POCO-M7-Plus-Jailbreak

POCO M7 Plus SM6375 - Jailbreak Root Research Disclaimer: This document is written purely for educational and security research purposes. All testing was performed on my own device. I am not responsible for bricked devices, data loss, or misuse of this information. The vulnerabilities discussed...

System-Level Optimization beyond Cryptographic Kernels: An ML-KEM Case Study on Arm Cortex-M7

Recent work on embedded post-quantum cryptography has focused primarily on instruction-level optimization, including arithmetic-kernel improvements, assembly tuning, register allocation, and instruction scheduling. Using the Module-Lattice-Based Key-Encapsulation Mechanism ML-KEM on an Arm...

Exploit for Missing Authentication for Critical Function in Qualcomm Ar9380_Firmware

Poco M7 Plus SM6375 — Temporary Root Research: Qualcomm G...

MINI-5HVP-V487-59M7

Bulletin has no description...

EUVD-2017-1746

Malware in sbrugna...

CVE-2025-58369

fs2 is a compositional, streaming I/O library for Scala. Versions up to and including 2.5.12, 3.0.0-M1 through 3.12.2, and 3.13.0-M1 through 3.13.0-M6 are vulnerable to denial of service attacks though TLS sessions using fs2-io on the JVM using the fs2.io.net.tls package. When establishing a TLS...

Improper Resource Shutdown or Release

Overview Affected versions of this package are vulnerable to Improper Resource Shutdown or Release after establishing a TLS session. An attacker can cause excessive CPU utilization by initiating a half-shutdown of the connection during the handshake, leading the peer to enter a spin loop on socke...

Improper Resource Shutdown or Release

Overview Affected versions of this package are vulnerable to Improper Resource Shutdown or Release after establishing a TLS session. An attacker can cause excessive CPU utilization by initiating a half-shutdown of the connection during the handshake, leading the peer to enter a spin loop on socke...

CVE-2025-58369 fs2: Half-shutdown of socket during TLS handshake may result in spin loop on opposite side

fs2 is a compositional, streaming I/O library for Scala. Versions up to and including 2.5.12, 3.0.0-M1 through 3.12.2, and 3.13.0-M1 through 3.13.0-M6 are vulnerable to denial of service attacks though TLS sessions using fs2-io on the JVM using the fs2.io.net.tls package. When establishing a TLS...

Malicious code in @zalastax/nolb-m7 (npm)

The package @zalastax/nolb-m7 was found to contain malicious code...

MAL-2025-12288 Malicious code in @zalastax/nolb-m7 (npm)

The package @zalastax/nolb-m7 was found to contain malicious code...

This Week in Spring - April 8th, 2025

Hi, Spring fans! How are ya? I'm doing fine. Excited, even. You see, Spring AI M7 is coming soon! In theory, it drops on Thursday. Don't hold us to that — these things can change :- But soon , and it's turning out to be a whopper of a release! You should try upgrading your application to the new ...

Security Bulletin: IBM QRadar SIEM M7 Appliances are vulnerable to CVE-2022-21216

Summary IBM QRadar SIEM M7 Appliances could be vulnerable to an Intel CVE. IBM has addressed the relevant CVE. Vulnerability Details CVEID:CVE-2022-21216 DESCRIPTION: IntelAtom and Intel Xeon Scalable Processors could allow a remote authenticated attacker to gain elevated privileges on the system...

i-m7.com Cross Site Scripting vulnerability OBB-3850664

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

com.textrecruit.ustack:textrecruit-ustack-server (>=1.0.1, <=1.0.31), com.typesafe.akka:akka-file-mailbox_2.10.0-m7 (2.1-m2) +7 more potentially affected by CVE-2021-21409 via io.netty:netty (3.5.4.final)

io.netty:netty MAVEN version 3.5.4.final is affected by a known vulnerability. The following packages have a transitive dependency on io.netty:netty and may be impacted: - com.textrecruit.ustack:textrecruit-ustack-server =1.0.1, =1.0.39, =2.1.96, =2.1.115 - com.zipwhip:zipwhip-api 1.28.3-final...

CVE-2020-13943

If an HTTP/2 client connecting to Apache Tomcat 10.0.0-M1 to 10.0.0-M7, 9.0.0.M1 to 9.0.37 or 8.5.0 to 8.5.57 exceeded the agreed maximum number of concurrent streams for a connection in violation of the HTTP/2 protocol, it was possible that a subsequent request made on that connection could...

com.textrecruit.ustack:textrecruit-ustack-server (>=1.0.1, <=1.0.31), com.typesafe.akka:akka-file-mailbox_2.10.0-m7 (2.1-m2) +7 more potentially affected by CVE-2019-20445 via io.netty:netty (3.5.4.final)

io.netty:netty MAVEN version 3.5.4.final is affected by a known vulnerability. The following packages have a transitive dependency on io.netty:netty and may be impacted: - com.textrecruit.ustack:textrecruit-ustack-server =1.0.1, =1.0.39, =2.1.96, =2.1.115 - com.zipwhip:zipwhip-api 1.28.3-final...

Code injection

Vulnerability in the SPARC M7, T7, S7 based Servers component of Oracle Sun Systems Products Suite subcomponent: Firmware. The supported version that is affected is Prior to 9.7.6.b. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where SPARC M7,...

CVE-2017-10099

Vulnerability in the SPARC M7, T7, S7 based Servers component of Oracle Sun Systems Products Suite subcomponent: Firmware. The supported version that is affected is Prior to 9.7.6.b. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where SPARC M7,...

CVE-2017-10099

Vulnerability in the SPARC M7, T7, S7 based Servers component of Oracle Sun Systems Products Suite subcomponent: Firmware. The supported version that is affected is Prior to 9.7.6.b. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where SPARC M7,...