bitlocker-attacks

BitLocker Attacks A list of public attacks on BitLocker. Any public attack with the potential to attack BitLocker but where the exact method is still not public like baton drop is out of scope. Most of the attacks are for where the VMK is sealed by TPM only, which is the default setting, and is...

CVE-2025-65731

CVE-2025-65731 CWE-1191: On-Chip Debug and Test Interface With Improper Access Control UART Root Shell Access on D-Link DIR-605L Hardware F1, Firmware V6.02CN02 Summary A critical hardware security vulnerability has been identified in the D-Link DIR-605L router, Hardware Version F1, Firmware...

Insular

Insular Isolate your big brother app. This is a fork based on the excellent Island. Extra credit to Shelter which inspired me to make the completely FLOSS fork of Island. Documentation On how to enable Insular via adb, cross-profile file access, God mode extending app control to apps outside the...

CVE-2026-32606-POC

Proof-of-Concept for CVE-2026-32606 This repo has simple proof-of-concept code exploiting a common weakness initially described over a year ago at https://oddlama.org/blog/bypassing-disk-encryption-with-tpm2-unlock/. While it specifically targets IncusOS, the attack is pretty generic against most...

CVE-2017-16778-Intercom-DTMF-Injection

Invoking DTMF Tones for Physical Access Grant on Fermax Lift Intercom System CVE-2017-16778 Special Mentions First and foremost, @dizijoyjoy for assisting on the demo set in order for a successful shoot. Special acknowledgement to Fermax for the prompt response to the security bug report on their...

BitUnlocker

BitUnlocker Downgrade Attack A proof of concept for accessing BitLocker-encrypted disks in under 5 minutes on fully patched Windows 11 machines through a boot manager downgrade attack, leveraging the SDI vulnerability originally documented as CVE-2025-48804. The July 2025 patch fixes this in...

Mediatrix-CVE-2022-43096

CVE-2022-43096 CVSS v3.1 Vector: AV:P/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N 7,3 Description Mediatrix 4102 before v48.5.2718 allows local attackers to gain root access via the UART port. Vulnerability Type Incorrect Access Control Vendor of Product Mediatrix Affected Product Code Base Mediatrix 4102 -...

bitlocker-hardening

🔐 yellowkey-mitigation BitLocker TPM+PIN Hardening Against CVE-2026-45585 YellowKey Automated mitigation for the WinRE BitLocker bypass — no full patch available yet 🔍 The Vulnerability YellowKey is a publicly disclosed BitLocker bypass that gives an attacker with physical access an unrestricted...

Concierge

Concierge Toolkit: Physical Access Control Identification and Exploitation The Concierge Toolkit is collection of various scripts and resources to aid the in identification and exploitation of physical access control and monitoring systems. Concierge currently contains tests and/or exploits for t...

CVE-2022-38694_unlock_bootloader

CVE-2022-38694 An attacker with physical access to the device can overwrite a function pointer somewhere in the BootROM data section or a return address stored on the stack and execute their own code with BootROM privileges. For detailed information, read the article by NCC Group. Quick links: To...

Extracting-User-credentials-For-Web-portal-and-WiFi-AP-For-Hathway-Router-CVE-2024-44815-

Extracting-User-credentials-For-Hathway-Router Via SPI flash-CVE-2024-44815 Vulnerability Description: During the security assessment of the Router firmware, it was observed that router login credentials of both web portal and Wi-Fi access point are stored in plain text in SPI flash memoey...

Code-27-Companion-Hub-Exploits

Code 27 3D Companion Hub Vulnerabilities CVE-2026-36027, CVE-2026-36028 The Code 27 3D Companion Hub is a physical desktop device that renders a custom AI character a "Codie" as an animated 3D companion. Users can upload or create any 3D model, and multimodal AI lets the character see its...

CVE-2025-51643

CVE-2025-51643: Unprotected SPI Flash Enables Firmware Extraction in Meitrack T366G-L Description Meitrack T366G-L GPS Tracker devices contain an SPI flash chip Winbond 25Q64JVSIQ that is accessible without authentication or tamper protection. An attacker with physical access can attach a standar...

KDE_Vuln

Thoughts on KDE vFAT vuln. 1: The scope isn't as large as I first imagined. Most systems are probably updated to newer versions of KDE or are running a different GUI. I'd have to look at some actual statistics to get a proper number though. Getting physical access to a machine is already a job in...

CVE-2025-63296

CVE-2025-63296 Summary KERUI K259 5MP Wi-Fi / Tuya Smart Security Camera firmware v33.53.87 contains a code execution vulnerability in its boot/update logic: during startup /usr/sbin/anykaservice.sh scans mounted TF/SD cards and, if /mnt/update.nor.sh is present, copies it to /tmp/net.sh and...

CVE-2026-101513

A flaw was found in the InnoDB component of MySQL. An attacker with physical access and high privileges can exploit this vulnerability to cause the system to hang or crash repeatedly. Successful exploitation results in a complete Denial of Service DoS of the database cluster...

EUVD-2026-106715

Vulnerability in the Oracle Fusion Middleware Control product of Oracle Fusion Middleware component: Framework. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows physical access to compromise Oracle Fusion Middleware Control. Successful...

EUVD-2026-105927

Vulnerability in the MySQL Cluster product of Oracle MySQL component: InnoDB. Supported versions that are affected are 8.0.0-8.0.37. Difficult to exploit vulnerability allows physical access to compromise MySQL Cluster. Successful attacks of this vulnerability can result in unauthorized ability t...

EUVD-2026-105865

Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM component: Siebel Management Console. Supported versions that are affected are 17.0-26.9. Easily exploitable vulnerability allows physical access to compromise Siebel CRM Deployment. Successful attacks of this vulnerability c...

CVE-2026-91467

Vulnerability in the Oracle Fusion Middleware Control product of Oracle Fusion Middleware component: Framework. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows physical access to compromise Oracle Fusion Middleware Control. Successful...