151 matches found
Extracting-User-credentials-For-Web-portal-and-WiFi-AP-For-Hathway-Router-CVE-2024-44815-
Extracting-User-credentials-For-Hathway-Router Via SPI flash-CVE-2024-44815 脆弱性の説明: ルーターのファームウェアのセキュリティ評価中に、WebポータルとWi-Fiアクセスポイントの両方のルーターのログイン資格情報がSPIフラッシュメモリに平文で保存されていることが観察されました。攻撃者はログイン資格情報を抽出でき、攻撃者に悪用される可能性があります。 製品のベンダー: Hathway 影響を受ける製品: CM5100-511 影響を受けるバージョン: 4.1.1.24 脆弱性スコア V3.1: 6.8...
Sensitive-Information-disclosure-via-SPI-flash-firmware-for-Hathway-router-CVE-2024-46383
Sensitive-Information-disclosure-via-SPI-flash-firmware-for-Hathway-router-CVE-2024-46383 脆弱性の説明: ルーターファームウェアのセキュリティ評価中に、ルーターに接続されているデバイス（携帯電話、ノートパソコン、タブレットなど）に関する機密情報が平文で保存されており、攻撃者がそれを悪用する可能性があることが確認されました。 製品ベンダー: Hathway 影響を受ける製品: CM5100-511 影響を受けるバージョン: 4.1.1.24 脆弱性スコア V3.1: 5.2 Medium...
CVE-2023-20577
A heap overflow in SMM module may allow an attacker with access to a second vulnerability that enables writing to SPI flash, potentially resulting in arbitrary code execution...
CVE-2023-20577
A heap overflow in the SMM (System Management Mode) module of certain AMD processors allows a local, unauthenticated attacker with a second vulnerability enabling SPI flash writes to achieve arbitrary code execution . The flaw affects multiple AMD product lines including 2nd–4th Gen EPYC , Ryzen ...
CVE-2023-20577
A heap overflow in SMM module may allow an attacker with access to a second vulnerability that enables writing to SPI flash, potentially resulting in arbitrary code execution...
EUVD-2023-60617
A heap overflow in SMM module may allow an attacker with access to a second vulnerability that enables writing to SPI flash, potentially resulting in arbitrary code execution...
CVE-2025-51643
CVE-2025-51643: 保護されていないSPIフラッシュによりMeitrack T366G-Lのファームウェア抽出が可能 説明 Meitrack T366G-L GPSトラッカーデバイスには、認証や改ざん防止が施されていないSPIフラッシュチップ（Winbond...
SpiMitm
+OPTIONS: ^ SpiMitm - ファームウェアフォレンジック対策用SPIフラッシュ読み出しMitM攻撃PoC このPoCはhttps://up-board.org/upsquared/specifications/UP Squaredを対象としています。 使い方...
IntelTXE-PoC
Avvertenza Tutte le informazioni sono fornite esclusivamente a scopo didattico. Segui queste istruzioni a tuo rischio e pericolo. Né gli autori né il loro datore di lavoro sono responsabili di eventuali danni diretti o consequenziali o perdite derivanti da qualsiasi persona o organizzazione che...
CVE-2026-68467
A flaw was found in the Linux kernel's mtd: mchp23k256 driver. This driver, responsible for managing memory technology devices MTD, incorrectly determined the capabilities of certain SPI Serial Peripheral Interface flash chips. This could lead to the system misinterpreting the memory device's...
CVE-2025-65396
A vulnerability in the boot process of Blurams Flare Camera version 24.1114.151.929 and earlier allows a physically proximate attacker to hijack the boot mechanism and gain a bootloader shell via the UART interface. This is achieved by inducing a read error from the SPI flash memory during the...
CVE-2025-65396
Affected product: Blurams Flare Camera (versions 24.1114.151.929 and earlier). Vulnerability cause: In the boot process, a read error from the SPI flash memory is induced by shorting a data pin to ground, allowing a physically proximate attacker to hijack the boot mechanism and gain a bootloader ...
EUVD-2021-13123
Malware in sbrugna...
EUVD-2017-14780
Malware in sbrugna...
EUVD-2017-12323
Malware in sbrugna...
EUVD-2019-15723
Malware in sbrugna...
EUVD-2020-29208
Malware in sbrugna...
EUVD-2021-13152
Malware in sbrugna...