CVE-2025-45512

Guida all'uso del PoC di Exploit per U-Boot 1.1.3 Introduzione Questo Proof of Concept PoC è stato creato per verificare vulnerabilità nel bootloader U-Boot versione 1.1.3 compilato il 27 agosto 2019. Il codice implementa cinque diverse vulnerabilità pertinenti alle categorie della OWASP IoT...

Mediatrix-CVE-2022-43096

CVE-2022-43096 CVSS v3.1 Vettore: AV:P/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N 7,3 Descrizione Mediatrix 4102 prima della v48.5.2718 consente ad attaccanti locali di ottenere accesso root tramite la porta UART. Tipo di Vulnerabilità Controllo di Accesso Errato Venditore del Prodotto Mediatrix Codice Base...

ch55x_firmware_extractor

Extrator de firmware CH55x O extrator de firmware CH55x é utilizado para ler o firmware de circuitos integrados CH55x. Não há suporte interno nos dispositivos para ler diretamente o firmware através do bootloader. No entanto, existe uma funcionalidade para verificar o conteúdo do firmware de 8 em...

Xiaomi-C200-Firmware-Analysis

Der Umfang In diesem Repository zeige ich, wie ich Zugang zur UART-Schnittstelle erhalten habe, selbst ohne die üblichen freiliegenden Pins/Testpads. Dabei nutze ich U-Boot und Tricks, um frühzeitig Root-Zugriff zu erlangen und schließlich die Firmware zu dumpen. Erste Erkundung Einige wichtige...

CVE-2025-65731

CVE-2025-65731 CWE-1191: Interfaccia di debug e test on-chip con controllo di accesso improprio Accesso a una root shell UART su D-Link DIR-605L Hardware F1, Firmware V6.02CN02 Riepilogo È stata identificata una vulnerabilità hardware critica nel router D-Link DIR-605L, Hardware Version F1,...

CVE-2025-67399

CVE-2025-67399 भेद्यता सारांश AIRTH स्मार्ट होम AQI मॉनिटर BK7231N चिपसेट पर आधारित CB3S ब्लूटूथ SoC का उपयोग करता है, जिसका सॉफ्टवेयर संस्करण संख्या 2.1.17 है। डिवाइस तक भौतिक रूप से पहुंच प्राप्त करके और SoC की पहचान करके, सार्वजनिक रूप से उपलब्ध डेटाशीट का उपयोग करके उजागर UART डीबग/प्रोग्रामि...

psc

PortShellCrypter -- PSC This project - as well as its sister project crash - belongs to my anti-censorship tool-set that allows to setup fully working encrypted shells and TCP/UDP forwarding in hostile censoring environments. It is also useful for forensics to dump data from devices via UART or...

CVE-2024-36842-Backdooring-Oncord-Android-Sterio-

CVE-2024-36842 Backdooring su Stereo Android Oncord+ Abbiamo condotto una valutazione delle vulnerabilità su una delle unità di infotainment per auto aftermarket più vendute. Creazione di una backdoor persistente sull'unità di infotainment per auto Oncord+ Android/iOS utilizzando uno script...

CP-XR-DE21-S--4G-Router-Vulnerabilities

CP-XR-DE21-S--4G-Router-Vulnerabilities Questo report riguarda il CVE-2025-44039, riservato alla vulnerabilità UART del router, assegnata allo scopritore Yashodhan Vivek Mandke. Scarica il PDF del report in questo repository...

CVE-2026-75371

An integer handling flaw in the cobsdecode function of SpaceDot AcubeSAT OBC software commit eaf90ec allows physically-proximate attackers with UART access to cause a Denial of Service DoS via a crafted input...

CVE-2026-74655

A flaw was found in the Linux kernel. Specifically, a vulnerability exists in the qcom-geni Universal Asynchronous Receiver-Transmitter UART driver's transmit Direct Memory Access DMA buffer flush mechanism. A local user can exploit this by initiating a large write operation immediately followed ...

EUVD-2026-65072

An integer handling flaw in the cobsdecode function of SpaceDot AcubeSAT OBC software commit eaf90ec allows physically-proximate attackers with UART access to cause a Denial of Service DoS via a crafted input...

CVE-2026-75371

An integer handling flaw in the cobsdecode function of SpaceDot AcubeSAT OBC software commit eaf90ec allows physically-proximate attackers with UART access to cause a Denial of Service DoS via a crafted input...

CVE-2026-75371

An integer handling flaw in the cobs_decode function of SpaceDot AcubeSAT OBC software (commit eaf90ec) allows physically-proximate attackers with UART access to trigger a Denial of Service via a crafted input. The CISA SSVC assessment rates exploitation status as proof-of-concept , automatable, ...

CVE-2026-74655

In the Linux kernel, the following vulnerability has been resolved: serial: qcom-geni: fix TX DMA buffer flush When transmit flushing a qcom-geni UART during an ongoing TX DMA, the UART gets stuck infinitely repeating corrupted TX DMA frames. The DMA-mode uartops does not provide a flushbuffer...

CVE-2026-74653

In the Linux kernel, the following vulnerability has been resolved: serial: 8250of: clear stuck empty-FIFO RX-timeout on LPC32xx The NXP LPC32xx UART PORTLPC3220 can latch an RX character-timeout interrupt while the RX FIFO is empty: IIR reports UARTIIRRXTIMEOUT 0x0c but LSR.DR is clear. A...

CVE-2026-74655

CVE-2026-74655 is a Denial of Service flaw in the Linux kernel's qcom-geni UART driver (DMA-mode). The root cause is a missing flush_buffer callback in the DMA-mode uart_ops: when TCOFLUSH is issued during an in-flight TX DMA transfer, the transfer can complete after the serial core resets the tr...

CVE-2026-74655 serial: qcom-geni: fix TX DMA buffer flush

In the Linux kernel, the following vulnerability has been resolved: serial: qcom-geni: fix TX DMA buffer flush When transmit flushing a qcom-geni UART during an ongoing TX DMA, the UART gets stuck infinitely repeating corrupted TX DMA frames. The DMA-mode uartops does not provide a flushbuffer...

CVE-2026-74655 serial: qcom-geni: fix TX DMA buffer flush

In the Linux kernel, the following vulnerability has been resolved: serial: qcom-geni: fix TX DMA buffer flush When transmit flushing a qcom-geni UART during an ongoing TX DMA, the UART gets stuck infinitely repeating corrupted TX DMA frames. The DMA-mode uartops does not provide a flushbuffer...

EUVD-2026-64592

In the Linux kernel, the following vulnerability has been resolved: serial: qcom-geni: fix TX DMA buffer flush When transmit flushing a qcom-geni UART during an ongoing TX DMA, the UART gets stuck infinitely repeating corrupted TX DMA frames. The DMA-mode uartops does not provide a flushbuffer...