Xiaomi-C200-Firmware-Analysis

The Scope In this repo i will show how i got access to the UART interface even without the common set of exposed pins / test pads, using U-Boot and tricks to gain root on an early stage and eventually dumping the firmware Initial Reconnaissance There are a few key things clear from the PCB Chip...

provisioner

Provisioner Overview Provisioner is a developer-focused provisioning sidekick for single-board computers SBCs, particularly U-Boot-based platforms. It provides a self-contained environment to: Remotely access boards Automate bring-up workflows Provision kernels and root filesystems Execute flashi...

chipicopwn

chipicopwn Exploit de bootloader para Google Nest Hub 2.ª generación elaine requisitos Google Nest Hub 2.ª generación Raspberry Pi Pico Concentrador USB con alimentación o cable Y USB pico-sdk consulta la guía de inicio para obtener instrucciones de instalación versiones compatibles firmware de...

Linux Distros Unpatched Vulnerability : CVE-2025-70292

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Debian Linux - u-boot - None Ubuntu Linux - Unknown description CVE-2025-70292 Note that Nessus relies on the presence of the package as reported by the vendor...

Linux Distros Unpatched Vulnerability : CVE-2025-70290

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in Denx U-Boot before 2026.04. An integer overflow vulnerability in the ZFS filesystem support can be triggered by malformed on-disk...

Linux Distros Unpatched Vulnerability : CVE-2025-70293

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in Denx U-Boot before 2026.04. An integer overflow vulnerability exists in function ext4fsgetbgdtable, the size calculation can lead to...

Linux Distros Unpatched Vulnerability : CVE-2025-70291

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Debian Linux - u-boot - None Ubuntu Linux - Unknown description CVE-2025-70291 Note that Nessus relies on the presence of the package as reported by the vendor...

CVE-2025-70290

An issue was discovered in Denx U-Boot before 2026.04. An integer over...

UBUNTU-CVE-2025-70293

An issue was discovered in Denx U-Boot before 2026.04. An integer over...

CVE-2025-45512

Guida all'uso del PoC di Exploit per U-Boot 1.1.3 Introduzione Questo Proof of Concept PoC è stato creato per verificare vulnerabilità nel bootloader U-Boot versione 1.1.3 compilato il 27 agosto 2019. Il codice implementa cinque diverse vulnerabilità pertinenti alle categorie della OWASP IoT...

DEBIAN-CVE-2025-70293

An issue was discovered in Denx U-Boot before 2026.04. An integer overflow vulnerability exists in function ext4fsgetbgdtable, the size calculation can lead to under allocation and this underallocated buffer will be used in memcpy which could lead to arbitrary code execution, a denial of service,...

DEBIAN-CVE-2025-70290

An issue was discovered in Denx U-Boot before 2026.04. An integer overflow vulnerability in the ZFS filesystem support can be triggered by malformed on-disk metadata. The issue may result in incorrect memory allocation followed by out-of-bounds memory access, potentially leading to a crash or...

CVE-2025-70293

An issue was discovered in Denx U-Boot before 2026.04. An integer overflow vulnerability exists in function ext4fsgetbgdtable, the size calculation can lead to under allocation and this underallocated buffer will be used in memcpy which could lead to arbitrary code execution, a denial of service,...

CVE-2025-70290

An issue was discovered in Denx U-Boot before 2026.04. An integer overflow vulnerability in the ZFS filesystem support can be triggered by malformed on-disk metadata. The issue may result in incorrect memory allocation followed by out-of-bounds memory access, potentially leading to a crash or...

CVE-2025-70290

CVE-2025-70290 affects Denx U-Boot before 2026.04 . An integer overflow in the ZFS filesystem support can be triggered by malformed on-disk metadata , leading to incorrect memory allocation and subsequent out-of-bounds memory access . This may result in a crash or arbitrary code execution during ...

CVE-2025-70293

CVE-2025-70293 affects Denx U-Boot before version 2026.04 . An integer overflow in the function ext4fs_get_bgdtable causes an under-allocated buffer to be passed to memcpy() , resulting in a heap buffer overflow. This can lead to arbitrary code execution , denial of service , or other unspecified...

CVE-2025-70290

An issue was discovered in Denx U-Boot before 2026.04. An integer overflow vulnerability in the ZFS filesystem support can be triggered by malformed on-disk metadata. The issue may result in incorrect memory allocation followed by out-of-bounds memory access, potentially leading to a crash or...

CVE-2025-70293

An issue was discovered in Denx U-Boot before 2026.04. An integer overflow vulnerability exists in function ext4fsgetbgdtable, the size calculation can lead to under allocation and this underallocated buffer will be used in memcpy which could lead to arbitrary code execution, a denial of service,...

EUVD-2025-210792

An issue was discovered in Denx U-Boot before 2026.04. An integer overflow vulnerability exists in function ext4fsgetbgdtable, the size calculation can lead to under allocation and this underallocated buffer will be used in memcpy which could lead to arbitrary code execution, a denial of service,...

CVE-2025-70290

An issue was discovered in Denx U-Boot before 2026.04. An integer overflow vulnerability in the ZFS filesystem support can be triggered by malformed on-disk metadata. The issue may result in incorrect memory allocation followed by out-of-bounds memory access, potentially leading to a crash or...