Extracting-User-credentials-For-Web-portal-and-WiFi-AP-For-Hathway-Router-CVE-2024-44815-

Извлечение учетных данных пользователя для маршрутизатора Hathway через SPI flash - CVE-2024-44815 Описание уязвимости: Во время оценки безопасности прошивки маршрутизатора было обнаружено, что учетные данные для входа как в веб-портал, так и в точку доступа Wi-Fi хранятся в открытом виде во...

SpiMitm

+OPTIONS: ^: SpiMitm - 안티 펌웨어 포렌식을 위한 SPI 플래시 읽기 MitM 공격 PoC 이 PoC는 https://up-board.org/upsquared/specifications/UP Squared에 초점을 맞추고 있습니다. 사용 방법 모든 파일을 edk2-platforms 폴더에 복사한 후, https://www.asset-intertech.com/resources/blog/2020/06/the-up-squared-chronicles-episode-2-building-the-uefi-image/여기에...

Sensitive-Information-disclosure-via-SPI-flash-firmware-for-Hathway-router-CVE-2024-46383

Раскрытие конфиденциальной информации через прошивку SPI-флеш-памяти для маршрутизатора Hathway CVE-2024-46383 Описание уязвимости: В ходе оценки безопасности прошивки маршрутизатора было обнаружено, что конфиденциальная информация об устройствах, подключенных к маршрутизатору, таких как мобильны...

CVE-2025-51643

CVE-2025-51643: Незащищенная SPI-флэш-память позволяет извлечь прошивку в Meitrack T366G-L Описание Устройства GPS-трекера Meitrack T366G-L содержат чип SPI-флэш-памяти Winbond 25Q64JVSIQ, доступ к которому возможен без аутентификации или защиты от вскрытия. Злоумышленник, имеющий физический...

IntelTXE-PoC

고지 사항 모든 정보는 교육 목적으로만 제공됩니다. 이 지침을 따르는 것은 사용자 본인의 책임입니다. 저자와 해당 고용주는 이 페이지에 포함된 정보를 기반으로 행동하거나 행동하지 않은 개인이나 조직으로 인해 발생하는 직접적 또는 간접적 손해나 손실에 대해 책임을 지지 않습니다. 목차 소개 필요한 소프트웨어 페이로드 생성 잠금 해제 토큰 생성 SPI 플래시 이미지 준비 펌웨어 이미지에 파일 통합 OEM 서명 비활성화 펌웨어 이미지 빌드 메인 CPU 기동BringUP SPI 플래시에 이미지 쓰기 USB 디버그 케이블 준비...

CVE-2025-56565

DD-WRT firmware, as deployed on TP-Link TL-WR740N v1 through v4 hardware, stores sensitive authentication credentials in cleartext within non-volatile memory. The exposed material includes SSH private keys, dynamic DNS passwords, email notification credentials and administrative passwords. An...

CVE-2025-56566

MikroTik firmware 7.19.4 stores sensitive authentication credentials and network state in cleartext within non-volatile storage. An attacker with physical access to the device can extract this material from an SPI flash dump, without authenticating to the device and without knowledge of the...

PT-2026-93948

MikroTik firmware 7.19.4 stores sensitive authentication credentials and network state in cleartext within non-volatile storage. An attacker with physical access to the device can extract this material from an SPI flash dump, without authenticating to the device and without knowledge of the...

CVE-2025-56566

MikroTik firmware 7.19.4 is vulnerable because it stores sensitive authentication credentials and network state in cleartext within non-volatile storage. An attacker with physical access to the device can extract this information by performing an SPI flash dump . This extraction can be completed ...

CVE-2025-56565

The DD-WRT firmware deployed on TP-Link TL-WR740N v1 through v4 hardware contains a vulnerability where sensitive authentication credentials are stored in cleartext within non-volatile memory. Exposed information includes SSH private keys , dynamic DNS passwords, email notification credentials, a...

CVE-2025-56566

MikroTik firmware 7.19.4 stores sensitive authentication credentials and network state in cleartext within non-volatile storage. An attacker with physical access to the device can extract this material from an SPI flash dump, without authenticating to the device and without knowledge of the...

CVE-2025-56565

DD-WRT firmware, as deployed on TP-Link TL-WR740N v1 through v4 hardware, stores sensitive authentication credentials in cleartext within non-volatile memory. The exposed material includes SSH private keys, dynamic DNS passwords, email notification credentials and administrative passwords. An...

EUVD-2025-210925

DD-WRT firmware, as deployed on TP-Link TL-WR740N v1 through v4 hardware, stores sensitive authentication credentials in cleartext within non-volatile memory. The exposed material includes SSH private keys, dynamic DNS passwords, email notification credentials and administrative passwords. An...

EUVD-2025-210924

MikroTik firmware 7.19.4 stores sensitive authentication credentials and network state in cleartext within non-volatile storage. An attacker with physical access to the device can extract this material from an SPI flash dump, without authenticating to the device and without knowledge of the...

CVE-2025-56566

MikroTik firmware 7.19.4 stores sensitive authentication credentials and network state in cleartext within non-volatile storage. An attacker with physical access to the device can extract this material from an SPI flash dump, without authenticating to the device and without knowledge of the...

CVE-2025-56566: Cleartext Storage of Sensitive Information

MikroTik firmware 7.19.4 stores sensitive authentication credentials and network state in cleartext within non-volatile storage. An attacker with physical access to the device can extract this material from an SPI flash dump, without authenticating to the device and without knowledge of the...

CVE-2025-56565: Cleartext Storage of Sensitive Information

DD-WRT firmware, as deployed on TP-Link TL-WR740N v1 through v4 hardware, stores sensitive authentication credentials in cleartext within non-volatile memory. The exposed material includes SSH private keys, dynamic DNS passwords, email notification credentials and administrative passwords. An...

PT-2026-93947

DD-WRT firmware, as deployed on TP-Link TL-WR740N v1 through v4 hardware, stores sensitive authentication credentials in cleartext within non-volatile memory. The exposed material includes SSH private keys, dynamic DNS passwords, email notification credentials and administrative passwords. An...

CVE-2025-56565

DD-WRT firmware, as deployed on TP-Link TL-WR740N v1 through v4 hardware, stores sensitive authentication credentials in cleartext within non-volatile memory. The exposed material includes SSH private keys, dynamic DNS passwords, email notification credentials and administrative passwords. An...

UEFI Shell module embedded in SPI Flash can be used to bypass Secure Boot

Overview The UEFI Shell program may expose raw memory access capabilities that, if present in platform firmware for debugging or advanced support use cases, could be abused to undermine UEFI Secure Boot protections. When the UEFI Shell is included in SPI flash, an attacker with the ability to...