Lucene search
+L

2287 matches found

Kitploit
Kitploit
added 2026/09/12 8:23 a.m.6 views

bad_ducky

Bad Ducky 概要 Bad Ducky は、別の Rubber Ducky クローンです。CJMCU BadUsb(ATMEGA32u4 - Arduino Leonardo クローン)ボードに基づいており、オンボードのカードリーダーを備えています。eBay や aliexpress で購入できます。私の目標は、Rubber Ducky スクリプトと互換性があり、ハードウェアを改造しなくても(DIP スイッチを追加せずに)実行するスクリプトを簡単に選択できるものを作成することでした。 この製品の特長は? すべてのコマンドをサポートする Rubber Ducky スクリプト...

5.9AI score
SaveExploits0References6
Kitploit
Kitploit
added 2026/09/12 8:23 a.m.1305 views

bad_ducky

Bad Ducky Summary Bad Ducky is yet another Rubber Ducky clone. It is based on CJMCU BadUsb ATMEGA32u4 - Arduino Leonardo clone board with onboard card reader, which you can buy on ebay or aliexpress. My goal was to create something compatible with Rubber Ducky scripts, while having ability to...

6AI score
SaveExploits0References4
Kitploit
Kitploit
added 2026/09/12 3:47 a.m.8 views

CVE-2025-65817

CVE-2025-65817 字段| 值 ---|--- 标题| 漏洞报告:LSC Smart Connect 摄像头 日期| 2024-02-15 描述| 滥用 SD 卡更新钩子,在 LSC Smart Connect 摄像头上生成远程 shell。 标签| iot, vulnerability, cve 固件版本| 1.14.13 LSC Smart Connect 摄像头漏洞报告 发现的漏洞在于利用 startapp.sh 中的更新系统,更具体地说是通过 SD 卡挂载和 update.nor.sh 文件。 配置变量 root@kitploit: routines of sd-car...

8.8CVSS6.1AI score0.00331EPSS
SaveExploits1
RedhatCVE
RedhatCVE
added 2026/09/11 9:28 p.m.5 views

CVE-2026-89440

A flaw was found in the Linux kernel's mmc: via-sdmmc component. During the probe process, if the mmcaddhost function fails, the SD card-detect interrupt handler continues to operate on memory that has already been released. This can lead to memory corruption, potentially allowing a local attacke...

5.8CVSS0.002EPSS
SaveExploits0References7
Kitploit
Kitploit
added 2026/09/05 8:09 p.m.7 views

CVE-2025-63296

CVE-2025-63296 概要 KERUI K259 5MP Wi-Fi / Tuya Smart Security Camera ファームウェア v33.53.87 には、起動/更新ロジックに コード実行の脆弱性 が存在します。起動時に /usr/sbin/anykaservice.sh がマウントされた TF/SD カードをスキャンし、/mnt/update.nor.sh が存在する場合、それを /tmp/net.sh にコピーして root 権限で実行します。これにより、物理アクセスを持つ攻撃者が任意のコマンドを実行できます。 詳細 脆弱なエンドポイント :...

6.5CVSS5.9AI score0.00319EPSS
SaveExploits1
AstraLinux
AstraLinux
added 2026/08/24 10:19 a.m.8 views

Astra Linux – Vulnerability in Linux, Linux 5.10

In mmcblkreadsingle of block.c, there is a way to read kernel heap memory due to uninitialized data. This could lead to local information disclosure if reading from an SD card triggers errors, without requiring additional execution privileges. User interaction is not required for exploitation...

4.6CVSS6.5AI score0.0037EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
added 2026/05/14 8:21 a.m.19 views

CVE-2026-34963

barebox version prior to 2026.04.0 contains multiple memory-safety vulnerabilities in the EFI PE loader in efi/loader/pe.c where integer overflow in virtual image size computation using 32-bit arithmetic on section VirtualAddress and size values allows undersized heap allocation, and PE section...

8.6CVSS6.3AI score0.00155EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/05/11 10:17 p.m.65 views

CVE-2026-34963 barebox EFI PE Loader Memory Safety Vulnerabilities

barebox version prior to 2026.04.0 contains multiple memory-safety vulnerabilities in the EFI PE loader in efi/loader/pe.c where integer overflow in virtual image size computation using 32-bit arithmetic on section VirtualAddress and size values allows undersized heap allocation, and PE section...

8.6CVSS0.00155EPSS
SaveExploits0References4
CVE
CVE
added 2026/05/11 10:17 p.m.52 views

CVE-2026-34963

Barebox EFI PE loader (efi/loader/pe.c) contains multiple memory-safety vulnerabilities in versions prior to 2026.04.0: (1) 32-bit arithmetic overflow in virtual image size calculation on section VirtualAddress/size can cause undersized heap allocations, and (2) PE section loading does not valida...

8.6CVSS6.3AI score0.00155EPSS
SaveExploits0References4Affected Software1
RedhatCVE
RedhatCVE
added 2026/04/03 5:08 a.m.12 views

CVE-2026-30603

An issue in the firmware update mechanism of Qianniao QN-L23PA0904 v20250721.1640 allows attackers to gain root access, install backdoors, and exfiltrate data via supplying a crafted iu.sh script contained in an SD card...

6.8CVSS5.9AI score0.00117EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2026/04/03 12:00 a.m.15 views

The vulnerability of the esdhc_signal_volswitch() function in the drivers/mmc/host/sdhci-of-esdhc.c module of the MMC/SD/SDIO card driver for the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the esdhcsignalvolswitch function in the drivers/mmc/host/sdhci-of-esdhc.c module of the MMC/SD/SDIO card driver for the Linux operating system is related to the pointer swapping mechanism. Exploiting this vulnerability could allow an attacker to cause a service failure...

5.5CVSS6.3AI score0.00176EPSS
SaveExploits0References20Affected Software3
NVD
NVD
added 2026/04/02 5:16 p.m.11 views

CVE-2026-30603

An issue in the firmware update mechanism of Qianniao QN-L23PA0904 v20250721.1640 allows attackers to gain root access, install backdoors, and exfiltrate data via supplying a crafted iu.sh script contained in an SD card...

6.8CVSS0.00117EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2026/04/02 12:00 a.m.4 views

CVE-2026-30603

An issue in the firmware update mechanism of Qianniao QN-L23PA0904 v20250721.1640 allows attackers to gain root access, install backdoors, and exfiltrate data via supplying a crafted iu.sh script contained in an SD card...

5.9AI score0.00117EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2026/04/02 12:00 a.m.26 views

CVE-2026-30603

An issue in the firmware update mechanism of Qianniao QN-L23PA0904 v20250721.1640 allows attackers to gain root access, install backdoors, and exfiltrate data via supplying a crafted iu.sh script contained in an SD card...

0.00117EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2026/04/02 12:00 a.m.16 views

PT-2026-29803

An issue in the firmware update mechanism of Qianniao QN-L23PA0904 v20250721.1640 allows attackers to gain root access, install backdoors, and exfiltrate data via supplying a crafted iu.sh script contained in an SD card...

5.9AI score0.00117EPSS
SaveExploits0References4
ATTACKERKB
ATTACKERKB
added 2026/04/02 12:00 a.m.4 views

CVE-2026-30603

An issue in the firmware update mechanism of Qianniao QN-L23PA0904 v20250721.1640 allows attackers to gain root access, install backdoors, and exfiltrate data via supplying a crafted iu.sh script contained in an SD card...

6.8CVSS5.9AI score0.00117EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
added 2026/01/15 12:23 a.m.17 views

CVE-2025-65397

An insecure authentication mechanism in the safeexec.sh startup script of Blurams Flare Camera version 24.1114.151.929 and earlier allows an attacker with physical access to the device to execute arbitrary commands with root privileges, if file /opt/images/publickey.der is not present in the file...

6.8CVSS7.5AI score0.00315EPSS
SaveExploits0References1
OSV
OSV
added 2026/01/14 6:16 p.m.10 views

CVE-2025-65397

An insecure authentication mechanism in the safeexec.sh startup script of Blurams Flare Camera version 24.1114.151.929 and earlier allows an attacker with physical access to the device to execute arbitrary commands with root privileges, if file /opt/images/publickey.der is not present in the file...

6.8CVSS6.1AI score0.00315EPSS
SaveExploits0References3
NVD
NVD
added 2026/01/14 6:16 p.m.16 views

CVE-2025-65397

An insecure authentication mechanism in the safeexec.sh startup script of Blurams Flare Camera version 24.1114.151.929 and earlier allows an attacker with physical access to the device to execute arbitrary commands with root privileges, if file /opt/images/publickey.der is not present in the file...

6.8CVSS0.00315EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2026/01/14 12:00 a.m.7 views

CVE-2025-65397

An insecure authentication mechanism in the safeexec.sh startup script of Blurams Flare Camera version 24.1114.151.929 and earlier allows an attacker with physical access to the device to execute arbitrary commands with root privileges, if file /opt/images/publickey.der is not present in the file...

6.8CVSS5.9AI score0.00315EPSS
SaveExploits0References4
Rows per page
Query Builder