151 matches found
Sensitive-Information-disclosure-via-SPI-flash-firmware-for-Hathway-router-CVE-2024-46383
Sensitive-Information-disclosure-via-SPI-flash-firmware-for-Hathway-router-CVE-2024-46383 Vulnerability Description: During the security assessment of the Router firmware, it was observed that sensative information regarding the devices connected to router such as Mobile phone,Laptos, Tablets is...
CVE-2023-20577
A heap overflow in SMM module may allow an attacker with access to a second vulnerability that enables writing to SPI flash, potentially resulting in arbitrary code execution...
CVE-2023-20577
A heap overflow in SMM module may allow an attacker with access to a second vulnerability that enables writing to SPI flash, potentially resulting in arbitrary code execution...
CVE-2023-20577
A heap overflow in the SMM (System Management Mode) module of certain AMD processors allows a local, unauthenticated attacker with a second vulnerability enabling SPI flash writes to achieve arbitrary code execution . The flaw affects multiple AMD product lines including 2nd–4th Gen EPYC , Ryzen ...
EUVD-2023-60617
A heap overflow in SMM module may allow an attacker with access to a second vulnerability that enables writing to SPI flash, potentially resulting in arbitrary code execution...
Extracting-User-credentials-For-Web-portal-and-WiFi-AP-For-Hathway-Router-CVE-2024-44815-
Extracting-User-credentials-For-Hathway-Router Via SPI flash-CVE-2024-44815 脆弱性の説明: ルーターのファームウェアのセキュリティ評価中に、WebポータルとWi-Fiアクセスポイントの両方のルーターのログイン資格情報がSPIフラッシュメモリに平文で保存されていることが観察されました。攻撃者はログイン資格情報を抽出でき、攻撃者に悪用される可能性があります。 製品のベンダー: Hathway 影響を受ける製品: CM5100-511 影響を受けるバージョン: 4.1.1.24 脆弱性スコア V3.1: 6.8...
CVE-2025-51643
CVE-2025-51643: Unprotected SPI Flash Enables Firmware Extraction in Meitrack T366G-L Description Meitrack T366G-L GPS Tracker devices contain an SPI flash chip Winbond 25Q64JVSIQ that is accessible without authentication or tamper protection. An attacker with physical access can attach a standar...
SpiMitm
+OPTIONS: ^: SpiMitm - 用于反固件取证的 SPI flash 读取中间人（MitM）攻击 PoC 该 PoC 针对 https://up-board.org/upsquared/specifications/UP Squared。 使用方法 将所有文件复制到 edk2-platforms 文件夹后，按照 Alan Sguigna...
IntelTXE-PoC
Avvertenza Tutte le informazioni sono fornite esclusivamente a scopo didattico. Segui queste istruzioni a tuo rischio e pericolo. Né gli autori né il loro datore di lavoro sono responsabili di eventuali danni diretti o consequenziali o perdite derivanti da qualsiasi persona o organizzazione che...
CVE-2026-68467
A flaw was found in the Linux kernel's mtd: mchp23k256 driver. This driver, responsible for managing memory technology devices MTD, incorrectly determined the capabilities of certain SPI Serial Peripheral Interface flash chips. This could lead to the system misinterpreting the memory device's...
CVE-2025-65396
A vulnerability in the boot process of Blurams Flare Camera version 24.1114.151.929 and earlier allows a physically proximate attacker to hijack the boot mechanism and gain a bootloader shell via the UART interface. This is achieved by inducing a read error from the SPI flash memory during the...
CVE-2025-65396
Affected product: Blurams Flare Camera (versions 24.1114.151.929 and earlier). Vulnerability cause: In the boot process, a read error from the SPI flash memory is induced by shorting a data pin to ground, allowing a physically proximate attacker to hijack the boot mechanism and gain a bootloader ...
EUVD-2021-13123
Malware in sbrugna...
EUVD-2017-14780
Malware in sbrugna...
EUVD-2017-12323
Malware in sbrugna...
EUVD-2019-15723
Malware in sbrugna...
EUVD-2020-29208
Malware in sbrugna...
EUVD-2021-13152
Malware in sbrugna...