fusee-gelee

fusee-gelee Eine Implementierung des Fusee-Gelee-Exploits CVE-2018-6242 für die Nintendo Switch, basierend auf der Sicherheitslücke, die von Kate Temkin / ReSwitched im März 2018 veröffentlicht wurde. Startet eine beliebige Nutzlast z. B. hekate auf einem Tegra-X1-Gerät im...

Rom-0-Decoder

Questo repository non contiene un README...

CVE-2024-56426

SM-G985F / Exynos9830-Bootrom-Exploit !CAUTION Das aktuelle Schlüsselpaket und die erzeugten Dateien sind fusing-fähig. Sobald ein Gerät gefused wurde, ist die eFuse-Änderung irreversibel und das Gerät muss weiterhin Boot-Images und Schlüsselmaterial verwenden, das zum gefused Schlüssel passt. Di...

am335xbootrom

Reverse Engineering the AM335x Boot ROM Sono passati probabilmente diciotto mesi da quando ho messo le mani su alcune schede Beaglebone Black, salvate dalla spazzatura. Purtroppo, le schede non funzionavano subito. Ora, era la prima volta che lavoravo con una di queste schede, o con qualsiasi...

CVE-2024-32258

Übersicht CVE ID : CVE-2024-32258 Typ : Path Traversal Anbieter : FCEUX Produkte : FCEUXNetPlay Version : 2.7.0 Fix : 48b48e7c13be1b949074f42660a33c7ef57135e1 Beschreibung FCEUX ist ein NES-Emulator, der uns zurück in unsere Kindheit versetzen kann. Er bietet mehrere interessante Funktionen, wie...

ARTist

ARTist - Il toolkit di strumentazione e sicurezza per l'Android Runtime ARTist è un framework di strumentazione open source flessibile per le app Android e il middleware Java. È basato sul compilatore dell'Android Runtime ART e modifica il codice durante la compilazione sul dispositivo. A...

So You Want To Build A Nethunter Kernel

Então Você Quer Construir um Kernel Nethunter Introdução O maior obstáculo para a maioria das pessoas que querem configurar um dispositivo Nethunter é o requisito do kernel. A menos que o seu dispositivo já tenha um kernel pré-construído e mantido, vão dizer-lhe para compilar um você mesmo/a. Já...

android_hid

androidhid Use Android as Rubber Ducky against targeted Android device or PC HID attack using Android Using Android as Rubber Ducky against Android or Windows. This is not a new technique, just a demo how to perform HID attack using Android instead of rubber ducky. For targeted Android device it ...

CVE-2026-72487

A flaw was found in the Linux kernel's handling of PCI Peripheral Component Interconnect ROM Read-Only Memory space. A local attacker could trigger an out-of-bounds read or an alignment fault by providing a malformed ROM image or an unaligned data structure address. This could lead to a system...

CVE-2026-50720

The Ingenic T31 SoC boot ROM flash-boot verification path compares only a single 32-bit word of the RSA signature output against a single 32-bit word of the SHA-256 payload digest, rather than compare the full data. This allows an attacker with physical write access to boot media to forge modifie...

EUVD-2026-62479

The Ingenic T41, and probably also T32, T40, and A1 SoC boot ROMs parse and execute an attacker-controlled init table from the SPL header before checking the secure boot state and before invoking signature verification. The init table parser supports full-address 32-bit write operations, allowing...

CVE-2026-50719

The Ingenic T41 SoC boot ROM (and likely T32, T40, and A1 ) parses and executes an attacker-controlled init table from the SPL header before performing any secure boot state check or signature verification. Because the init table parser supports full-address 32-bit write operations , an attacker ...

CVE-2026-71566 KubeVirt backend is not authenticated

FakeFish handles incoming credentials by passing them down to scripts. This works for real hardware because in the end it's up to the BMC to validate them. However, KubeVirt relies on a KUBECONFIG file mounted to the container and completely ignores the credentials. This allows any user of the...

CVE-2026-72487

In the Linux kernel, the following vulnerability has been resolved: PCI: Check ROM header and data structure addr before accessing We meet a crash when running stress-ng on x8664 machine: BUG: unable to handle page fault for address: ffa0000007f40000 RIP: 0010:pcigetromsize+0x52/0x220 Call Trace:...

UBUNTU-CVE-2026-72487

In the Linux kernel, the following vulnerability has been resolved: PCI: Check ROM header and data structure addr before accessing We meet a crash when running stress-ng on x8664 machine: BUG: unable to handle page fault for address: ffa0000007f40000 RIP: 0010:pcigetromsize+0x52/0x220 Call Trace:...

CVE-2026-72487

In the Linux kernel, the following vulnerability has been resolved: PCI: Check ROM header and data structure addr before accessing We meet a crash when running stress-ng on x8664 machine: BUG: unable to handle page fault for address: ffa0000007f40000 RIP: 0010:pcigetromsize+0x52/0x220 Call Trace:...

Linux Distros Unpatched Vulnerability : CVE-2026-72487

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - PCI: Check ROM header and data structure addr before accessing We meet a crash when running stress-ng on x8664 machine: BUG: unable to handle page fault for...

PT-2026-72675

In the Linux kernel, the following vulnerability has been resolved: PCI: Check ROM header and data structure addr before accessing We meet a crash when running stress-ng on x86 64 machine: BUG: unable to handle page fault for address: ffa0000007f40000 RIP: 0010:pci get rom size+0x52/0x220 Call...

CVE-2026-68184

A flaw was found in the Linux kernel's CD-ROM cdrom driver. When handling the CDROMVOLCTRL command, the mmcioctlcdromvolume function can perform an incorrect calculation of buffer length after a pointer adjustment. This leads to a stack out-of-bounds read, where 8 bytes of data beyond the intende...

CVE-2026-68184

The CVE-2026-68184 issue affects the Linux kernel CD-ROM code, specifically mmc_ioctl_cdrom_volume for CDROMVOLCTRL. A 32-byte stack buffer is used to read the audio control mode page (buflen 24, then extended if a block descriptor is present). The function later builds a MODE SELECT payload by m...