51 matches found
hackEmbedded
hackebds 简介 hackebds 是一个面向嵌入式设备的 payload 生成、加密 shell、SOCKS5 代理和设备信息整理工具。 当前版本中，加密 shell / 代理的推荐工作流已经统一为 纯 ELF 模式 ： reverseshellfile + encryptedshellserver / reverseshellserver bindshell + bindshellclient reverseproxyfile + reverseproxyserver forwardproxyfile 新版本主要变化 新增全架构加密反向 shell 和加密 bind...
attifyos
AttifyOS v3.0 AttifyOS is a distro intended to help you perform security assessment and penetration testing of Internet of Things IoT devices. It saves you a lot of time by providing a pre-configured environment with all the necessary tools loaded. The new version is based on Ubuntu 18.04 64-Bit ...
trommel
TROMMEL TROMMEL 通过筛选嵌入式设备文件，识别潜在的安全漏洞指标。 TROMMEL 识别以下相关指标： 安全外壳（SSH）密钥文件 安全套接层（SSL）密钥文件 互联网协议（IP）地址 统一资源定位符（URL） 电子邮件地址 Shell 脚本 Web 服务器二进制文件 配置文件 数据库文件 特定二进制文件（如 Dropbear、BusyBox 等） 共享对象库文件 Web 应用脚本变量 Android 应用程序包（APK）文件权限 依赖 Python-Magic Pyfiglet 用法 TROMMEL 帮助菜单。 $ trommel.py --help...
MINI-JF64-4G6H-56XX
Bulletin has no description...
EUVD-2026-38893
In the Linux kernel, the following vulnerability has been resolved: greybus: raw: fix use-after-free on cdev close This addresses a use-after-free bug when a raw bundle is disconnected but its chardev is still opened by an application. When the application releases the cdev, it causes the followi...
CVE-2026-53025
In the Linux kernel, the following vulnerability has been resolved: greybus: raw: fix use-after-free on cdev close This addresses a use-after-free bug when a raw bundle is disconnected but its chardev is still opened by an application. When the application releases the cdev, it causes the followi...
CVE-2026-53025
Summary of CVE-2026-53025 : The Linux kernel’s Greybus raw subsystem is affected by a use-after-free when a raw bundle is disconnected while its chardev remains open, leading to a kernel panic and potential DoS. The issue occurs because the cdev can be released after freeing memory, creating an i...
CVE-2026-53025 greybus: raw: fix use-after-free on cdev close
In the Linux kernel, the following vulnerability has been resolved: greybus: raw: fix use-after-free on cdev close This addresses a use-after-free bug when a raw bundle is disconnected but its chardev is still opened by an application. When the application releases the cdev, it causes the followi...
CVE-2026-12846
GV-I/O Box 4E is a smart embedded device with 4 input and 4 relays output that can be controlled over Ethernet and RS-485. DVRSearch is a service running by default on the IOBox listening for UDP messages on port 10001. Any user on the network can send messages to this service and interact with i...
EUVD-2026-38646
GV-I/O Box 4E is a smart embedded device with 4 input and 4 relays output that can be controlled over Ethernet and RS-485. DVRSearch is a service running by default on the IOBox listening for UDP messages on port 10001. Any user on the network can send messages to this service and interact with i...
PT-2026-51657
Name of the Vulnerable Software and Affected Versions GeoVision GV-I/O Box 4E affected versions not specified Description The DVRSearch service, which runs by default and listens for UDP messages on port 10001, contains a stack-based buffer overflow. The issue occurs when the server processes...
PT-2026-51919
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the greybus raw component. The problem occurs when a raw bundle is disconnected while its character device chardev remains open by an application. Becaus...
PT-2026-51659
Name of the Vulnerable Software and Affected Versions GeoVision GV-I/O Box 4E affected versions not specified Description The DVRSearch service, which runs by default and listens for UDP messages on port 10001, contains a stack-based buffer overflow. The issue occurs when the server reads up to...
CVE-2026-28520
arduino-TuyaOpen before version 1.2.1 contains a single-byte buffer overflow vulnerability in the WiFiMulti component. When the victim's smart hardware connects to an attacker-controlled AP hotspot, the attacker can exploit the overflow to execute arbitrary code on the affected embedded device...
CVE-2026-28520: Off-by-one Error
arduino-TuyaOpen before version 1.2.1 contains a single-byte buffer overflow vulnerability in the WiFiMulti component. When the victim's smart hardware connects to an attacker-controlled AP hotspot, the attacker can exploit the overflow to execute arbitrary code on the affected embedded device...
CVE-2026-28520
arduino-TuyaOpen before version 1.2.1 contains a single-byte buffer overflow vulnerability in the WiFiMulti component. When the victim's smart hardware connects to an attacker-controlled AP hotspot, the attacker can exploit the overflow to execute arbitrary code on the affected embedded device...
Unity Linux 20.1070e Security Update: kernel (UTSA-2026-005575)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-005575 advisory. In the Linux kernel, the following vulnerability has been resolved: iio: light: veml6030: fix IIO device retrieval from embedded device The dev pointer that is...
Xspeeder SXZOS 安全漏洞
Xspeeder SXZOS is an embedded network device firmware from China-based Xspeeder. A security vulnerability exists in Xspeeder SXZOS versions 2025-12-26 and earlier, which stems from the presence of base64-encoded Python code in the chkid parameter in vLogin.py, which could lead to remote code...
CVE-2024-1223
This vulnerability potentially allows unauthorized enumeration of information from the embedded device APIs. An attacker must already have existing knowledge of some combination of valid usernames, device names and an internal system key. For such an attack to be successful the system must be in ...
