amradio

AM无线电广播入侵系统 一套12通道AM无线电广播系统，使用Red Pitaya FPGA在无人隧道中传输紧急警报。 为什么在隧道中使用AM无线电？ 在施工和维护期间，配备标准AM收音机的车辆会穿越没有移动网络覆盖的隧道。AM信号通过泄漏馈线电缆沿隧道结构传播，接收器廉价、坚固且已存在于每辆车中。该系统在多个频率上广播预录的紧急警报，使得调谐到该频段任何电台的任何AM收音机都能接收到消息。硬件看门狗确保在控制系统故障时切断射频输出——因为在无人隧道中自动重启发射机是不可接受的故障模式。 特性 功能| 状态 ---|--- 12路同步载波频率| ✅ 运行时频率配置（无需硬件变更）| ✅...

Digital Watchdog DW Spectrum Server 4.2.0.32842 - Information Disclosure

Digital Watchdog DW Spectrum Server 4.2.0.32842 allows attackers to access sensitive infromation via a crafted API call. id: CVE-2022-34534 info: name: Digital Watchdog DW Spectrum Server 4.2.0.32842 - Information Disclosure author: ritikchaddha severity: high description: | Digital Watchdog DW...

CVE-2026-66372

CVE-2026-66372 affects the Digital Watchdog VMAX DVR and NVR product lineups. The root cause is a predictable seed in the pseudo-random number generator (PRNG) , resulting in insufficiently random values that make web session tokens predictable and bound their entropy to the seed space. The CVSS ...

CVE-2026-66887

Digital Watchdog VMAX DVR and NVR devices are vulnerable due to missing authorization on state-changing CGI endpoints and the absence of session checks , allowing an attacker on the adjacent network to modify device state without authentication. CISA ICS-CERT rated this CRITICAL (CVSS 3.1: 9.6 / ...

CVE-2026-66887 Missing Authorization in Digital Watchdog VMAX DVR and NVR Product Lineups

The affected products are missing authorization on state-changing CGIs and session checks are not performed...

CVE-2026-68950 Use of Hard-coded Credentials in Digital Watchdog VMAX DVR and NVR Product Lineups

The affected products use hard-coded credentials, which could allow an attacker to run the ftpd service as root, providing remote root file access where FTP is reachable...

CVE-2026-68950

CVE-2026-68950 affects Digital Watchdog VMAX DVR and NVR product lineups. The root cause is hard-coded credentials , which allow an attacker to run the ftpd service as root , granting remote root file access where FTP is reachable. The vulnerability is rated HIGH severity (CVSS 3.1: 8.8, CVSS 4.0...

CVE-2026-68070

Digital Watchdog VMAX DVR and NVR product lineups are affected by a missing authentication flaw for a critical function, allowing an adjacent-network attacker—requiring no privileges—to execute code as root by passing received bytes directly to a system command (command injection). CISA rates it ...

CVE-2026-68070 Missing Authentication for Critical Function in Digital Watchdog VMAX DVR and NVR Product Lineups

The affected products are missing authentication for a critical function, which could allow an attacker to run as root and pass received bytes directly to a system command...

CVE-2026-66890 Use of Hard-coded Credentials in Digital Watchdog VMAX DVR and NVR Product Lineups

The affected products use hard-coded credentials, which could allow remote access to files with root privileges where FTP is reachable...

CVE-2026-66890

Digital Watchdog VMAX DVR and NVR devices are affected by a hard-coded credentials vulnerability that allows an attacker with adjacent-network access to gain remote file access with root privileges when the device's FTP service is reachable. The CISA-assigned CVSS 3.1 score is 9.6 (CRITICAL) , wi...

CVE-2026-68953

CVE-2026-68953 is a missing authentication for critical function vulnerability affecting the Digital Watchdog VMAX DVR and NVR product lineups. Unauthenticated attackers on an adjacent network can send crafted HTTP(S) requests to bypass authentication and disclose sensitive device information, in...

CVE-2026-68953 Missing Authentication for Critical Function in Digital Watchdog VMAX DVR and NVR Product Lineups

The affected products are vulnerable to an authentication bypass that allows unauthenticated remote attackers to disclose sensitive device information, including administrator credentials in plaintext, by sending crafted HTTPS requests...

Astra Linux – Vulnerability in Linux

In the Linux kernel, the following vulnerability has been resolved: Watchdog: sc520wdt: A possible use-after-free occurred in wdtturnoff. The remove method of this module calls deltimer. However, that function does not wait for the timer handler to complete. This means that the timer handler may...

Astra Linux – Vulnerability found in Linux 6.1, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: ARM: 9317/1: kexec: Make smp stop calls asynchronous If a panic is triggered by a hrtimer interrupt, all online CPUs will be notified and set to offline. However, as highlighted in the commit 19dbdcb8039c “smp: Warn on function...

CVE-2026-80998 net: bnxt: ring the doorbell when SW USO exits early

In the Linux kernel, the following vulnerability has been resolved: net: bnxt: ring the doorbell when SW USO exits early When a burst of packets is handed down to the driver, the driver defers the doorbell to the end by setting txr-kickpending = 1. The normal TX path handles this, but the SW USO...

LDAP-Monitoring-Watchdog

LDAP Watchdog 概要 LDAP Watchdogは、LDAPディレクトリ内のレコード変更をリアルタイムで監視するために設計されたツールです。ユーザーやグループエントリに対する変更、追加、削除を追跡し可視化する仕組みを提供し、期待される変更と実際の変更を関連付けて潜在的なセキュリティインシデントを特定できるようにします。このツールはOpenLDAPとLinuxを念頭に置いて作成されましたが、他のLDAP実装でも動作する可能性があります。Pythonで記述されており、ldap3ライブラリのみを必要とします。 このソフトウェアはJoshua Rogersによって作成されました。...

lg-webos-kexec

lg-webos-kexec 通过 kexec 在已 root 的 LG webOS 电视上启动自定义 Linux 内核 —— 在 RAM 中运行，无需绕过安全启动。 状态：进行中。 自定义内核可以被暂存并进入用户空间，但尚不能 作为可用的操作系统持续运行。 目标设备 LG 50UP81009LR（webOS 6.5，Realtek RTD2875，armv7l）。通过 Homebrew Channel 获取 root；原厂签名内核 + webOS 用户空间均未改动。 已验证的事实（实机确认） kexec -l 可以暂存（原厂或源码编译的）内核；/sys/kernel/kexecload...

CVE-2026-74687

A flaw was found in the Linux kernel, specifically within the at91sam9wdt watchdog timer driver. During the driver's teardown process, the at91ping function could rearm the watchdog timer. However, the timerdelete function does not prevent this, resulting in a use-after-free vulnerability where t...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098673)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098673 advisory. A use-after-free vulnerability was found in the cyttsp4core driver in the Linux kernel. This issue occurs in the device cleanup routine due to a possible rearming of...