontrollers. FreeRTOS Kernel versions through 10.6.1 do not sufficiently protect against local privilege escalation via Return Oriented Programming techniques should a vulnerability exist that allows code injection and execution. These issues affe...