ch55x_firmware_extractor

Extractor de firmware CH55x El extractor de firmware CH55x se utiliza para leer el firmware de los circuitos integrados CH55x. No hay soporte integrado en los dispositivos para leer directamente el firmware a través del bootloader. Sin embargo, existe una funcionalidad para verificar el contenido...

zyxel-p870hn-hardware-hacking

De un PCB desnudo a root: hardware-hacking de un ZyXEL P-870HN por UART Dos fotos de móvil de una placa de router sin etiquetar → consola serie → bypass de autenticación → shell root — reproduciendo la cadena real, aún sin parchear, CVE-2025-0890 cuenta supervisor oculta + CVE-2024-40891 inyecció...

CP-XR-DE21-S--4G-Router-Vulnerabilities

CP-XR-DE21-S--4G-Router-Vulnerabilities Este informe corresponde al CVE-2025-44039 reservado para la vulnerabilidad UART del router asignada al descubridor Yashodhan Vivek Mandke. Por favor, descarga el informe PDF en este repositorio...

Xiaomi-C200-Firmware-Analysis

The Scope In this repo i will show how i got access to the UART interface even without the common set of exposed pins / test pads, using U-Boot and tricks to gain root on an early stage and eventually dumping the firmware Initial Reconnaissance There are a few key things clear from the PCB Chip...

CVE-2024-36842-Backdooring-Oncord-Android-Sterio-

CVE-2024-36842 Backdooring-Oncord+ Android-Sterio Hemos realizado una evaluación de vulnerabilidad en una de las unidades de infoentretenimiento para automóviles más vendidas del mercado de accesorios. ¡Creando una puerta trasera persistente en la unidad de infoentretenimiento para automóviles...

Mediatrix-CVE-2022-43096

CVE-2022-43096 CVSS v3.1 Vector: AV:P/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N 7,3 Description Mediatrix 4102 before v48.5.2718 allows local attackers to gain root access via the UART port. Vulnerability Type Incorrect Access Control Vendor of Product Mediatrix Affected Product Code Base Mediatrix 4102 -...

psc

PortShellCrypter -- PSC This project - as well as its sister project crash - belongs to my anti-censorship tool-set that allows to setup fully working encrypted shells and TCP/UDP forwarding in hostile censoring environments. It is also useful for forensics to dump data from devices via UART or...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: NFC: pn533 – The UART receive buffer was bound incorrectly. The pn532receivebuf function appends every incoming byte to dev-recvskb, and only resets the buffer after pn532uartrxisframe recognizes a complete frame. A continuous...

ps5-uart

Cabecera de 24 pines cerca de salina EDM-010 root@kitploit: emc header 1 5v 2 5v 3 gnd 4 gnd 5 emc gpio a1. pulling low at emc boot causes emc rom to enter uart shell @ 460800 6 uart rx emc 115200 7 uart tx emc 115200 8 3v3, goes low when emc resets 9 0v? 10 gnd 11 titania uart0 tx efc fw: 460800...

CVE-2025-65731

CVE-2025-65731 CWE-1191: Interfaz de depuración y prueba en chip con control de acceso inadecuado Acceso a shell raíz vía UART en D-Link DIR-605L Hardware F1, Firmware V6.02CN02 Resumen Se ha identificado una vulnerabilidad de hardware crítica en el router D-Link DIR-605L, versión de hardware F1,...

CVE-2025-45512

U-Boot 1.1.3 Exploit PoC Usage Guide Introduction This Proof of Concept PoC was created to verify vulnerabilities in the U-Boot bootloader version 1.1.3 compiled on August 27, 2019. The code implements five different vulnerabilities relevant to the OWASP IoT Security Testing Guide ISTG categories...

Linux Distros Unpatched Vulnerability : CVE-2026-89740

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - serial: imx: serialize imxuartports lifetime imxuartprobe publishes its devm-allocated port in imxuartports before uartaddoneport because console setup uses the...

CVE-2026-89740

In the Linux kernel, the following vulnerability has been resolved: serial: imx: serialize imxuartports lifetime imxuartprobe publishes its devm-allocated port in imxuartports before uartaddoneport because console setup uses the table. The entry is not cleared when adding the port fails or after...

EUVD-2026-76652

In the Linux kernel, the following vulnerability has been resolved: serial: imx: serialize imxuartports lifetime imxuartprobe publishes its devm-allocated port in imxuartports before uartaddoneport because console setup uses the table. The entry is not cleared when adding the port fails or after...

CVE-2026-89740 serial: imx: serialize imx_uart_ports[] lifetime

In the Linux kernel, the following vulnerability has been resolved: serial: imx: serialize imxuartports lifetime imxuartprobe publishes its devm-allocated port in imxuartports before uartaddoneport because console setup uses the table. The entry is not cleared when adding the port fails or after...

CVE-2026-89740 serial: imx: serialize imx_uart_ports[] lifetime

In the Linux kernel, the following vulnerability has been resolved: serial: imx: serialize imxuartports lifetime imxuartprobe publishes its devm-allocated port in imxuartports before uartaddoneport because console setup uses the table. The entry is not cleared when adding the port fails or after...

PT-2026-90456

In the Linux kernel, the following vulnerability has been resolved: serial: imx: serialize imx uart ports lifetime imx uart probe publishes its devm-allocated port in imx uart ports before uart add one port because console setup uses the table. The entry is not cleared when adding the port fails ...

CVE-2025-67399

CVE-2025-67399 Resumen de vulnerabilidad El monitor AQI Smart Home AIRTH utiliza un SoC Bluetooth CB3S basado en el chipset BK7231N con número de versión de software: 2.1.17. Accediendo físicamente al dispositivo e identificando el SoC, se localizaron los pines de depuración/programación UART...

OESA-2026-3701 kernel security update

The Linux Kernel, the operating system core itself. Security Fixes: In the Linux kernel, the following vulnerability has been resolved: staging: greybus: uart: fix tty use after free User space can hold a tty open indefinitely and tty drivers must not release the underlying structures until the...

CVE-2026-80886

In the Linux kernel, the following vulnerability has been resolved: serial: msm: Disable DMA for kernel console UART At the moment, concurrent writes from userspace and the kernel to the console can trigger a race condition that results in an infinite loop of the same messages printed over and ov...