nexmon

What is nexmon? Nexmon is our C-based firmware patching framework for Broadcom/Cypress WiFi chips that enables you to write your own firmware patches, for example, to enable monitor mode with radiotap headers and frame injection. Below, you find an overview what is possible with nexmon. This...

dr_checker

DR.CHECKER : A Soundy Vulnerability Detection Tool for Linux Kernel Drivers This repo contains all the sources, including setup scripts. Now with an Amazing UI to view the warnings along with corresponding source files. Tested on Ubuntu = 14.04.5 LTS Announcements 16 Feb 2018 : DR.CHECKER has bee...

difuze

difuze: Fuzzer for Linux Kernel Drivers This repo contains all the sources including setup scripts, you need to get difuze up and running. Tested on Ubuntu = 14.04.5 LTS 0. Running difuze from Docker Refer the readme As explained in our paper, There are two main components of difuze: Interface...

CVE-2024-53027-WIP

CVE-2024-53027-WIP Trabajo en Progreso para POC CVE-2024-53027: Vulnerabilidad de Bluetooth/Wi-Fi de Qualcomm 📄 Descripción General CVE-2024-53027 es una vulnerabilidad de severidad media CVSS sin calificar que afecta a los chipsets WLAN y Bluetooth de Qualcomm en dispositivos Android. Puede caus...

CVE-2025-67399

CVE-2025-67399 漏洞摘要 AIRTH Smart Home AQI Monitor 使用基于 BK7231N 芯片组的 CB3S 蓝牙 SoC，软件版本号为 2.1.17。通过物理接触设备并识别 SoC，利用公开的数据手册定位了暴露的 UART 调试/编程引脚。直接通过 USB 转 TTL 转换器及供应商提供的工具连接这些引脚，可实现对芯片内存的未受限读取访问。因此，无需任何身份验证或安全检查即可提取完整固件。该问题源于缺少硬件级保护措施，例如禁用调试接口、读取保护或安全启动，从而通过 UART 接口实现未经授权的固件和内存访问。 总体 CVSS 评分：6.8 CVSS 3...

Skullcandy Dime 3 wireless earbuds contain an unauthenticated Bluetooth pairing vulnerability

Overview Skullcandy Dime 3 wireless earbuds, running firmware version 1.0.0.28, accept a new Bluetooth Classic BR/EDR pairing request from an unpaired device without requiring the earbuds to be placed into pairing mode or requiring any physical confirmation or interaction from the owner...

CVE-2026-20501

creationtimestamp| type| source ---|---|--- 2026-09-07 12:45:19+00:00| seen| https://www.acn.gov.it/portale/w/risolte-vulnerabilita-nei-chipset-mediatek 2026-09-13 03:37:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mveo63c33z2p...

CVE-2026-20502

creationtimestamp| type| source ---|---|--- 2026-09-07 12:45:07+00:00| seen| https://www.acn.gov.it/portale/w/risolte-vulnerabilita-nei-chipset-mediatek 2026-09-13 04:07:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mveptqaout2u...

HPESBHF05094 rev.1 - HPE StoreEasy Server Using Certain Intel Processors, INTEL-SA-01372, VRT0010, Intel Chipset Firmware Advisory, Local Escalation of Privilege Vulnerability

Potential Security Impact: Local: Escalation of Privilege SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE StoreEasy 1470 Performance - Prior to BIOS v3.0008-20-2026 U63 ROM Family HPE StoreEasy 1470 Storage - Prior to BIOS v3.0008-20-2026 U63 ROM Family HPE StoreEasy 1570...

HPESBHF05110 rev.1 - HPE StoreEasy Servers Using Certain Intel Processors, INTEL-SA-01427, Intel Chipset Firmware Advisory, Multiple Vulnerabilities

Potential Security Impact: Remote: Denial of Service DoS, Disclosure of Information SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE StoreEasy 1470 Performance - Prior to BIOS v3.0008-20-2026 HPE StoreEasy 1470 Storage - Prior to BIOS v3.0008-20-2026 HPE StoreEasy 1570...

HPESBHF05087 rev.1 - HPE ProLiant DL/ML/XL, Alletra, Apollo, Edgeline, and Synergy Server Using Certain Intel Processors, INTEL-SA-01371, VRT0011, Intel Chipset Firmware Advisory, Local Escalation of Privilege Vulnerability

Potential Security Impact: Local: Escalation of Privilege SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE ProLiant DL110 Gen10 Plus Telco server - Prior to SPSE504.04.04.926.0 HPE ProLiant DL360 Gen10 Plus server - Prior to SPSE504.04.04.926.0 HPE ProLiant DL380 Gen10 Plus...

HPESBHF05088 rev.1 - HPE ProLiant DL/ML/XL, Apollo, Alletra, MicroServer, Edgeline, and Synergy Server Using Certain Intel Processors, INTEL-SA-01372, VRT0010, Intel Chipset Firmware Advisory, Local Escalation of Privilege Vulnerability

Potential Security Impact: Local: Escalation of Privilege SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Alletra 4110 - Prior to BIOS v3.0008-20-2026 HPE Alletra 4120 - Prior to BIOS v3.0008-20-2026 HPE Alletra 4140 - Prior to BIOS v3.0008-20-2026 HPE ProLiant DL110 Gen11 -...

Astra Linux – Vulnerabilities in Linux, Linux-5.10, Linux-5.15, Linux-6.1

In the Linux kernel, the following vulnerability has been resolved: drm/gma500: fixed the null pointer dereferencing in cdvintellvdsgetmodes. In cdvintellvdsgetmodes, the return value of drmmodeduplicate is assigned to mode. This can lead to a NULL pointer dereferencing in case of a failure of...

Astra Linux – Vulnerability in Linux, Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: drm/msm/dsi: Invalid parameter check in msmdsiPhyEnable The function performs a check on the “phy” input parameter, however, it is used before the check. The “dev” variable is initialized after the sanity check to avoid a possibl...

2026.3 IPU, Intel Chipset Firmware Advisory - Lenovo Support US

No description provided...

CVE-2026-64325

A flaw was found in the Linux kernel's mt76 Wi-Fi driver, affecting mt7921 and mt7925 chipsets. When a channel-switch announcement CSA beacon is received, a timing issue can occur if a station disconnects before a queued work item processes the beacon. This can lead to a NULL pointer dereference ...

CVE-2026-64209

In the Linux kernel, the following vulnerability has been resolved: phy: qcom: qmp-usbc: Fix out-of-bounds array access in dp swing config swingtbl and preemphasistbl are 4x4 arrays valid indices 0-3, but the boundary check uses " 4" instead of "= 4", allowing index 4 to cause an out-of-bounds...

PT-2026-51997

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A potential deadlock exists in the mt7925 roc abort sync function within the mt76 wireless driver. The issue occurs when roc abort sync invokes cancel work sync, which waits for roc work...

Exploit for Heap-based Buffer Overflow in Mediatek Mt6890_Firmware

CVE-2026-20452 — MediaTek WLAN AP Heap Overflow PoC Proof of...

Qualcomm Chipsets 安全漏洞

Qualcomm Chipsets are a series of chipset developed by Qualcomm Incorporated in the United States. There are security vulnerabilities in Qualcomm Chipsets, which stem from information leaks when resetting devices through power line interfaces. These vulnerabilities may allow unauthorized access t...