USBArmyKnife

🚀 USB Army Knife v2 is steeping — and its going to be a beast After two years of active development on v1, v2 is planned to turn the USB Army Knife into a full red-team platform in your pocket. A big announcement is coming this autumn but I still wanted to tease:...

USB Spy

USB SPY usb-spy is a USB Mass Storage traffic analyzer built around a WiFi or Ethernet-enabled microcontroller. The board exposes a disk image FAT or any filesystem as a fake USB Mass Storage device to a target system, while the actual storage data is provided by a remote server over WiFi or...

blackleak

BlackLeak Proof of Concept for CVE-2024-30212 Table of Contents 1. About The PoC 2. Getting Started Prerequisites Installation 3. Usage 4. License 5. Contact 6. Acknowledgments About The PoC This is the proof of concept for CVE-2024-30212. For more details check...

cve-2022-31705

CVE-2022-31705 परिचय https://www.vmware.com/content/vmware/vmware-published-sites/us/security/advisories/VMSA-2022-0033.html.html विंडोज वीएमवेयर वर्कस्टेशन 16.2.0 पर परीक्षण करें, गेस्ट ओएस उबंटू सर्वर 22 के साथ कम से कम एक यूएसबी डिवाइस गेस्ट मशीन से जुड़ा होना चाहिए 'qh-field4' को ehci.c कोड म...

CVE-2026-80780

CVE-2026-80780 is an out-of-bounds write in the Linux kernel's HID: pidff driver, specifically in hid_pidff_init_with_quirks(). The function calls list_entry() on hid->inputs without verifying the list is non-empty. When hid->inputs is empty—possible with a USB device whose report descripto...

CVE-2026-80773

In the Linux kernel, the following vulnerability has been resolved: HID: huawei: fix missing hidisusb check tousbinterface can only be used on a hiddevice whose parent is really USB; uhid can create devices that identify as being on BUSUSB, but don't actually have a USB parent. Fix the use of...

usbrip

usbrip heredado de "USB Ripper", no "USB R.I.P." es una herramienta forense simple con interfaz de línea de comandos que le permite rastrear artefactos de dispositivos USB es decir, historial de eventos USB en máquinas Linux. Índice: Descripción Inicio Rápido Demostración Estructura del Registro...

usbrip

usbrip inherited from "USB Ripper", not "USB R.I.P." is a simple forensics tool with command line interface that lets you keep track of USB device artifacts i.e., USB event history on Linux machines. Table of Contents: Description Quick Start Showcase System Log Structure Dependencies deb pip...

Linux Distros Unpatched Vulnerability : CVE-2026-80780

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - HID: pidff: fix OOB write when hid-inputs is empty hidpidffinitwithquirks derives its inputdev from listentryhid-inputs.next, struct hidinput, list without firs...

CVE-2023-40930

Introduction It's an introduction on how to set up CVE-2023-40930 Repetition Enviroment Learn more about this CVE problem in "issue detail.pdf" Set up general You can use rasperry pi zero 2W or any other ARM64ARM32 also arch devices to set up this enviroment,this can be also set up on Android...

rinhit

RinHit RinHit - macOS ecosystem reconnaissance framework. Collects artifacts from the Apple ecosystem to build timelines of network activity, cross-device identity, and physical location correlation. This is the open-source reconnaissance module. The closed-source Swift payload rinhit-agent is...

kernel: USB: serial: io_ti: fix heap overflow in get_manuf_info()

A flaw was found in the Linux kernel's ioti USB serial driver. A malicious USB device, when plugged into a host running this driver, can exploit a heap overflow vulnerability in the getmanufinfo function. This occurs because the driver does not properly validate the size of data read from the...

zephyr_cve-2021-3625

CVE-2021-3625 This repository contains a few example exploits for CVE-2021-3625. All Zephyr-based usb devices up to and including version 2.5.0 suffer from a buffer overflow allowing readout of up to 65kB. Depending on the actual device this may result of leakage of sensitive data like encryption...

vUSBf

vusbf-Framework root@kitploit: / / / / / / / / // | | / / / / / / / / / / / / / /\ / | | |/ / / / / // // / // / / / // // / // / |/ /,/,// //// / / / // / / / / / / / / / / // / / // // / / // ,/ ///// A KVM/QEMU based USB-fuzzing framework. Sergej Schumilo, OpenSource Security Spenneberg...

The vulnerability of the eth_get_drvinfo() function in the drivers/usb/gadget/function/u_ether.c module of the Linux operating system’s USB device driver allows a hacker to cause a service failure.

The vulnerability of the ethgetdrvinfo function in the drivers/usb/gadget/function/uether.c file of the Linux device driver module is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098919)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098919 advisory. In the Linux kernel, the following vulnerability has been resolved: net: usb: net1080: validate packetlen before pad-byte access in rxfixup For an even packetlen,...

CVE-2026-64565

A flaw was found in the Linux kernel's ims-pcu component. A malicious USB device can send an oversized data packet, which is not properly handled. This can lead to a heap buffer overflow, allowing an attacker to manipulate internal pointers. Successful exploitation could result in a control flow...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: media: dvb-usb-v2: gl861: Fix nullptrderef in gl861i2cmasterxfer In gl861i2cmasterxfer, msg is controlled by the user. When msgi.buf is null and msgi.len is zero, previous checks on msgi.buf will still be performed. Malicious dat...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15

A memory corruption flaw was discovered in the Linux kernel’s Human Interface Device HID subsystem, regarding the way a malicious USB device is inserted by a user. This flaw allows a local user to crash the system or potentially escalate their privileges on the system...

Astra Linux – Vulnerability in Linux, Linux 5.10

In the Linux kernel before version 5.13.6, the drivers/usb/host/max3421-hcd.c file allowed physically nearby attackers to cause a denial of service including use-after-free errors and panic conditions by removing a MAX-3421 USB device under certain circumstances...