某米路由器漏洞挖掘分享
去年年中开始接触IOT设备的漏洞挖掘, 之后有几个聊胜于无的产出, 但没啥变现机会, 大概是去年的国庆前后, 一位学长告诉我某米SRC最近有活动, 可以多看看这家路由器。
Aggregator
AWS Enhances Cloud Security With Better Visibility Features
1 year ago
At this week's re:Inforce 2025 conference, the cloud giant introduced new capabilities to several core security products to provide customers with better visibility and more context on potential threats.
Rob Wright
CVE-2021-47168 | Linux Kernel up to 5.12.8 NFS filelayout_decode_layout memory corruption (Nessus ID 239742)
1 year ago
A vulnerability classified as critical has been found in Linux Kernel up to 5.12.8. This affects the function filelayout_decode_layout of the component NFS. The manipulation leads to memory corruption.
This vulnerability is uniquely identified as CVE-2021-47168. The attack needs to be done within the local network. There is no exploit available.
It is recommended to upgrade the affected component.
vuldb.com
CVE-2021-47184 | Linux Kernel up to 4.14.255/4.19.217/5.4.161/5.10.81/5.15.4 i40e null pointer dereference (Nessus ID 239742)
1 year ago
A vulnerability classified as critical was found in Linux Kernel up to 4.14.255/4.19.217/5.4.161/5.10.81/5.15.4. Affected by this vulnerability is an unknown functionality of the component i40e. The manipulation leads to null pointer dereference.
This vulnerability is known as CVE-2021-47184. The attack can only be done within the local network. There is no exploit available.
It is recommended to upgrade the affected component.
vuldb.com
CVE-2021-47190 | Linux Kernel up to 5.4.161/5.10.81/5.15.4 bpf perf_env__insert_btf memory leak (Nessus ID 239742)
1 year ago
A vulnerability was found in Linux Kernel up to 5.4.161/5.10.81/5.15.4. It has been rated as critical. Affected by this issue is the function perf_env__insert_btf of the component bpf. The manipulation leads to memory leak.
This vulnerability is handled as CVE-2021-47190. The attack can only be done within the local network. There is no exploit available.
It is recommended to upgrade the affected component.
vuldb.com
CVE-2021-47508 | Linux Kernel up to 5.15.7 Direct IO Write brtfs_qgroup_reserve_data allocation of resources (ca06c5cb1b6d/da5e817d9d75 / Nessus ID 239742)
1 year ago
A vulnerability was found in Linux Kernel up to 5.15.7. It has been classified as problematic. Affected is the function brtfs_qgroup_reserve_data of the component Direct IO Write Handler. The manipulation leads to allocation of resources.
This vulnerability is traded as CVE-2021-47508. The attack needs to be approached within the local network. There is no exploit available.
It is recommended to upgrade the affected component.
vuldb.com
CVE-2021-47499 | Linux Kernel up to 5.15.7 accel iio_triggered_buffer_setup memory leak (Nessus ID 239742)
1 year ago
A vulnerability was found in Linux Kernel up to 5.15.7. It has been rated as critical. This issue affects the function iio_triggered_buffer_setup of the component accel. The manipulation leads to memory leak.
The identification of this vulnerability is CVE-2021-47499. The attack needs to be approached within the local network. There is no exploit available.
It is recommended to upgrade the affected component.
vuldb.com
CVE-2022-3111 | Linux Kernel up to 5.16-rc6 wm8350_power.c free_charger_irq null pointer dereference (Nessus ID 239742)
1 year ago
A vulnerability was found in Linux Kernel up to 5.16-rc6. It has been rated as problematic. This issue affects the function free_charger_irq of the file drivers/power/supply/wm8350_power.c. The manipulation leads to null pointer dereference.
The identification of this vulnerability is CVE-2022-3111. Access to the local network is required for this attack to succeed. There is no exploit available.
It is recommended to apply a patch to fix this issue.
vuldb.com
CVE-2021-47572 | Linux Kernel up to 5.4.162/5.10.82/5.15.5 nexthop nh_create_ipv6 null pointer dereference (Nessus ID 239742)
1 year ago
A vulnerability was found in Linux Kernel up to 5.4.162/5.10.82/5.15.5. It has been declared as critical. Affected by this vulnerability is the function nh_create_ipv6 of the component nexthop. The manipulation leads to null pointer dereference.
This vulnerability is known as CVE-2021-47572. Access to the local network is required for this attack. There is no exploit available.
It is recommended to upgrade the affected component.
vuldb.com
CVE-2021-47547 | Linux Kernel up to 5.15.6 tulip out-of-bounds (Nessus ID 239742)
1 year ago
A vulnerability was found in Linux Kernel up to 5.15.6 and classified as problematic. This issue affects some unknown processing of the component tulip. The manipulation leads to out-of-bounds read.
The identification of this vulnerability is CVE-2021-47547. The attack needs to be initiated within the local network. There is no exploit available.
It is recommended to upgrade the affected component.
vuldb.com
CVE-2025-5121 | GitLab Community Edition/Enterprise Edition up to 17.11.3/18.0.1 authorization (Issue 545429 / Nessus ID 240212)
1 year ago
A vulnerability was found in GitLab Community Edition and Enterprise Edition up to 17.11.3/18.0.1. It has been rated as problematic. This issue affects some unknown processing. The manipulation leads to missing authorization.
The identification of this vulnerability is CVE-2025-5121. The attack may be initiated remotely. There is no exploit available.
It is recommended to upgrade the affected component.
vuldb.com
CVE-2025-2443 | GitLab Enterprise Edition up to 17.9.6/17.10.4/17.11.0 Content Security Policy cross site scripting (Issue 525363 / Nessus ID 240213)
1 year ago
A vulnerability has been found in GitLab Enterprise Edition up to 17.9.6/17.10.4/17.11.0 and classified as problematic. This vulnerability affects unknown code of the component Content Security Policy Handler. The manipulation leads to cross site scripting.
This vulnerability was named CVE-2025-2443. The attack can be initiated remotely. There is no exploit available.
It is recommended to upgrade the affected component.
vuldb.com
传苹果考虑收购Perplexity，恶补AI；微信测朋友圈评论表情包回复；Meta推出新智能眼镜，2900元起 | 极客早知道
1 year ago
多多买菜即将上线即时配送服务；稳定币第一股上市两周涨幅超 640%；饿了么前CEO被警方带走，涉嫌职务犯罪。
2025年公安部“净网”“护网”专项工作部署会召开
1 year ago
WEF: Wi-Fi Exploitation Framework
1 year ago
WiFi Exploitation Framework This tool is designed for security researchers and penetration testers to analyze and exploit vulnerabilities in Wi-Fi networks. It provides an intuitive interface with a wide range of automated and manual...
The post WEF: Wi-Fi Exploitation Framework appeared first on Penetration Testing Tools.
ddos
peeko: Browser-based XSS C2 for stealthy internal network exploration via infected browser
1 year ago
peeko is a browser-based XSS-powered C2 (Command and Control) tool that leverages the victim’s browser as a stealthy proxy inside internal networks. Through an injected XSS payload, peeko establishes a WebSocket connection to a central...
The post peeko: Browser-based XSS C2 for stealthy internal network exploration via infected browser appeared first on Penetration Testing Tools.
ddos
【二十四节气】夏至 | 昼长夜短炎光盛，护航安澜伴岁悠
1 year ago
Lynx
1 year ago
You must login to view this content
cohenido
Court Ditches HIPAA Reproductive Health Info Privacy Rule
1 year ago
Ruling: HHS Has No Authority to Distinguish Different Types of PHI for Restrictions
A Texas federal court has vacated 2024 changes to the HIPAA Privacy Rule made by the Biden administration to shield reproductive healthcare information from law enforcement. The court's ruling could potentially make it easier for state investigators to obtain information about abortions and gender treatments.
A Texas federal court has vacated 2024 changes to the HIPAA Privacy Rule made by the Biden administration to shield reproductive healthcare information from law enforcement. The court's ruling could potentially make it easier for state investigators to obtain information about abortions and gender treatments.
Aflac: 'Cybercrime Campaign' Is Targeting Insurance Industry
1 year ago
Experts Suspect Scattered Spider Is Behind Rash of Recent Insurer Breaches
Aflac is the latest insurance company dealing with a cyberattack. The company is investigating a cyber incident that did not involve ransomware encryption of its IT systems, but did potentially compromise data. Experts suspect Scattered Spider is behind the recent rash of insurance incidents.
Aflac is the latest insurance company dealing with a cyberattack. The company is investigating a cyber incident that did not involve ransomware encryption of its IT systems, but did potentially compromise data. Experts suspect Scattered Spider is behind the recent rash of insurance incidents.