unknownpwn.github.io

ثغرات واستغلالات Tecnovision LED Video Wall. من SQLi إلى وصول كامل بصلاحيات الجذر. مقدمة: Tecnovision هي شركة مصنّعة لجدران الفيديو LED المستخدمة في الملاعب على سبيل المثال، ملعب تويكنهام، وقاعات الحفلات الموسيقية، ومراكز التسوق، وكاللوحات الإرشادية على الطرق، وغيرها الكثير الكثير. برنامج DlxSpot...

f32

La f32 è una scheda di sviluppo ESP32 ultra-compatta progettata per essere montata direttamente dietro un connettore USB-C. Il PCB misura solo 9,85 mm x 8,45 mm. È alimentata dal microcontrollore ESP32-C3FH4 ed è stata creata principalmente per la ricerca e come una sorta di stress test per...

Piano LED Visualizer 1.3 - Local File Inclusion

Piano LED Visualizer 1.3 and prior are vulnerable to local file inclusion. id: CVE-2022-24900 info: name: Piano LED Visualizer 1.3 - Local File Inclusion author: 0xAkoko severity: high description: | Piano LED Visualizer 1.3 and prior are vulnerable to local file inclusion. impact: | An attacker...

LG LED Assistant - Unauthenticated Password Reset

The /api/changePw endpoint in LG LED Assistant allows unauthenticated password resets when requests are considered to come from localhost. An attacker can spoof the X-Forwarded-For header with value 127.0.0.1 to trigger the behavior and receive a success response. id: CVE-2024-2862 info: name: LG...

lights-out

Lights Out يحتوي هذا المستودع على أدوات تتيح الحصول على تحكّم برمجي في مؤشر LED الخاص بكاميرا الويب على جهاز ThinkPad X230 دون الحاجة إلى وصول مادي إلى الجهاز. صُنعت هذه الأدوات كعرض عملي على أن البرمجيات الخبيثة يمكنها تسجيل الفيديو عبر كاميرا الويب دون إظهار مؤشر LED. يتم ذلك عبر إعادة كتابة...

LG LED Assistant - Thumbnail Path Traversal File Upload

A path traversal vulnerability exists in the endpoint handler for /api/thumbnail in Common.js. An unauthenticated remote attacker can exploit this to upload arbitrary files to any location on the disk drive where the product is installed. id: CVE-2024-2863 info: name: LG LED Assistant - Thumbnail...

shining-mask

Shining Mask Hacks Dieses Repository enthält Code und Anleitungen zum Erstellen eines benutzerdefinierten Bluetooth-Low-EnergyBLE-Controllers für die Shining LED Mask, der das Gesichtsbild aller Masken in BLE-Reichweite automatisch ändert. Dieses Repository ist eine Ergänzung zu Invasion of the...

CVE-2026-72144

A flaw was found in the Linux kernel's Dell laptop driver. During the initialization process, if an error occurs with LED or backlight registration, the system fails to properly clean up all allocated resources. This oversight can lead to resources, such as notifiers and debugfs directories,...

UBUNTU-CVE-2026-72241

In the Linux kernel, the following vulnerability has been resolved: leds: uleds: Fix potential buffer overread The name string supplied by userspace is not guaranteed to be null-terminated, so using strchr on it might result in a buffer overread. The same thing will happen when said string is use...

CVE-2026-72241

In the Linux kernel, the following vulnerability has been resolved: leds: uleds: Fix potential buffer overread The name string supplied by userspace is not guaranteed to be null-terminated, so using strchr on it might result in a buffer overread. The same thing will happen when said string is use...

CVE-2026-72144

In the Linux kernel, the following vulnerability has been resolved: platform/x86: dell-laptop: fix missing cleanups in init error path dellinit initializes several resources after dellsetuprfkill, including the optional touchpad LED, keyboard backlight LED, battery hook, debugfs directory and...

CVE-2026-72144 platform/x86: dell-laptop: fix missing cleanups in init error path

In the Linux kernel, the following vulnerability has been resolved: platform/x86: dell-laptop: fix missing cleanups in init error path dellinit initializes several resources after dellsetuprfkill, including the optional touchpad LED, keyboard backlight LED, battery hook, debugfs directory and...

The vulnerability in the driver/leds/led-class.c component of the Linux operating system allows a hacker to cause a service failure.

The vulnerability in the drivers/leds/led-class.c component of the Linux operating system is related to the use of an uninitialized resource. Exploiting this vulnerability could allow an attacker to cause a service failure...

Astra Linux – Vulnerability found in Linux 6.12, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: leds: led-class: Only add the LED to ledslist when it is fully ready. Before this change, the LED was added to ledslist before the ledinitcore function was called—that is, before ledclassdev.setbrightnesswork was initialized. Thi...

EUVD-2026-53349

WLED's GET /json/cfg endpoint registered in wled00/wledserver.cpp calls serveJson with no settings-PIN check, unlike the /edit endpoint which explicitly checks correctPIN, disclosing the device's general configuration network, hardware, LED setup to any unauthenticated client on the network...

Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count

...

CVE-2026-64276

In the Linux kernel, the following vulnerability has been resolved: Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count rmif30mapgpios allocates gpioledkeymap with mingpioledcount, TRACKSTICKRANGEEND == at most 6 entries, but rmif30attention iterates the full f30-gpioledcount devic...

CVE-2026-64276

CVE-2026-64276 affects the Linux kernel synaptics-rmi4 input driver. The F30/GP I/O mapping code incorrectly allocated gpioled_key_map for at most 6 entries but later iterated up to gpioled_count (0..31) and advanced input->keycodemax to the full count, risking out-of-bounds reads in the atten...

CVE-2026-64276 Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count

In the Linux kernel, the following vulnerability has been resolved: Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count rmif30mapgpios allocates gpioledkeymap with mingpioledcount, TRACKSTICKRANGEEND == at most 6 entries, but rmif30attention iterates the full f30-gpioledcount devic...

EUVD-2026-48988

In the Linux kernel, the following vulnerability has been resolved: Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count rmif30mapgpios allocates gpioledkeymap with mingpioledcount, TRACKSTICKRANGEEND == at most 6 entries, but rmif30attention iterates the full f30-gpioledcount devic...