CVE-2026-108952 RT-Thread through 5.3.0 Memory Corruption via USB CDC VCOM Driver

RT-Thread through 5.3.0 contains a memory corruption vulnerability in the legacy USB CDC virtual COM port driver that aliases rxringbuffer as a Serial V2 rtserialrxfifo in functionenable. A connected USB host configuring the CDC device triggers writes past the ring buffer into struct vcom members...

CVE-2024-31317-PoC

CVE-2024-31317 Proof of Concept This repository contains a collection of Proof of Concept scripts for the CVE-2024-31317 vulnerability in Android systems. Script Description CVE-2024-31317-android11-.sh: Exploit script for Android 11- devices. CVE-2024-31317-android12.sh: Exploit script for Andro...

usb-ninja-detection-poc

How to use 1. Build the solution 2. Run the executable 3. Connect your keyboard/ninja cable 4. Type with your keyboard or start the keystroke injections 5. Kill the executable 6. Under the executable folder, a log file called keystrokeinjectionlogfile.txt is created 7. Event Logs will be logged...

SIEM Dashboard

🛡️ SIEM Dashboard - Streamlit A real-time, lightweight Security Information and Event Management SIEM dashboard built using Python and Streamlit. It visualizes system usage, monitors client logs, and detects potential USB-based threats and intrusion attempts from logs like auth.log, kernel.log,...

poisontap

PoisonTap - siphons cookies, exposes internal router & installs web backdoor on locked computers Created by @SamyKamkar || https://samy.pl When PoisonTap Raspberry Pi Zero & Node.js is plugged into a locked/password protected computer, it: emulates an Ethernet device over USB or Thunderbolt...

vUSBf

vusbf-Framework / / / / / / / / // | | / / / / / / / / / / / / / /\ / | | |/ / / / / // // / // / / / // // / // / |/ /,/,// //// / / / // / / / / / / / / / / // / / // // / / // ,/ ///// A KVM/QEMU based USB-fuzzing framework. Sergej Schumilo, OpenSource Security Spenneberg 2015 Version:...

Xworm RAT

XWorm-RAT V2.1 ⚠️Attention: This tool is made distributed EXCLUSIVELY for security researches. Please, dont use it for illegal activity A famous XWorm RAT for free, all the popular RAT features. Please support this repository with a star⭐️ if you like it The archive is protected, the password is:...

ROS-20261012-73-0028

The vulnerability of the wdmincallback function in the drivers/usb/class/cdc-wdm.c file of the Linux operating system’s USB device driver framework is related to security configuration errors. Exploiting this vulnerability could allow an attacker to cause service failures...

EulerOS 2.0 SP13 : libusbx (EulerOS-SA-2026-4067)

According to the versions of the libusbx packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : libusb before version 1.0.30 contains a NULL pointer dereference vulnerability that allows attackers to crash applications by supplying a malform...

ROS-20261012-73-0225

The vulnerability of the buildi2cfwhdr function in the drivers/usb/serial/ioti.c file of the Linux device driver for USB devices is related to the copying of buffers without checking the size of the input data. Exploiting this vulnerability could allow an attacker to compromise the confidentialit...

Amazon Linux 2023 : bpftool6.18, kernel6.18, kernel6.18-devel (ALAS2023-2026-3187)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-3187 advisory. In the Linux kernel, the following vulnerability has been resolved: netfilter: nftables: add hook transactions for device deletions CVE-2026-63858 In the Linux kernel, the following...

Important: kernel6.18

Issue Overview: In the Linux kernel, the following vulnerability has been resolved: netfilter: nftables: add hook transactions for device deletions CVE-2026-63858 In the Linux kernel, the following vulnerability has been resolved: net: serialize netifrunning check in enqueuetobacklog CVE-2026-724...

Important: kernel

Issue Overview: In the Linux kernel, the following vulnerability has been resolved: netfilter: nftables: add hook transactions for device deletions CVE-2026-63858 In the Linux kernel, the following vulnerability has been resolved: bpf, skmsg: fix verdict skdataready racing with ktls rx...

CVE-2017-14187_PoC_ARMv7

CVE-2017-14187 PoC Proof-of-Concept of Local Privilege Escalation for FortiOS 5.6.0 to 5.6.2, 5.4.0 to 5.4.8, and below 5.2 Triggered by fnsysctl and USB so physical access required. This PoC spawns local root shell by exploiting CVE-2017-14187. Write-up Korean English TL;DR 1. fnsysctl cp...

androidqf

androidqf NOTA: este proyecto actualmente no tiene mantenimiento. Se puede encontrar un fork independiente bajo elProyecto MVT. androidqf Android Quick Forensics es una herramienta portátil para simplificar la adquisición de datos forenses relevantes de dispositivos Android. Descargar androidqf...

rndis-co

RNDIS-CO Summary The RNDIS USB Gadget may be exploited to dump contents of kernel memory space via packet filter update mechanism. Description The RNDISMSGSET usb control transfer request handler - rndissetresponse calls genndissetresp passing a buffer pointer offset by BufOffset + 8. The BufOffs...

kl-security-key

KL Security Key Experimental open-source RP2040 FIDO2/WebAuthn authenticator engineering and interoperability project by Karaaslan Labs. Status: engineering/research project. Not FIDO Alliance certified. Not a commercial high-assurance security token. Evidence boundary: the real-device observatio...

usbsas

usbsas es una herramienta y framework libre y de código abierto GPLv3 para leer de forma segura dispositivos de almacenamiento masivo USB no confiables. Visión general Siguiendo el concepto de defensa en profundidad y el principio de mínimo privilegio, el objetivo de usbsas es reducir la superfic...

chipicopwn

chipicopwn Bootloader exploit for Google Nest Hub 2nd Gen elaine requirements Google Nest Hub 2nd Gen Raspberry Pi Pico Powered USB hub or USB Y cable pico-sdk see Getting Started guide for installation instructions supported version factory firmware 2020/12 - U-Boot 2019.01-gbfc19012ea-dirty Dec...

blackleak

BlackLeak Proof of Concept for CVE-2024-30212 Table of Contents 1. About The PoC 2. Getting Started Prerequisites Installation 3. Usage 4. License 5. Contact 6. Acknowledgments About The PoC This is the proof of concept for CVE-2024-30212. For more details check...