john

John the Ripper This is the community-enhanced, "jumbo" version of John the Ripper. It has a lot of code, documentation, and data contributed by jumbo developers and the user community. It is easy for new code to be added to jumbo, and the quality requirements are low, although lately we've start...

MK4001MTD-USB-Bridge

MK4001MTD USB 桥接器 RP2040 Pico 固件，将东芝 MK4001MTD 0.85英寸 SDIO 微型硬盘桥接为 USB 大容量存储设备。 MK4001MTD 是一款 4 GB 微型硬盘，最初用于诺基亚 N91 音乐手机和一些其他设备，如 MP3 播放器或 U 盘，当时闪存仍然相当昂贵。 你可能见过一些介绍声称这款硬盘使用 MMC 协议，但实际上这是不正确的。我对此进行了一段时间的研究：我尝试构建一个 8 位 MMCplus 读卡器，并测试了不同的 SD/MMC 读卡器，但没有成功。最后，我买了一部诺基亚 N91 来捕获逻辑信号，并确认它实际使用的协议。...

CVE-2021-37748

CVE-2021-37748 的利用程序 完整文章：https://www.secforce.com/blog/exploiting-grandstream-ht801-ata-cve-2021-37748-cve-2021-37915/...

Astra Linux – Vulnerability found in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: ata: libata-transport: fixed error handling in atatdevadd In atatdevadd, the return value of transportadddevice is not checked. As a result, a null-ptr-deref occurs when removing the module, because transportremovedevice is calle...

CVE-2022-24654

CVE-2022-24654 CVE-2022-24654 的 PoC —— INTELBRAS ATA 200 固件 74.19.10.21 认证后存储型跨站脚本（XSS） 复现步骤： 1. 通过 Web 浏览器登录设备 2. 进入 Management Syslog 3. 在“Field Server Address”字段中注入载荷 "-prompt"XSS"-" 4. 点击保存 5. 利用成功！...

Linux Distros Unpatched Vulnerability : CVE-2026-89586

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ata: libata-scsi: fix DSM TRIM for sector sizes larger than 2048 bytes atascsiwritesamexlat translates a SCSI WRITE SAME command with the UNMAP bit set into an...

ata: pata_sl82c105: fix bridge revision use-after-free

...

CVE-2026-80732 ata: pata_sl82c105: fix bridge revision use-after-free

In the Linux kernel, the following vulnerability has been resolved: ata: patasl82c105: fix bridge revision use-after-free pcigetslot returns a referenced PCI device. Commit 44c10138fd4b "PCI: Change all drivers to use pcidevice-revision" replaced a configuration-space read with direct access to t...

CVE-2026-84696

Phison PS3111-S11 controller firmware versions through SBFQT1.3 expose privileged vendor unique commands over the ATA interface with absent or defeatable authentication mechanisms. Attackers can bypass the weak CRC-16 based unlock handshake or exploit builds with no VUC lock to read and write...

EUVD-2026-69787

Phison PS3111-S11 controller firmware versions through SBFQT1.3 expose privileged vendor unique commands over the ATA interface with absent or defeatable authentication mechanisms. Attackers can bypass the weak CRC-16 based unlock handshake or exploit builds with no VUC lock to read and write...

Debian dsa-6477 : ata-modules-6.12.101+deb13-armmp-di - security update

The remote Debian 13 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-6477 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-6477-1 [email protected] https://www.debian.org/securit...

Debian dsa-6466 : ata-modules-6.12.101+deb13-armmp-di - security update

The remote Debian 13 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-6466 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-6466-1 [email protected] https://www.debian.org/securit...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: ata: satadwc460ex: Fixed a crash that occurred due to out-of-bounds writing. The driver utilizes the “tag” values from various arrays provided by libata. Since the mentioned patch increased ATATAGINTERNAL to 32, the value of...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15, Linux 6.1

A flaw was discovered in the ATA over Ethernet AoE driver within the Linux kernel. The aoecmdcfgpkts function improperly updates the refcnt field of the struct netdevice structure. A use-after-free condition may occur due to concurrent operations between the update of the refcnt and accesses...

Astra Linux – Vulnerabilities in Linux, Linux-5.10, Linux-5.15, Linux-6.1

In the Linux kernel, the following vulnerability has been resolved: aoe: fixed the potential use-after-free issue in aoecmdcfgpkts. This patch addresses CVE-2023-6270. The description of the vulnerability is as follows: A flaw was discovered in the ATA over Ethernet AoE driver within the Linux...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: ata: libata-core: Fixed a NULL pointer dereferencing in atahostallocpinfo. In a unlikely and probably incorrect scenario where the ppi parameter of atahostallocpinfo points to an array starting with a NULL pointer, there will be ...

sg3_utils security, bug fix, and enhancement update

1.44-6.1 - sginq output conformance for SCSI name string and ATA fields RHEL-188162...

CVE-2026-72030

A flaw was found in the Linux kernel's libata-core component. A malicious device, or a local attacker with control over a device, could provide an invalid count for concurrent positioning ranges. This improper handling of input could lead to a buffer overflow, potentially causing the system to...

CVE-2026-72030

In the Linux kernel, the following vulnerability has been resolved: ata: libata-core: Reject an invalid concurrent positioning ranges count atadevconfigcpr takes the number of range descriptors from buf0 of the concurrent positioning ranges log up to 255, which the device reports independently of...

UBUNTU-CVE-2026-72030

In the Linux kernel, the following vulnerability has been resolved: ata: libata-core: Reject an invalid concurrent positioning ranges count atadevconfigcpr takes the number of range descriptors from buf0 of the concurrent positioning ranges log up to 255, which the device reports independently of...