zephyr_cve-2021-3625

CVE-2021-3625 This repository contains a few example exploits for CVE-2021-3625. All Zephyr-based usb devices up to and including version 2.5.0 suffer from a buffer overflow allowing readout of up to 65kB. Depending on the actual device this may result of leakage of sensitive data like encryption...

Does the Readout Bypass Leak the Input? A Feature-Visibility Audit of Hybrid Quantum-Classical Models

Readout-side residual hybrids concatenate raw inputs with measured quantum features. Under single-example gradient sharing, a biased first linear layer admits standard analytic recovery of its input, so the bypass exposes raw coordinates without requiring inversion of the quantum circuit. We audi...

Puya Semiconductor Readout Protection Unauthorized Access

The vulnerability of the Readout Protection protection mechanism in microprogramming software for microcontroller devices from Puya Semiconductor, models PY32F00X, PY32F0XX, and PY32F403, is related to deficiencies in the mechanism for assigning internal resources with access levels for debugging...

PT-2026-82346

Уязвимость режима защиты от чтения Readout Protection микропрограммного обеспечения микроконтроллеров Puya Semiconductor PY32F00X, PY32F0XX, PY32F403 связана с недостатками механизма присвоения внутреннему ресурсу уровня доступа для отладки. Эксплуатация уязвимости может позволить нарушителю...

Routing-Aware Explanations for Mixture of Experts Graph Models in Malware Detection

Mixture-of-Experts MoE offers flexible graph reasoning by combining multiple views of a graph through a learned router. We investigate routing-aware explanations for MoE graph models in malware detection using control flow graphs CFGs. Our architecture builds diversity at two levels. At the node...

Pega Platform security vulnerabilities

Pega Platform is an enterprise management platform from Pega Corporation, USA. A security vulnerability exists in Pega Platform versions 8.7.5 through 24.2.2, which stems from an insecure direct object reference in a user interface component that could lead to data readout...

EUVD-2020-5715

Malware in sbrugna...

EUVD-2024-19192

Malicious code in bioql PyPI...

QNAP License Center Cross-Site Scripting Vulnerability

QNAP License Center is a certificate center of Qualicom Technology QNAP Inc. in Taiwan, China. QNAP License Center suffers from a cross-site scripting vulnerability that stems from the application's lack of effective filtering and escaping of user-supplied data. An attacker could exploit this...

QNAP License Center Cross-site Scripting Vulnerability

QNAP License Center is a certificate center of Qualicom Technology QNAP Inc. in Taiwan, China. QNAP License Center suffers from a cross-site scripting vulnerability that stems from the application's lack of effective filtering and escaping of user-supplied data. An attacker could exploit this...

nilfs2 DoS

The vulnerability of the nilfs2 component in the Linux operating system’s kernel is related to readout errors beyond the boundary in the nilfstypebymode function. Exploiting this vulnerability can allow an attacker to cause a service failure...

PT-2024-40

Name of the Vulnerable Software and Affected Versions GigaDevice GD32E23x versions GigaDevice GD32F20x versions GigaDevice GD32F1x0 versions GigaDevice GD32F4xx versions GigaDevice GD32F30x versions GigaDevice GD32C10x versions GigaDevice GD32E10x versions GigaDevice GD32E50x versions Description...

Design/Logic Flaw

A vulnerability has been identified in SENTRON 7KM PAC3120 AC/DC 7KM3120-0BA01-1DA0 All versions = V3.2.3 = V3.2.3 = V3.2.3 = V3.2.3 V3.3.0 only when manufactured between LQN231003... and LQN231215... with LQNYYMMDD.... The read out protection of the internal flash of affected devices was not...

CVE-2024-21483

A vulnerability has been identified in SENTRON 7KM PAC3120 AC/DC 7KM3120-0BA01-1DA0 All versions = V3.2.3 = V3.2.3 = V3.2.3 = V3.2.3 V3.2.4 only when manufactured between LQN231003... and LQN231215... with LQNYYMMDD.... The read out protection of the internal flash of affected devices was not...

PT-2024-2276 · Siemens · Sentron 7Km Pac3220 Ac/Dc +1

Name of the Vulnerable Software and Affected Versions: SENTRON 7KM PAC3120 AC/DC versions V3.2.3 through V3.2.4 SENTRON 7KM PAC3120 DC versions V3.2.3 through V3.2.4 SENTRON 7KM PAC3220 AC/DC versions V3.2.3 through V3.2.4 SENTRON 7KM PAC3220 DC versions V3.2.3 through V3.2.4 Description: A...

CVE-2024-21483: Improper Access Control

A vulnerability has been identified in SENTRON 7KM PAC3120 AC/DC 7KM3120-0BA01-1DA0 All versions = V3.2.3 = V3.2.3 = V3.2.3 = V3.2.3 V3.2.4 only when manufactured between LQN231003... and LQN231215... with LQNYYMMDD.... The read out protection of the internal flash of affected devices was not...

PT-2024-39: Readout protection level bypass before the first power-on cycle in GigaDevice Semiconductor products

The vulnerability of readout protection level bypass before the first power-on cycle was identified in series GD32F1x0, GD32F4xx, GD32F3x0 of GigaDevice Semiconductor products. The discovered vulnerability can be exploited by an attacker to take a snapshot of RAM before initialization or to chang...

SUSE CVE-2020-27208

The flash read-out protection RDP level is not enforced during the device initialization phase of the SoloKeys Solo 4.0.0 & Somu and the Nitrokey FIDO2 token. This allows an adversary to downgrade the RDP level and access secrets such as private ECC keys from SRAM via the debug interface...

STMicroelectronics STM32L4 Access Control Error Vulnerability

The STMicroelectronics STM32L4 is a series of ultra-low power microcontrollers from STMicroelectronics, an Italian and French company. The STMicroelectronics STM32L4 suffers from an access control error vulnerability that stems from the fact that flash readout protection can be degraded from RDP...

CVE-2020-27211

Nordic Semiconductor nRF52840 devices through 2020-10-19 have improper protection against physical side channels. The flash read-out protection APPROTECT can be bypassed by injecting a fault during the boot phase...