Lucene search
+L

2287 matches found

Kitploit
Kitploit
added 2026/09/12 8:23 a.m.6 views

bad_ducky

Bad Ducky 개요 Bad Ducky는 또 다른 Rubber Ducky 클론입니다. 내장 카드 리더기가 있는 CJMCU BadUsb ATMEGA32u4 - Arduino Leonardo 클론 보드를 기반으로 하며, eBay나 알리익스프레스에서 구매할 수 있습니다. 제 목표는 Rubber Ducky 스크립트와 호환되면서도 하드웨어를 수정하지 않고 DIP 스위치를 추가하지 않고 실행할 스크립트를 쉽게 선택할 수 있는 제품을 만드는 것이었습니다. 이 제품의 특별한 점은 무엇인가요? Rubber Ducky 스크립트와 완전히 호환됩...

5.9AI score
SaveExploits0References6
Kitploit
Kitploit
added 2026/09/12 8:23 a.m.1305 views

bad_ducky

Bad Ducky Summary Bad Ducky is yet another Rubber Ducky clone. It is based on CJMCU BadUsb ATMEGA32u4 - Arduino Leonardo clone board with onboard card reader, which you can buy on ebay or aliexpress. My goal was to create something compatible with Rubber Ducky scripts, while having ability to...

6AI score
SaveExploits0References4
Kitploit
Kitploit
added 2026/09/12 3:47 a.m.8 views

CVE-2025-65817

CVE-2025-65817 フィールド| 値 ---|--- タイトル| 脆弱性レポート: LSCスマートコネクトカメラ 日付| 2024-02-15 説明| SDカードの更新フックを悪用して、LSCスマートコネクトカメラ上でリモートシェルを起動する。 タグ| iot, vulnerability, cve ファームウェア| 1.14.13 LSCスマートコネクトカメラの脆弱性レポート 発見された脆弱性は、startapp.sh の更新システムを悪用するものであり、より正確にはSDカードのマウントと update.nor.sh ファイルを介して悪用されます。 設定変数...

8.8CVSS6.1AI score0.00331EPSS
SaveExploits1
RedhatCVE
RedhatCVE
added 2026/09/11 9:28 p.m.5 views

CVE-2026-89440

A flaw was found in the Linux kernel's mmc: via-sdmmc component. During the probe process, if the mmcaddhost function fails, the SD card-detect interrupt handler continues to operate on memory that has already been released. This can lead to memory corruption, potentially allowing a local attacke...

5.8CVSS0.002EPSS
SaveExploits0References7
Kitploit
Kitploit
added 2026/09/05 8:09 p.m.7 views

CVE-2025-63296

CVE-2025-63296 概要 KERUI K259 5MP Wi-Fi / Tuya Smart Security Camera ファームウェア v33.53.87 には、起動/更新ロジックに コード実行の脆弱性 が存在します。起動時に /usr/sbin/anykaservice.sh がマウントされた TF/SD カードをスキャンし、/mnt/update.nor.sh が存在する場合、それを /tmp/net.sh にコピーして root 権限で実行します。これにより、物理アクセスを持つ攻撃者が任意のコマンドを実行できます。 詳細 脆弱なエンドポイント :...

6.5CVSS5.9AI score0.00319EPSS
SaveExploits1
AstraLinux
AstraLinux
added 2026/08/24 10:19 a.m.8 views

Astra Linux – Vulnerability in Linux, Linux 5.10

In mmcblkreadsingle of block.c, there is a way to read kernel heap memory due to uninitialized data. This could lead to local information disclosure if reading from an SD card triggers errors, without requiring additional execution privileges. User interaction is not required for exploitation...

4.6CVSS6.5AI score0.0037EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
added 2026/05/14 8:21 a.m.19 views

CVE-2026-34963

barebox version prior to 2026.04.0 contains multiple memory-safety vulnerabilities in the EFI PE loader in efi/loader/pe.c where integer overflow in virtual image size computation using 32-bit arithmetic on section VirtualAddress and size values allows undersized heap allocation, and PE section...

8.6CVSS6.3AI score0.00155EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/05/11 10:17 p.m.65 views

CVE-2026-34963 barebox EFI PE Loader Memory Safety Vulnerabilities

barebox version prior to 2026.04.0 contains multiple memory-safety vulnerabilities in the EFI PE loader in efi/loader/pe.c where integer overflow in virtual image size computation using 32-bit arithmetic on section VirtualAddress and size values allows undersized heap allocation, and PE section...

8.6CVSS0.00155EPSS
SaveExploits0References4
CVE
CVE
added 2026/05/11 10:17 p.m.52 views

CVE-2026-34963

Barebox EFI PE loader (efi/loader/pe.c) contains multiple memory-safety vulnerabilities in versions prior to 2026.04.0: (1) 32-bit arithmetic overflow in virtual image size calculation on section VirtualAddress/size can cause undersized heap allocations, and (2) PE section loading does not valida...

8.6CVSS6.3AI score0.00155EPSS
SaveExploits0References4Affected Software1
RedhatCVE
RedhatCVE
added 2026/04/03 5:08 a.m.12 views

CVE-2026-30603

An issue in the firmware update mechanism of Qianniao QN-L23PA0904 v20250721.1640 allows attackers to gain root access, install backdoors, and exfiltrate data via supplying a crafted iu.sh script contained in an SD card...

6.8CVSS5.9AI score0.00117EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2026/04/03 12:00 a.m.15 views

The vulnerability of the esdhc_signal_volswitch() function in the drivers/mmc/host/sdhci-of-esdhc.c module of the MMC/SD/SDIO card driver for the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the esdhcsignalvolswitch function in the drivers/mmc/host/sdhci-of-esdhc.c module of the MMC/SD/SDIO card driver for the Linux operating system is related to the pointer swapping mechanism. Exploiting this vulnerability could allow an attacker to cause a service failure...

5.5CVSS6.3AI score0.00176EPSS
SaveExploits0References20Affected Software3
NVD
NVD
added 2026/04/02 5:16 p.m.11 views

CVE-2026-30603

An issue in the firmware update mechanism of Qianniao QN-L23PA0904 v20250721.1640 allows attackers to gain root access, install backdoors, and exfiltrate data via supplying a crafted iu.sh script contained in an SD card...

6.8CVSS0.00117EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2026/04/02 12:00 a.m.4 views

CVE-2026-30603

An issue in the firmware update mechanism of Qianniao QN-L23PA0904 v20250721.1640 allows attackers to gain root access, install backdoors, and exfiltrate data via supplying a crafted iu.sh script contained in an SD card...

5.9AI score0.00117EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2026/04/02 12:00 a.m.26 views

CVE-2026-30603

An issue in the firmware update mechanism of Qianniao QN-L23PA0904 v20250721.1640 allows attackers to gain root access, install backdoors, and exfiltrate data via supplying a crafted iu.sh script contained in an SD card...

0.00117EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2026/04/02 12:00 a.m.16 views

PT-2026-29803

An issue in the firmware update mechanism of Qianniao QN-L23PA0904 v20250721.1640 allows attackers to gain root access, install backdoors, and exfiltrate data via supplying a crafted iu.sh script contained in an SD card...

5.9AI score0.00117EPSS
SaveExploits0References4
ATTACKERKB
ATTACKERKB
added 2026/04/02 12:00 a.m.4 views

CVE-2026-30603

An issue in the firmware update mechanism of Qianniao QN-L23PA0904 v20250721.1640 allows attackers to gain root access, install backdoors, and exfiltrate data via supplying a crafted iu.sh script contained in an SD card...

6.8CVSS5.9AI score0.00117EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
added 2026/01/15 12:23 a.m.17 views

CVE-2025-65397

An insecure authentication mechanism in the safeexec.sh startup script of Blurams Flare Camera version 24.1114.151.929 and earlier allows an attacker with physical access to the device to execute arbitrary commands with root privileges, if file /opt/images/publickey.der is not present in the file...

6.8CVSS7.5AI score0.00315EPSS
SaveExploits0References1
OSV
OSV
added 2026/01/14 6:16 p.m.10 views

CVE-2025-65397

An insecure authentication mechanism in the safeexec.sh startup script of Blurams Flare Camera version 24.1114.151.929 and earlier allows an attacker with physical access to the device to execute arbitrary commands with root privileges, if file /opt/images/publickey.der is not present in the file...

6.8CVSS6.1AI score0.00315EPSS
SaveExploits0References3
NVD
NVD
added 2026/01/14 6:16 p.m.16 views

CVE-2025-65397

An insecure authentication mechanism in the safeexec.sh startup script of Blurams Flare Camera version 24.1114.151.929 and earlier allows an attacker with physical access to the device to execute arbitrary commands with root privileges, if file /opt/images/publickey.der is not present in the file...

6.8CVSS0.00315EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2026/01/14 12:00 a.m.7 views

CVE-2025-65397

An insecure authentication mechanism in the safeexec.sh startup script of Blurams Flare Camera version 24.1114.151.929 and earlier allows an attacker with physical access to the device to execute arbitrary commands with root privileges, if file /opt/images/publickey.der is not present in the file...

6.8CVSS5.9AI score0.00315EPSS
SaveExploits0References4
Rows per page
Query Builder