222 matches found
EmbedOS
EmbedOS EmbedOS — операционная система для тестирования безопасности встраиваемых систем на базе Ubuntu 18.04, предварительно загруженная инструментами для тестирования безопасности прошивок. Виртуальную машину можно скачать и импортировать как файл OVF в VirtualBox или VMWare. Ссылка для загрузк...
TotoLink Router setMacFilterRules - Command Injection
TOTOLINK A3300R V17.0.0cu.557B20221024 was discovered to contain a command injection vulnerability via the enable parameter in the setMacFilterRules function. id: CVE-2024-24328 info: name: TotoLink Router setMacFilterRules - Command Injection author: pussycat0x severity: critical description: |...
karonte
Karonte Karonte — это инструмент статического анализа для обнаружения мультибинарных уязвимостей во встроенном ПО. Ветка master содержит последнюю версию Karonte, портированную на Python3. Оригинальная реализация и эксперименты, представленные в нашей статье, находятся в ветке IEEE-SP-20. Для...
Astra Linux – Vulnerability in edk2
In Ubuntu’s EDK2, a insecure default setting was left enabled, allowing UEFI Shell to be used. This enables an attacker with access to the operating system to bypass Secure Boot...
firmware-analysis-toolkit v2.0.0-alpha.1
FAT — Firmware Analysis Toolkit Download the latest release · Changelog · Installation Firmware Analysis Toolkit is a security research toolkit for investigating firmware security for IoT, Physical AI, Mobile Devices & Robotics. It is primarily built for the "Offensive IoT Exploitation" training...
CVE-2021-38489 HDD Password Stored In Plaintext
HDD password plaintext is stored in a UEFI variable...
PT-2026-84908
HDD password plaintext is stored in a UEFI variable...
chipsec v2.0.8
CHIPSEC: Platform Security Assessment Framework CHIPSEC is a framework for analyzing the security of PC platforms including hardware, system firmware BIOS/UEFI, and platform components. It includes a security test suite, tools for accessing various low level interfaces, and forensic capabilities...
Intel Processor Firmware August 2026 Security Update
Intel has informed HP of a potential security vulnerability identified in some Intel® Processors, which might allow escalation of privilege. Intel is releasing microcode updates to mitigate this potential vulnerability. Intel has released updates to mitigate the potential vulnerabilities. HP has...
CVE-2026-6484
In an UEFI, Lack of verified boot to certain FV may cause arbitrary code execution...
CVE-2026-6484
CVE-2026-6484 concerns UEFI firmware where lack of verified boot for certain FV enables arbitrary code execution. The available data indicates a local attack vector with high privileges required and high impact on confidentiality, integrity, and availability (per CVSS 3.1 vector: AV:L/AC:L/PR:H/U...
PT-2026-70961
In an UEFI, Lack of verified boot to certain FV may cause arbitrary code execution...
CVE-2025-30239
In affected TP-Link Aginet devices, use of hardcoded cryptographic keys embedded in the firmware to protect sensitive configuration data may allow an attacker who has access to device storage to recover the keys and decrypt stored data. Successful exploitation may allow access to decrypted...
Security Bulletin: NVIDIA Networking BlueField and ConnectX - June 2026
NVIDIA has released a software update for NVIDIA® Networking BlueField and ConnectX. To protect your system, download and install the latest NVIDIA firmware. Refer to the Security Updates section for updated versions and download links for each product. Go to NVIDIA Product Security. Details The...
Unitree UPK 安全漏洞
Unitree UPK is a robot firmware update package developed by the Chinese company Unitree. Unitree UPK contains a security vulnerability. This vulnerability stems from the encryption algorithm used to protect firmware updates, which uses key material that can be obtained by attackers. This could...
CVE-2025-29948
Improper access control in AMD Secure Encrypted Virtualization SEV firmware could allow a malicious hypervisor to bypass RMP protections, potentially resulting in a loss of SEV-SNP guest memory integrity...
CVE-2019-16734
Use of default credentials for the TELNET server in Petwant PF-103 firmware 4.3.2.50 and Petalk AI 3.2.2.30 allows remote attackers to execute arbitrary system commands as the root user...
kernel: ALSA: usb-audio: Validate UAC3 power domain descriptors, too
In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Validate UAC3 power domain descriptors, too UAC3 power domain descriptors need to be verified with its variable bLength for avoiding the unexpected OOB accesses by malicious firmware, too...
LLMs As Firmware Experts: A Runtime-Grown Tree-Of-Agents Framework
Large Language Models LLMs and their agent systems have recently demonstrated strong potential in automating code reasoning and vulnerability detection. However, when applied to large-scale firmware, their performance degrades due to the binary nature of firmware, complex dependency structures, a...
