openwrt

OpenWrt 프로젝트는 임베디드 장치를 대상으로 하는 Linux 운영 체제입니다. 단일한 정적 펌웨어를 만들려고 시도하는 대신, OpenWrt는 패키지 관리를 갖춘 완전히 쓰기 가능한 파일 시스템을 제공합니다. 이를 통해 공급업체가 제공하는 애플리케이션 선택 및 구성에서 벗어나 패키지를 사용하여 모든 애플리케이션에 맞게 장치를 사용자 정의할 수 있습니다. 개발자에게 OpenWrt는 완전한 펌웨어를 그 주위에 구축할 필요 없이 애플리케이션을 구축할 수 있는 프레임워크이며, 사용자에게는 완전한 사용자 정의가 가능하고 상상하지 못...

Blue Angel Software Suite (5V Technologies) - OS Command Injection

Blue Angel 5V Technologies Blue Angel Software Suite through 20230920, as used in Analog Telephone Adapter ATA and Voice over IP VoIP devices, allows remote authenticated attackers to execute arbitrary OS commands as root via shell metacharacters in the pingaddr parameter to...

firmware-workshop

ハンズオン：ファームウェアの抽出・探索・エミュレーション このハンズオンデモでは、柔軟なファームウェア抽出ツールであるUnblobを体験していただきます。 このワークショップセッションでは、EV充電器からファームウェアを抽出し、ファームウェアを詳しく調べ、最終的にエミュレーションして、サービスとリアルタイムにやり取りできるようにします。Unblobはハードウェア版とダウンロード版の両方のファームウェアに対応しているため、ターゲットとなる環境は豊富です。事前経験は不要で、あらゆるスキルレベルに適したセッションです。皆様のご参加をお待ちしています。 対象ターゲット...

workshop_firmware_reverse_engineering

워크숍: 펌웨어 리버스 엔지니어링 이 저장소는 ScapyCon Automotive 2025에서 발표된 Emproof의 펌웨어 리버스 엔지니어링 워크숍을 위한 슬라이드와 실습 자료를 포함합니다. 이 워크숍은 보안 경험이 거의 없는 기술적 청중을 대상으로 하며, 실용적이고 독립적인 과제를 통해 기초를 가르칩니다. 다루는 주제는 다음과 같습니다: 기본 파일/ELF 분석; 소프트웨어 크래킹 및 키젠keygen 작성; 문자열 복호화 및 악성코드 분류; 임베디드 리눅스 펌웨어 언패킹; 베어메탈 분석; 크립토 탐지; 난독화/안티 분석 기법...

thetick

The Tick 간단한 임베디드 Linux 백도어입니다. The Tick 컴파일 설치 사용법 미디어 컴파일 The Tick은 libcurl에만 의존하므로 해당 개발 패키지가 설치되어 있는지 확인하세요. 예를 들어 Debian 계열 배포판에서는 다음과 같이 설치하면 됩니다: sudo apt-get install libcurl-dev 의존성이 설치되면 makefile을 실행하기만 하면 됩니다: cd src make clean make "make" 명령이 완료되면 컴파일된 바이너리는 "bin" 폴더에서 찾을 수 있습니다. 이 바이너...

qemu

=========== QEMU README QEMU is a generic and open source machine & userspace emulator and virtualizer. QEMU is capable of emulating a complete machine in software without any need for hardware virtualization support. By using dynamic translation, it achieves very good performance. QEMU can also...

CLEANSTART-2026-LW63559 Security fixes in smarter-device-manager 1.20.11-r2

Package smarter-device-manager version 1.20.11-r2 fixes 1 vulnerabilities: CVE-2026-46600...

CVE-2026-9266

A Missing Required Cryptographic Step vulnerability has been identified in Moxa's embedded Linux firmware for industrial computers and controllers. This vulnerability represents an incomplete remediation of CVE-2026-0714. The firmware introduced TPM2 parameter encryption as a countermeasure again...

CVE-2026-9266

A Missing Required Cryptographic Step vulnerability has been identified in Moxa's embedded Linux firmware for industrial computers and controllers. This vulnerability represents an incomplete remediation of CVE-2026-0714. The firmware introduced TPM2 parameter encryption as a countermeasure again...

CVE-2026-9266: Missing Cryptographic Step

A Missing Required Cryptographic Step vulnerability has been identified in Moxa's embedded Linux firmware for industrial computers and controllers. This vulnerability represents an incomplete remediation of CVE-2026-0714. The firmware introduced TPM2 parameter encryption as a countermeasure again...

SWUpdate 安全漏洞

SWUpdate is an embedded Linux system update tool developed by Stefano Babic. Versions of SWUpdate prior to 2026.05 contained security vulnerabilities. These vulnerabilities were due to race conditions between the check time and the usage time, which could allow local non-privileged users to gain...

JUNG Smart Visu Server 1.1.1050 - Dos

Exploit Title: JUNG Smart Visu Server 1.1.1050- Dos CVE: CVE-2026-26235 Date: 2026-02-12 Exploit Author: Mohammed Idrees Banyamer Author Country: Jordan Instagram: @banyamersecurity Author GitHub: https://github.com/banyamer-security Vendor Homepage: https://www.jung.de Software Link:...

[SECURITY] Fedora 43 Update: rauc-1.15.2-1.fc43

RAUC is a lightweight update client that runs on your Embedded Linux device and reliably controls the procedure of updating your device with a new firmwa re revision. RAUC is also the tool on your host system that lets you create, inspect and modify update artifacts for your device. Service is no...

Linux Distros Unpatched Vulnerability : CVE-2026-34155

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - RAUC controls the update process on embedded Linux systems. Prior to version 1.15.2, RAUC bundles using the 'plain' format exceeding a payload size of 2 GiB cau...

CVE-2026-34155

RAUC controls the update process on embedded Linux systems. Prior to version 1.15.2, RAUC bundles using the 'plain' format exceeding a payload size of 2 GiB cause an integer overflow which results in a signature which covers only the first few bytes of the payload. Given such a bundle with a...

DEBIAN-CVE-2026-34155

RAUC controls the update process on embedded Linux systems. Prior to version 1.15.2, RAUC bundles using the 'plain' format exceeding a payload size of 2 GiB cause an integer overflow which results in a signature which covers only the first few bytes of the payload. Given such a bundle with a...

CVE-2026-34155

RAUC controls the update process on embedded Linux systems. Prior to version 1.15.2, RAUC bundles using the 'plain' format exceeding a payload size of 2 GiB cause an integer overflow which results in a signature which covers only the first few bytes of the payload. Given such a bundle with a...

UBUNTU-CVE-2026-34155

RAUC controls the update process on embedded Linux systems. Prior to version 1.15.2, RAUC bundles using the 'plain' format exceeding a payload size of 2 GiB cause an integer overflow which results in a signature which covers only the first few bytes of the payload. Given such a bundle with a...

EUVD-2026-17413

RAUC controls the update process on embedded Linux systems. Prior to version 1.15.2, RAUC bundles using the 'plain' format exceeding a payload size of 2 GiB cause an integer overflow which results in a signature which covers only the first few bytes of the payload. Given such a bundle with a...

CVE-2026-34155 RAUC: Improper Signing of Plain Bundles Exceeding 2 GiB

RAUC controls the update process on embedded Linux systems. Prior to version 1.15.2, RAUC bundles using the 'plain' format exceeding a payload size of 2 GiB cause an integer overflow which results in a signature which covers only the first few bytes of the payload. Given such a bundle with a...