Solaris/SPARC - setuid(0) + chmod (/bin/ksh) + exit(0) Shellcode

/ sparcsolarischmod.c - Solaris/SPARC chmod shellcode Copyright c 2022 Marco Ivaldi Solaris/SPARC setuid/chmod/exit shellcode. Tested on: SunOS 5.10 GenericVirtual sun4u sparc SUNW,SPARC-Enterprise / char sc = / Solaris/SPARC chmod shellcode 12 + 32 + 20 = 64 bytes / / setuid0 / "\x90\x08\x3f\xff...

CVE-2021-40032

The bone voice ID TA has a vulnerability in information management,Successful exploitation of this vulnerability may affect data confidentiality...

CVE-2021-40010

The bone voice ID TA has a heap overflow vulnerability.Successful exploitation of this vulnerability may result in malicious code execution...

CVE-2021-40014

The bone voice ID trusted application TA has a heap overflow vulnerability. Successful exploitation of this vulnerability may affect data confidentiality...

Unspecified vulnerability in Huawei HarmonyOS (CNVD-2022-08451)

Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. A security vulnerability exists in Huawei HarmonyOS 2.0 Bone Voice TA. An attacker could exploit the vulnerability to cause confidentiality to be compromised...

Huawei HarmonyOS Buffer Overflow Vulnerability (CNVD-2022-12806)

Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. A security vulnerability exists in Huawei HarmonyOS 2.0 Bone Voice TA. Successful exploitation of this vulnerability could result in compromised...

CVE-2021-40032

Huawei HarmonyOS Bone Voice TA is affected by CVE-2021-40032, with information management flaws potentially allowing data confidentiality leakage. Connected sources identify HarmonyOS 2.0 Bone Voice TA as vulnerable; some entries note no fix/version details publicly available. CVSS data indicates...

CVE-2021-40014

The bone voice ID trusted application TA has a heap overflow vulnerability. Successful exploitation of this vulnerability may affect data confidentiality...

CVE-2021-40014

Huawei HarmonyOS bone voice ID trusted application (TA) has a heap overflow vulnerability in the TA component, with potential data confidentiality impact. Affected: bone voice ID TA on HarmonyOS. Root cause: heap overflow; exploitation specifics and affected versions are not detailed in the provi...

CVE-2021-40010

Technical details about CVE-2021-40010 are not publicly provided in the connected documents. Monitor for updates to obtain affected products, root cause, impact, and fixes.

PT-2022-11132 · Unknown · Bone Voice Id Ta

Name of the Vulnerable Software and Affected Versions: bone voice ID TA affected versions not specified Description: The bone voice ID TA has a heap overflow issue. Successful exploitation of this issue may result in malicious code execution. Recommendations: At the moment, there is no informatio...

Huawei HarmonyOS 安全漏洞

Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. A security vulnerability exists in Huawei HarmonyOS 2.0 Bone Voice TA. An attacker could exploit the vulnerability to cause confidentiality to be compromised...

ta-odessa.com Cross Site Scripting vulnerability OBB-2320560

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Information disclosure

An information disclosure vulnerability in Widevine TA log prior to SMR Oct-2021 Release 1 allows attackers to bypass the ASLR protection mechanism in TEE...

Weak Password Vulnerability in Tianrongxin Network Audit System

TA-Net supports multi-dimensional fine-grained network behavior and traffic audit analysis. There is a weak password vulnerability in TA-Net Audit System, which can be exploited by attackers to obtain sensitive information...

CVE-2021-34379

CVE-2021-34379 affects NVIDIA Jetson devices running Trusty OS. The HDCP service TA has a bounds-checking flaw in command 10 where the length of an I/O buffer parameter is not checked, potentially leading to memory corruption. The vulnerability is locally exploitable with user interaction not req...

CVE-2021-34378

CVE-2021-34378 affects NVIDIA Jetson devices running Trusty OS. The vulnerability is in the HDCP service TA where bounds checking in command 11 is missing, enabling memory-bounds violations that can cause information disclosure, denial of service, or privilege escalation. Affected products includ...

CVE-2021-34377

CVE-2021-34377 affects NVIDIA Jetson Trusty HDCP service TA: bounds checking is missing in command 9, enabling potential memory corruption. This local, low-complexity issue could lead to privilege escalation, information disclosure, and denial of service. NVIDIA’s security bulletin lists updated ...

CVE-2021-34375

Concretely, CVE-2021-34375 affects NVIDIA Jetson devices running Trusty, where the stack cookie in all trusted applications (TAs) was not randomized. This can permit a stack-based buffer overflow, enabling denial of service, privilege escalation, and information disclosure. The issue is tied to T...

CVE-2021-34393

Trusty contains a vulnerability in TSEC TA which deserializes the incoming messages even though the TSEC TA does not expose any command. This vulnerability might allow an attacker to exploit the deserializer to impact code execution, causing information disclosure...