Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: ASoC: SOF: Intel: cnl: Do not process IPC reply before firmware boot It is not yet clear, but it is possible to create a firmware that is so broken that it will send a reply message before a FWREADY message is received it is not...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: dpaa2-switch: validate numifs to prevent out-of-bounds write The driver obtains swattr.numifs from the firmware via dpswgetattributes, but never validates it against DPSWMAXIF 64. This value controls the iteration in...

Astra Linux – Vulnerability in Linux

In the Linux kernel, the following vulnerabilities have been resolved: net/mlx5e: Fixed page reclamation for dead peer hairpin When adding a hairpin flow, a send queue is created on the peer net device’s side, which claims some host memory pages for its internal ring buffer. If the peer net devic...

Astra Linux – Vulnerability found in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: nvdimm: Fixed scenarios where firmware activation led to deadlocks. Lockdep reports the following deadlock scenarios for CXL root devices: - power-management, deviceprepare, operations, and deviceshutdown operations for...

Astra Linux – Vulnerability in edk2

EDK2 contains a vulnerability in the PeCoffLoaderRelocateImage function. An attacker may cause memory corruption due to an overflow through an adjacent network. Successful exploitation of this vulnerability could result in a loss of confidentiality, integrity, and/or availability...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15

A issue was discovered in the Linux kernel through version 5.19.8. In the file drivers/firmware/efi/capsule-loader.c, there is a race condition that leads to a use-after-free situation...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: Firmware: csdsp: Validate the payload length before processing the block. The check for the payload length not exceeding the remaining bytes in the firmware file buffer should be performed before the block is processed. This...

ps5-uart

24 pin header near salina EDM-010 root@kitploit: emc header 1 5v 2 5v 3 gnd 4 gnd 5 emc gpio a1. pulling low at emc boot causes emc rom to enter uart shell @ 460800 6 uart rx emc 115200 7 uart tx emc 115200 8 3v3, goes low when emc resets 9 0v? 10 gnd 11 titania uart0 tx efc fw: 460800, eap fw:...

samsung-exynos-sms-stack-overflow-cve-2025-54328-critical-zero-click-baseband-rce

CVE-2025-54328 — Samsung Exynos SMS RP-DATA Stack Buffer Overflow Conceptual PoC for CVE-2025-54328, a CVSS 10.0 Critical stack-based buffer overflow in Samsung Exynos baseband firmware's SMS RP-DATA parser. Article Full write-up: Samsung Exynos SMS Stack Overflow: CVE-2025-54328 — Critical...

glinet-beryl-ax-triple-rce-cve-2026-11450-11451-11452-unauthenticated-root-on-travel-router

PoC de Triple RCE en GL.iNet Beryl AX PoC para tres vulnerabilidades de inyección de comandos sin autenticación CVE-2026-11450, CVE-2026-11451, CVE-2026-11452 en el firmware del router de viaje GL.iNet GL-MT3000 Beryl AX = 4.4.5. Artículo completo:...

CVE-2026-73673

CVE-2026-73673: Netis NC63 Unauthenticated Firmware Update with Missing Cryptographic Firmware Authentication Original vulnerability research by Özcan Ersan @ozcanpng. This repository documents CVE-2026-73673, discovered and reported by the author. Non-destructive proof-of-concept and evidence...

grandstream-cve-2026-2329-analysis

Patch and Variant Analysis of CVE-2026-2329 in Grandstream GXP1600 Firmware Defensive static-analysis project comparing Grandstream GXP1600 firmware 1.0.7.79 vulnerable and 1.0.7.81 patched to understand how the vendor remediated the request-parsing flaw associated with CVE-2026-2329. Why this...

SpiMitm

+OPTIONS: ^: SpiMitm - SPI flash read MitM attack PoC for anti-firmware forensics This PoC is focused on https://up-board.org/upsquared/specifications/UP Squared. How to use Follow Alan Sguigna's build process explained...

CVE-2026-44402

CVE-2026-44402 — Voltronic Power SNMP Web Pro 1.1 Unauthenticated RCE -red.svg Critical Unauthenticated Remote Code Execution CVSS 9.8 — Voltronic Power SNMP Web Pro 1.1 This tool exploits CVE-2026-44402 , a vulnerability in the Voltronic Power SNMP Web Pro 1.1 device that allows unauthenticated...

CVE-2025-57428

⚠️ This repository is maintained only as a reference for CVE-2025-57428. For other advisories and updates, please refer to: security-advisories. CVE-2025-57428 - Telnet debug interface enabled by default allows low-level flash/register access Affected Product Vendor/Brand: Each Italy Device:...

Root-My-Galaxy-S938B

Root My Galaxy — S938B Root My Galaxy is a firmware-profiled installer for temporary KernelSU root on supported Samsung builds. This fork is maintained for the Galaxy S25 Ultra SM-S938B running: root@kitploit: Build: BP4A.251205.006.S938BXXSBCZG3 Kernel:...

PcanExploit

CVE-2024-44610: Exploit de raíz autenticado para PEAK PCAN-Ethernet Gateway FD DR ¿Qué es? Este repositorio contiene un exploit de Prueba de Concepto PoC que ejecutó código como root en las puertas de enlace Ethernet de Peak. Requiere que conozcas las credenciales de la interfaz web. ¿Cómo...

CVE-2022-24654

CVE-2022-24654 PoC of CVE-2022-24654 - INTELBRAS ATA 200 Firmware 74.19.10.21 Authenticated stored Cross Site Scripting Steps to Reproduce: 1. Log in the equipment via your web browser 2. Go to Management Syslog 3. In the "Field Server Address" inject the payload "-prompt"XSS"-" 4. Click Save 5...

Root-My-Device-Payloads

Root My Device Payloads A fork of BuSung-dev/Root-My-Galaxy-...

CVE-2021-4045

🔍 CVE-2021-4045: Vulnerabilidad de Inyección de Comandos en TP-Link Tapo C200 CVE-2021-4045 📌 Resumen CVE-2021-4045 es una vulnerabilidad de inyección de comandos descubierta en la cámara TP-Link Tapo C200 , que permite a un atacante tomar el control total del dispositivo con privilegios deroot...