IOFireWireFamily-null-deref

IOFireWireFamily-null-deref IOFireWireFamily-null-deref es un exploit de prueba de concepto para CVE-2017-2388, una desreferencia de puntero NULL en IOFireWireUserClient que se corrigió en macOS Sierra 10.12.4. Esta vulnerabilidad puede provocar una denegación de servicio en dispositivos con puer...

caracal

Caracal Caracal es una herramienta de análisis estático sobre la representación SIERRA para contratos inteligentes de Starknet. Características Detectores para detectar código Cairo vulnerable Impresoras para reportar información Análisis de taint Marco de análisis de flujo de datos Fácil de...

caracal

Caracal Caracal is a static analyzer tool over the SIERRA representation for Starknet smart contracts. Features Detectors to detect vulnerable Cairo code Printers to report information Taint analysis Data flow analysis framework Easy to run in Scarb projects Installation Precompiled binaries...

Apple-Remote-Crash-Tool-CVE-2018-4407

Apple-Remote-Crash-Tool-CVE-2018-4407 Crashes any macOS High Sierra or iOS 11 device that is on the same WiFi network Just a small Tool that uses a public 'heap buffer overflow vulnerability' CVE-2018-4407 and makes it easier to exploit whole networks. Requirements MacOS Python installed Scapy...

ctl_ctloutput-leak

ctlctloutput-leak La función ctlctloutput en macOS High Sierra 10.13 ignora el valor de retorno de una llamada a sooptcopyin, lo que abre una ventana de carrera para filtrar datos no inicializados del heap del kernel al espacio de usuario. ctlctloutput-leak es un exploit de prueba de concepto que...

CVE-2023-40459

Introducción Este repositorio contiene el PoC de la vulnerabilidad CVE-2023-40459. Esta vulnerabilidad afecta al archivo ACEManager en las versiones ALEOS 4.16 y anteriores, un producto de Sierra Wireless. Este ataque, sin ningún derecho de acceso inicial, puede provocar una interrupción en el...

wifi_leak

Bug de WiFi - CVE-2018-4084 ZeroFest 2017 Entorno probado en macOS High Sierra 10.13.1 probado en MacBook Pro Retina, 15 pulgadas, mediados de 2015 Referencia https://support.apple.com/en-us/HT208465...

CVE-2023-40459

CVE-2023-40459 CVE-2023-40459 Exploit PoC de DoS no autenticado. Esta vulnerabilidad afecta al componente ACEManager de ALEOS 4.16 y anteriores, un producto de Sierra Wireless. Uso python3 PoC-CVE-2023-40459.py Address: http://target Port: 9091 Referencia NVD Artículo Double Take Zero Day...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: usb: net: sierra: check for no status endpoint The driver checks whether it has three endpoints, as well as endpoints for bulk input and output. However, it does not check whether the third endpoint is an interrupt input. This...

EUVD-2026-75539

The Sierra Wireless HL78xx modem GNSS driver drivers/modem/hl78xx/, later drivers/modem/vendorstandalone/hl78xx/ embeds a generic struct gnssnmea0183matchdata matchdata inside struct hl78xxgnssdata. The generic NMEA0183 match helper drivers/gnss/gnssnmea0183match.c requires that context to be the...

CVE-2026-15461: Access of Resource Using Incompatible Type

The Sierra Wireless HL78xx modem GNSS driver drivers/modem/hl78xx/, later drivers/modem/vendorstandalone/hl78xx/ embeds a generic struct gnssnmea0183matchdata matchdata inside struct hl78xxgnssdata. The generic NMEA0183 match helper drivers/gnss/gnssnmea0183match.c requires that context to be the...

Malicious Package

Overview echo-sierra-victor-pjwct is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...

CVE-2026-12520

The Sierra Wireless HL7800 cellular modem driver drivers/modem/vendorstandalone/hl7800.c, located at drivers/modem/hl7800.c in v4.4.0 and earlier parses AT responses with roughly twenty handlers that call netbuflinearizevalue, sizeofvalue, buf, 0, len into a 128-byte stack buffer and then write...

CVE-2026-12520 Stack buffer overflow and off-by-one writes in Zephyr HL7800 modem AT response handlers

The Sierra Wireless HL7800 cellular modem driver drivers/modem/vendorstandalone/hl7800.c, located at drivers/modem/hl7800.c in v4.4.0 and earlier parses AT responses with roughly twenty handlers that call netbuflinearizevalue, sizeofvalue, buf, 0, len into a 128-byte stack buffer and then write...

EUVD-2026-61175

The Sierra Wireless HL7800 cellular modem driver drivers/modem/vendorstandalone/hl7800.c, located at drivers/modem/hl7800.c in v4.4.0 and earlier parses AT responses with roughly twenty handlers that call netbuflinearizevalue, sizeofvalue, buf, 0, len into a 128-byte stack buffer and then write...

CVE-2026-12520: Out-of-bounds Write

The Sierra Wireless HL7800 cellular modem driver drivers/modem/vendorstandalone/hl7800.c, located at drivers/modem/hl7800.c in v4.4.0 and earlier parses AT responses with roughly twenty handlers that call netbuflinearizevalue, sizeofvalue, buf, 0, len into a 128-byte stack buffer and then write...

PT-2026-77289

The Sierra Wireless HL7800 cellular modem driver drivers/modem/vendor standalone/hl7800.c, located at drivers/modem/hl7800.c in v4.4.0 and earlier parses AT responses with roughly twenty handlers that call net buf linearizevalue, sizeofvalue, buf, 0, len into a 128-byte stack buffer and then writ...

Exploit for OS Command Injection in Sierrawireless Aleos

CVE-2022-46649 PoC exploit for CVE-2022-46649, a command in...

ROS-20260313-73-0042

A vulnerability in the drivers/net/usb/sierranet.c module of the Linux operating system kernel is related to improper input validation. Exploitation of the vulnerability could allow an attacker to cause a denial of service...

📄 macOS Sierra 10.12 Build 16A323 Double-Free / Privilege Escalation

macOS Sierra version 10.12 Build 16.A323 local privilege escalation proof of concept exploit. A flaw in the MIG ownership model within the ioserviceaddnotificationool routine of IOKit allows a malicious user to leak Mach port send-right references. By repeatedly invoking notifications with...