Philips-PM-5139-5138A-5136-Firmware-Project

Philips PM5139 — 固件逆向工程 一台约 1994 年的 20 MHz 函数发生器，在软件层面被拆解：两份 EPROM 转储、一个被当作测量仪器使用的 8051 模拟器，以及 35 节文档，其中每一条论断都有清单地址、模拟器测量结果或原理图作为依据。 最终成果是一个 固件 V2.0 ，修复了 Philips 出厂时的一个缺陷， 六个我们自己的任意波形，以及一个逐条指令运行原始 ROM 的浏览器模拟器。 程序 EPROM 中的每一个波形表，直接从二进制中绘制出来。右下角那个 开启了本项目最有趣的部分。 目录 这是什么 结果一览 仪器 方法：模拟器即测量仪器 走到这里的路 精彩...

grandstream-cve-2026-2329-analysis

CVE-2026-2329 在 Grandstream GXP1600 固件中的补丁与变体分析 防御性静态分析项目，对比 Grandstream GXP1600 固件 1.0.7.79 （易受攻击版本）与 1.0.7.81 （已修补版本），以了解厂商如何修复与 CVE-2026-2329 相关的请求解析缺陷。 本项目为何重要 本仓库展示了一个可复现的漏洞研究流程：保存证据、提取嵌入式固件、定位目标服务、追踪暴露的 API 路径、对比易受攻击版本与已修补版本的实现，并在不开发或武器化利用代码的前提下记录安全影响。 展示的技能 固件逆向工程 漏洞与补丁分析 Ghidra 静态分析 ARM...

SUSE CVE-2026-68479

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btrtl: validate firmware patch bounds rtlbtparsefirmware copies patchlength - 4 bytes before appending the firmware version. A malformed firmware patch shorter than the version field can make this subtraction underflow...

CVE-2026-68479 Bluetooth: btrtl: validate firmware patch bounds

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btrtl: validate firmware patch bounds rtlbtparsefirmware copies patchlength - 4 bytes before appending the firmware version. A malformed firmware patch shorter than the version field can make this subtraction underflow...

CVE-2026-68479 Bluetooth: btrtl: validate firmware patch bounds

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btrtl: validate firmware patch bounds rtlbtparsefirmware copies patchlength - 4 bytes before appending the firmware version. A malformed firmware patch shorter than the version field can make this subtraction underflow...

PT-2026-72191

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the Bluetooth component where the rtlbt parse firmware function fails to properly validate firmware patch bounds. When processing a malformed firmware patch shorter th...

Hanwha Vision Cameras Improper Input Validation (CVE-2024-54011)

Penetration Testing engineers at Amazon have discovered a flaw where the camera system fails to properly handle data supplied in certain requests, causing a service disruption. The manufacturer has released patch firmware for the flaw, please refer to the manufacturer's report for details and...

Hanwha Vision Cameras OS Command Injection (CVE-2024-54012)

Penetration Testing engineers at Amazon discovered a vulnerability where the camera system failed to properly validate input, allowing specially crafted requests containing malicious commands to be executed on the device. The manufacturer has released patch firmware for the flaw; please refer to...

UBUNTU-CVE-2026-53763

OP-TEE is a Trusted Execution Environment TEE designed as companion to a non-secure Linux kernel running on Arm; Cortex-A cores using the TrustZone technology. Starting in version 3.0.0 and prior to version 4.11.0, 32-bit integer overflows in OP-TEE core's AES-GCM implementation cause the...

CVE-2024-54013

Penetration Testing engineers at Amazon have identified a security flaw related to request handling in the web server component that could, under certain conditions, lead to unintended access to protected functions. The manufacturer has released patch firmware for the flaw, please refer to the...

EUVD-2024-55560

Penetration Testing engineers at Amazon have identified a security flaw related to request handling in the web server component that could, under certain conditions, lead to unintended access to protected functions. The manufacturer has released patch firmware for the flaw, please refer to the...

CVE-2024-54013 Authentication Bypass

Penetration Testing engineers at Amazon have identified a security flaw related to request handling in the web server component that could, under certain conditions, lead to unintended access to protected functions. The manufacturer has released patch firmware for the flaw, please refer to the...

CVE-2024-54013 Authentication Bypass

Penetration Testing engineers at Amazon have identified a security flaw related to request handling in the web server component that could, under certain conditions, lead to unintended access to protected functions. The manufacturer has released patch firmware for the flaw, please refer to the...

CVE-2024-54012 Command Injection

Penetration Testing engineers at Amazon discovered a vulnerability where the camera system failed to properly validate input, allowing specially crafted requests containing malicious commands to be executed on the device. The manufacturer has released patch firmware for the flaw; please refer to...

EUVD-2024-55559

Penetration Testing engineers at Amazon discovered a vulnerability where the camera system failed to properly validate input, allowing specially crafted requests containing malicious commands to be executed on the device. The manufacturer has released patch firmware for the flaw; please refer to...

PT-2026-35675

Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description A security flaw exists in the request handling of the web server component. Under certain conditions, this issue could allow unintended access to protected...

PT-2026-35674

Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description A camera system fails to properly validate input, which allows specially crafted requests containing malicious commands to be executed on the device. This is a...

Certain HP DeskJet All In One (AIO) Devices – Potential Remote Code Execution & Potential Buffer Overflow

Certain HP DeskJet All in One devices may be vulnerable to remote code execution caused by a buffer overflow when specially crafted Web Services for Devices WSD scan requests are improperly validated and handled by the MFP. As a temporary mitigation measure for the buffer overflow vulnerability,...

Exploit for Improper Restriction of Operations within the Bounds of a Memory Buffer in Apple Airplay_Audio_Software_Development_Kit

In an effort to try and gain root access to my car's head unit,...

Hanwha Vision Camera Use of Hard-coded Cryptographic Key (CVE-2025-52601)

Cybersecurity Nozomi Networks Labs, a specialized security company focused on Industrial Control Systems ICS and OT/IoT security, has discovered a vulnerability in Device Manager that a hardcoded encryption key for sensitive information. An attacker can use key to decrypt sensitive information. T...