1649 matches found
IOFireWireFamily-null-deref
IOFireWireFamily-null-deref IOFireWireFamily-null-deref は CVE-2017-2388 の概念実証エクスプロイトです。これは IOFireWireUserClient における NULL ポインタ参照で、macOS Sierra 10.12.4 で修正されました。この脆弱性をトリガーすると、FireWire ポートを備えたデバイスでサービス拒否が発生する可能性があります。 CVE-2017-2388 関数 IOFireWireUserClient::setAsyncRefIsochChannelForceStop は、パラメータ...
Apple-Remote-Crash-Tool-CVE-2018-4407
Apple-Remote-Crash-Tool-CVE-2018-4407 同じWiFiネットワーク上のあらゆるmacOS High SierraまたはiOS 11デバイスをクラッシュさせます 公開されている「ヒープバッファオーバーフローの脆弱性」CVE-2018-4407 を利用した小さなツールで、ネットワーク全体に対する悪用をより簡単にします。 必要条件 MacOS Python がインストールされていること Scapy がインストールされていること pip install scapy 基本 ターゲットデバイスのIPアドレス宛に悪意のあるICMPパケットを送信します 対応デバイス...
wifi_leak
WiFi 버그 - CVE-2018-4084 ZeroFest 2017 환경 macOS High Sierra 10.13.1에서 테스트됨 MacBook Pro Retina, 15-inch, Mid 2015에서 테스트됨 참조 https://support.apple.com/en-us/HT208465...
caracal
Caracal Caracal은 Starknet 스마트 계약을 위한 SIERRA 표현에 대한 정적 분석 도구입니다. 기능 취약한 Cairo 코드를 감지하는 탐지기 정보를 보고하는 프린터 오염 분석 Taint analysis 데이터 흐름 분석 프레임워크 Scarb 프로젝트에서 쉽게 실행 가능 설치 사전 컴파일된 바이너리 사전 컴파일된 바이너리는 릴리스 페이지에서 확인할 수 있습니다. Cairo 컴파일러 1.x.x를 사용하는 경우 v0.1.x 바이너리를, Cairo 컴파일러 2.x.x를 사용하는 경우 v0.2.x를 사용하십시오...
caracal
Caracal Caracal is a static analyzer tool over the SIERRA representation for Starknet smart contracts. Features Detectors to detect vulnerable Cairo code Printers to report information Taint analysis Data flow analysis framework Easy to run in Scarb projects Installation Precompiled binaries...
ctl_ctloutput-leak
ctlctloutput-leak macOS High Sierra 10.13 の ctlctloutput 関数は、sooptcopyin の呼び出しの戻り値を無視します。これにより、初期化されていないカーネルヒープデータをユーザースペースに漏えいさせる競合ウィンドウが生じます。ctlctloutput-leak は、この情報漏えいを引き起こそうとする proof-of-concept エクスプロイトです。悪用には root 権限が必要です。 このエクスプロイトは、macOS High Sierra 10.13.1 Beta 17B25c および iOS 10.1.1...
CVE-2023-40459
はじめに このリポジトリには、CVE-2023-40459 脆弱性の PoC が含まれています。この脆弱性は、Sierra Wireless 製品である ALEOS 4.16 およびそれ以前のバージョンの ACEManager ファイルに影響を与えます。この攻撃は、初期アクセス権がなくても、対象デバイスへのアクセスを妨害 DoS する可能性があります。 使用するには、次のコマンドを実行してください: root@kitploit: $ python3 PoC-CVE-2023-40459.py Address: http://target Port: 9091...
Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15
In the Linux kernel, the following vulnerability has been resolved: usb: net: sierra: check for no status endpoint The driver checks whether it has three endpoints, as well as endpoints for bulk in-and-out operations. However, it does not check whether the third endpoint is an interrupt input. Th...
CVE-2023-40459
CVE-2023-40459 CVE-2023-40459 인증되지 않은 DoS PoC 익스플로잇. 이 취약점은 Sierra Wireless 제품인 ALEOS 4.16 및 이전 버전의 ACEManager 구성 요소에 영향을 미칩니다. 사용법 python3 PoC-CVE-2023-40459.py Address: http://target Port: 9091 참조 NVD 관련 문서 Double Take Zero Day...
EUVD-2026-75539
The Sierra Wireless HL78xx modem GNSS driver drivers/modem/hl78xx/, later drivers/modem/vendorstandalone/hl78xx/ embeds a generic struct gnssnmea0183matchdata matchdata inside struct hl78xxgnssdata. The generic NMEA0183 match helper drivers/gnss/gnssnmea0183match.c requires that context to be the...
CVE-2026-12520
The Sierra Wireless HL7800 cellular modem driver drivers/modem/vendorstandalone/hl7800.c, located at drivers/modem/hl7800.c in v4.4.0 and earlier parses AT responses with roughly twenty handlers that call netbuflinearizevalue, sizeofvalue, buf, 0, len into a 128-byte stack buffer and then write...
EUVD-2026-61175
The Sierra Wireless HL7800 cellular modem driver drivers/modem/vendorstandalone/hl7800.c, located at drivers/modem/hl7800.c in v4.4.0 and earlier parses AT responses with roughly twenty handlers that call netbuflinearizevalue, sizeofvalue, buf, 0, len into a 128-byte stack buffer and then write...
CVE-2026-12520 Stack buffer overflow and off-by-one writes in Zephyr HL7800 modem AT response handlers
The Sierra Wireless HL7800 cellular modem driver drivers/modem/vendorstandalone/hl7800.c, located at drivers/modem/hl7800.c in v4.4.0 and earlier parses AT responses with roughly twenty handlers that call netbuflinearizevalue, sizeofvalue, buf, 0, len into a 128-byte stack buffer and then write...
Exploit for OS Command Injection in Sierrawireless Aleos
CVE-2022-46649 PoC exploit for CVE-2022-46649, a command in...
ROS-20260313-73-0042
A vulnerability in the drivers/net/usb/sierranet.c module of the Linux operating system kernel is related to improper input validation. Exploitation of the vulnerability could allow an attacker to cause a denial of service...
📄 macOS Sierra 10.12 Build 16A323 Double-Free / Privilege Escalation
macOS Sierra version 10.12 Build 16.A323 local privilege escalation proof of concept exploit. A flaw in the MIG ownership model within the ioserviceaddnotificationool routine of IOKit allows a malicious user to leak Mach port send-right references. By repeatedly invoking notifications with...
CVE-2018-4068
An exploitable information disclosure vulnerability exists in the ACEManager functionality of Sierra Wireless AirLink ES450 FW 4.9.3. A HTTP request can result in disclosure of the default configuration for the device. An attacker can send an unauthenticated HTTP request to trigger this...
CVE-2018-4073
An exploitable Permission Assignment vulnerability exists in the ACEManager EmbeddedAceSetTask.cgi functionality of Sierra Wireless AirLink ES450 FW 4.9.3. The the binary the endpoint /cgi-bin/EmbededAceTLSetTask.cgi is a very similar endpoint that is designed for use with setting table values th...
CVE-2018-4064
An exploitable unverified password change vulnerability exists in the ACEManager upload.cgi functionality of Sierra Wireless AirLink ES450 FW 4.9.3. A specially crafted HTTP request can cause a unverified device configuration change, resulting in an unverified change of the user password on the...