979 matches found
difuze
difuze: Fuzzer for Linux Kernel Drivers This repo contains all the sources including setup scripts, you need to get difuze up and running. Tested on Ubuntu = 14.04.5 LTS 0. Running difuze from Docker Refer the readme As explained in our paper, There are two main components of difuze: Interface...
nexmon
What is nexmon? Nexmon is our C-based firmware patching framework for Broadcom/Cypress WiFi chips that enables you to write your own firmware patches, for example, to enable monitor mode with radiotap headers and frame injection. Below, you find an overview what is possible with nexmon. This...
dr_checker
DR.CHECKER : A Soundy Vulnerability Detection Tool for Linux Kernel Drivers This repo contains all the sources, including setup scripts. Now with an Amazing UI to view the warnings along with corresponding source files. Tested on Ubuntu = 14.04.5 LTS Announcements 16 Feb 2018 : DR.CHECKER has bee...
CVE-2024-53027-WIP
CVE-2024-53027-WIP POC 进行中 CVE-2024-53027：高通蓝牙/Wi-Fi 漏洞 📄 概述 CVE-2024-53027 是一个中等级别漏洞（CVSS 未评级），影响 Android 设备中的高通 WLAN 和蓝牙芯片组 。在处理无线数据包中格式错误的国家信息元素（IE）时，可能导致 瞬时拒绝服务（DoS）。 🧩 受影响组件 高通 WLAN 固件 骁龙芯片组中的蓝牙协议栈 （具体型号未确认） ⚠️ 影响 利用方式 ：Wi-Fi/蓝牙范围内的远程攻击者可使芯片组固件崩溃 ，中断连接直至重启。 局限性 ：无证据表明可实现代码执行或持久性入侵。需要近距离...
CVE-2025-67399
CVE-2025-67399 漏洞摘要 AIRTH Smart Home AQI Monitor 使用基于 BK7231N 芯片组的 CB3S 蓝牙 SoC，软件版本号为 2.1.17。通过物理接触设备并识别 SoC，利用公开的数据手册定位了暴露的 UART 调试/编程引脚。直接通过 USB 转 TTL 转换器及供应商提供的工具连接这些引脚，可实现对芯片内存的未受限读取访问。因此，无需任何身份验证或安全检查即可提取完整固件。该问题源于缺少硬件级保护措施，例如禁用调试接口、读取保护或安全启动，从而通过 UART 接口实现未经授权的固件和内存访问。 总体 CVSS 评分：6.8 CVSS 3...
Astra Linux – Vulnerability in Linux, Linux 5.10
In the Linux kernel, the following vulnerability has been resolved: drm/msm/dsi: Invalid parameter check in msmdsiPhyEnable The function performs a check on the “phy” input parameter, however, it is used before the check. The “dev” variable is initialized after the sanity check to avoid a possibl...
Skullcandy Dime 3 wireless earbuds contain an unauthenticated Bluetooth pairing vulnerability
Overview Skullcandy Dime 3 wireless earbuds, running firmware version 1.0.0.28, accept a new Bluetooth Classic BR/EDR pairing request from an unpaired device without requiring the earbuds to be placed into pairing mode or requiring any physical confirmation or interaction from the owner...
HPESBHF05102 rev.1 - HPE ProLiant DL/ML, Alletra, MicroServer, Edgeline and Synergy Server Using Certain Intel Processors, INTEL-SA-01427, Intel Chipset Firmware Advisory, Multiple Vulnerabilities
Potential Security Impact: Remote: Denial of Service DoS, Disclosure of Information SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Alletra 4140 - Prior to BIOS v3.0008-20-2026 HPE Alletra 4120 - Prior to BIOS v3.0008-20-2026 HPE Alletra 4110 - Prior to BIOS v3.0008-20-2026 HP...
CVE-2026-20500
creationtimestamp| type| source ---|---|--- 2026-09-07 12:45:21+00:00| seen| https://www.acn.gov.it/portale/w/risolte-vulnerabilita-nei-chipset-mediatek...
CVE-2026-20501
creationtimestamp| type| source ---|---|--- 2026-09-07 12:45:19+00:00| seen| https://www.acn.gov.it/portale/w/risolte-vulnerabilita-nei-chipset-mediatek 2026-09-13 03:37:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mveo63c33z2p...
CVE-2026-20502
creationtimestamp| type| source ---|---|--- 2026-09-07 12:45:07+00:00| seen| https://www.acn.gov.it/portale/w/risolte-vulnerabilita-nei-chipset-mediatek 2026-09-13 04:07:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mveptqaout2u...
CVE-2026-20504
creationtimestamp| type| source ---|---|--- 2026-09-07 12:45:03+00:00| seen| https://www.acn.gov.it/portale/w/risolte-vulnerabilita-nei-chipset-mediatek...
HPESBHF05095 rev.1 - HPE StoreEasy Servers Using Certain Intel Processors, INTEL-SA-01371, VRT0011, Intel® Chipset Firmware Advisory, Local Escalation of Privilege Vulnerability
Potential Security Impact: Local: Escalation of Privilege SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Storage File Controller - Prior to SPS 04.01.05.201 U32 ROM Family HPE Storage Performance File Controller - Prior to SPS 04.01.05.201 U32 ROM Family HPE StoreEasy 1460...
HPESBHF05094 rev.1 - HPE StoreEasy Server Using Certain Intel Processors, INTEL-SA-01372, VRT0010, Intel Chipset Firmware Advisory, Local Escalation of Privilege Vulnerability
Potential Security Impact: Local: Escalation of Privilege SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE StoreEasy 1470 Performance - Prior to BIOS v3.0008-20-2026 U63 ROM Family HPE StoreEasy 1470 Storage - Prior to BIOS v3.0008-20-2026 U63 ROM Family HPE StoreEasy 1570...
HPESBHF05110 rev.1 - HPE StoreEasy Servers Using Certain Intel Processors, INTEL-SA-01427, Intel Chipset Firmware Advisory, Multiple Vulnerabilities
Potential Security Impact: Remote: Denial of Service DoS, Disclosure of Information SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE StoreEasy 1470 Performance - Prior to BIOS v3.0008-20-2026 HPE StoreEasy 1470 Storage - Prior to BIOS v3.0008-20-2026 HPE StoreEasy 1570...
HPESBHF05087 rev.1 - HPE ProLiant DL/ML/XL, Alletra, Apollo, Edgeline, and Synergy Server Using Certain Intel Processors, INTEL-SA-01371, VRT0011, Intel Chipset Firmware Advisory, Local Escalation of Privilege Vulnerability
Potential Security Impact: Local: Escalation of Privilege SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE ProLiant DL110 Gen10 Plus Telco server - Prior to SPSE504.04.04.926.0 HPE ProLiant DL360 Gen10 Plus server - Prior to SPSE504.04.04.926.0 HPE ProLiant DL380 Gen10 Plus...
HPESBHF05088 rev.1 - HPE ProLiant DL/ML/XL, Apollo, Alletra, MicroServer, Edgeline, and Synergy Server Using Certain Intel Processors, INTEL-SA-01372, VRT0010, Intel Chipset Firmware Advisory, Local Escalation of Privilege Vulnerability
Potential Security Impact: Local: Escalation of Privilege SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Alletra 4110 - Prior to BIOS v3.0008-20-2026 HPE Alletra 4120 - Prior to BIOS v3.0008-20-2026 HPE Alletra 4140 - Prior to BIOS v3.0008-20-2026 HPE ProLiant DL110 Gen11 -...
Intel Chipset Firmware August 2026 Security Update
Intel has informed HP of potential vulnerabilities identified in some Intel® Active Management Technology Intel® AMT and some Intel® Standard Manageability, which might allow denial of service or information disclosure. Intel is releasing firmware updates to mitigate these potential...
ROS-20260821-73-0056
The vulnerabilities of the functions virtiommioreleasedev and virtiommioprobe in the drivers/virtio/virtiommio.c module related to the virtio chipset support in Linux operating systems are associated with operations involving resources after their expiration time. Exploiting these vulnerabilities...
