umap

umap - USB主机安全评估工具 基于Travis Goodspeed的Facedancer: http://goodfet.sourceforge.net/hardware/facedancer21/ 由NCC Group Plc以开源形式发布 - http://www.nccgroup.com/ 由Andy Davis开发，andy dot davis at nccgroup dot com https://www.github.com/nccgroup/umap 基于AGPL许可发布，详见LICENSE文件 文档...

usbsas

usbsas is a free and open source GPLv3 tool and framework for securely reading untrusted USB mass storage devices. Overview Following the concept of defense in depth and the principle of least privilege, usbsas's goal is to reduce the attack surface of the USB stack. To achieve this, most of the...

AutoGadgetFS

以太坊捐赠：0xA919e40ddB0563918dDc174320D91992e0048477 目录 1. 什么是AutoGadgetFS？ 2. 需求 3. 设置 a. 仅设备测试 b. 最小agfs中间人配置 c. 带调试支持的完整agfs中间人配置 4. USB设备类支持 5. 功能 6. 路线图 7. 安装 a. Linux b. 带WiFi的树莓派Zero 8. AutoGadgetFS教程 9. 截图 10. YouTube播放列表 11. Slack 12. 支持方 13. 请我喝杯咖啡 ☕️ 14. 联系我 15. 想贡献？ 什么是AutoGadgetFS？...

SUSE-SU-2026:22755-1 Security update for the Linux Kernel (Live Patch 0 for SUSE Linux Enterprise 16)

This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.5.1 fixes various security issues The following security issues were fixed: - CVE-2025-71089: iommu: disable SVA when CONFIGX86 is set bsc1256615. - CVE-2026-23393: bridge: cfm: Fix race condition in peermep deletion bsc1260524. -...

EUVD-2011-0657

Malware in sbrugna...

EUVD-2018-8951

Malware in sbrugna...

EUVD-2017-6569

Malware in sbrugna...

EUVD-2015-1460

Malware in sbrugna...

EUVD-2018-17888

Malware in sbrugna...

EUVD-2021-13609

Malware in sbrugna...

EUVD-2011-0656

Malware in sbrugna...

EUVD-2021-28237

Malicious code in bioql PyPI...

CVE-2024-3334 USB Security Feature Bypass in Digital Guardian Windows Agent Prior to version 8.2.0

A security bypass vulnerability exists in the Removable Media Encryption RMEcomponent of Digital Guardian Windows Agents prior to version 8.2.0. This allows a user to circumvent encryption controls by modifying metadata on the USB device thereby compromising the confidentiality of the stored data...

CVE-2024-41721

The CVE-2024-41721 entry concerns bhyve(8) on FreeBSD with XHCI USB emulation. The issue is an insufficient boundary validation in the USB code, causing an out-of-bounds read on the heap that could lead to an arbitrary write and remote code execution. Impact can allow a malicious, privileged gues...

CVE-2024-42236 usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: configfs: Prevent OOB read/write in usbstringcopy Userspace provided string 's' could trivially have the length zero. Left unchecked this will firstly result in an OOB read in the form if str0 - 1 == '\n' followed...

CVE-2024-26748 usb: cdns3: fix memory double free when handle zero packet

In the Linux kernel, the following vulnerability has been resolved: usb: cdns3: fix memory double free when handle zero packet 829 if request-complete 830 spinunlock&privdev-lock; 831 usbgadgetgivebackrequest&privep-endpoint, 832 request; 833 spinlock&privdev-lock; 834 835 836 if request-buf ==...

Unbreakable Enterprise kernel-container security update

5.4.17-2136.328.3.el7 - IB/cm: Cancel mad on the DREQ event when the state is MRAREPRCVD Mark Zhang Orabug: 36143228 - KSPLICE: make sure the stack is zeroed. Gregory Herrero Orabug: 36154654 - sched/fair: Fix tg-load when offlining a CPU Vincent Guittot Orabug: 36185207 - i2c: core: Fix atomic...

Unbreakable Enterprise kernel-container security update

5.4.17-2136.325.5.el7 - perf symbols: Symbol lookup with kcore can fail if multiple segments match stext Krister Johansen Orabug: 35905508 - char: misc: Increase the maximum number of dynamic misc devices to 1048448 D Scott Phillips Orabug: 35905508 - perf/arm-cmn: Fix invalid pointer when access...

GSD-2022-1006217 usb: host: ohci-ppc-of: Fix refcount leak bug

usb: host: ohci-ppc-of: Fix refcount leak bug This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.14.291 by commit...

GSD-2022-1004856 net: usb: ax88179_178a needs FLAG_SEND_ZLP

net: usb: ax88179178a needs FLAGSENDZLP This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.14.290 by commit...