Published file metadata, source observations, indicators, and research history in one bounded catalog.
2,400+Reachable catalog records
40 / 100Current catalog page
24Maximum records per page
0Samples downloaded by this page
Feed collection status
Sources represented on this page. Publication and observation dates describe the content; successful batch dates describe local collection. A recent batch does not certify complete coverage or current provider availability.
intelligence_src_33e452677074d4c3bdRecent successful batchLast successful batch: Last attempt:
intelligence_src_350d40f2cc69277bcaRecent successful batchLast successful batch: Last attempt:
Stale means older than twice the recorded collection interval, with a minimum of one hour; without an interval, the threshold is 24 hours. Cached content remains available while a feed is stale, paused, or unverified.
2,400+ MATCHING RECORDSMETADATA ONLY / SOURCE ATTRIBUTION PRESERVED
Additional posts in this series: Part 1 Part 2 In my Basebanheimer talk at Hardwear.io, I explained a method for exploiting the Mediatek Baseband Pivot vulnerability CVE-2022-21765 for arbitrary code execution in the Linux kernel on Mediatek’s older (“Helio”) chipsets, which use 32-bit kernels. I also mentioned that using previous ideas, the vulnerability could theoretically be exploited on Mediatek’s newest chipset family (Dimensity, which uses 64-bit kernels) as well. After the conference, with my college Lorant Szabo we have completed this exercise. The vulnerabilities: CVE-2022-21765 and CVE-2022-21769 To recap, the vulnerabilities provide an OOB read/write in the Linux kernel driver that implements the Application (AP) and Cellular Processor (CP) interface, which Mediatek calls the CCCI driver.
First reported Dec 07, 2023 00:00 UTCCatalog metadata updated Oct 14, 2026 08:37 UTCOpen evidence record
There are a series of memory corruption vulnerabilities in Samsung Exynos kernels, due to improper error checks, after dma_buf_vmap calls. These bugs can be abused by various privileged processes to cause NULL pointer accesses and crash the kernel. Vulnerability Details The kernel uses the dma_buf_vmap function if it needs to map a dma buffer into the kernel address space to access its content. This function returns a NULL pointer if it encounters an error during its execution. While some drivers employ a null check on the returned pointer, many call sites incorrectly use the IS_ERR macro which explicitly allows NULL pointers.
First reported Dec 13, 2021 00:00 UTCCatalog metadata updated Oct 14, 2026 08:37 UTCOpen evidence record
Summary This is the second part of a blog series covering my security research into Samsung’s TrustZone. This post is a companion to my talk from Ekoparty 2017, namely the reverse engineering process of T-base. The slides and video of the talk are both available online. In fact, since both of those are available, for this part of the series I didn’t quite write a “storytelling” blog post. Instead, this post only does what the slide/video format does not accomplish: a more accessible enumeration of the most important results (code snippets, declarations of reversed functions/structures). So it’s more like a wiki then a blog post.
First reported Jan 29, 2018 00:00 UTCCatalog metadata updated Oct 14, 2026 08:37 UTCOpen evidence record
An attacker sending a malformed HTTP POST request over LAN to a TP-Link Smart camera device can trigger the vulnerability described here. This report describes a stack buffer overflow, which leads to remote code execution. The vulnerability we are disclosing in this advisory affected a wide range of TP-Link devices, including TAPO Smart Cameras. A TP-Link Security Advisory released in April 2026 contains this vulnerability as CVE-2026-34122. Vulnerability Details There is an unsafe strcpy in the handler function of the set_park_config DS action of the HTTP server in TAPO devices: ds_set_park_config() { iVar1 = get_some_global(); if (iVar1 != 0) { memcpy(&local_48,(void *)(iVar1 + 0x10),0x38); action_mode = jso_obj_get_string_origin(root,"enabled"); if ((action_mode !
First reported Apr 28, 2026 00:00 UTCCatalog metadata updated Oct 14, 2026 08:37 UTCOpen evidence record
Summary The NPU device’s kernel driver implements a set of ioctl handlers one of which uses unsanitized user data as an index into a function pointer array. The user provided values can exceed the boundaries of the legitimate array and might cause user controlled values to be called as function pointers. A malicious actor can use this vulnerability to hijack the control flow of the kernel and call arbitrary functions with controlled parameters. The function pointer callsite is protected by clang’s CFI, which reduces the number of function that can be called through this primitive. The mmap handler is exposed through the /dev/davinci0 character device.
First reported Aug 02, 2021 00:00 UTCCatalog metadata updated Oct 14, 2026 08:37 UTCOpen evidence record
An attacker sending a malformed SIP message over VoLTE to a device with a Mediatek baseband can trigger the vulnerability described here. The impact is intra-structure overflow in the baseband, triggered by malformed SDP data in VoLTE message such as SIP INVITE or MESSAGE request. The vulnerability described in this advisory affected a wide range of Mediatek devices. The January 2024 issue of the Mediatek Security Bulletin contains this vulnerability as CVE-2023-32889. Vulnerability Details When a SIP message contains SDP data, first the cc_call_unpack_sdpmsg routine is invoked to unpack the message bytes into an internal representation (sdp_message_struct). Based on that, later, the session object’s des_audio structure is populated with the AMR/AMR-WB codec info.
First reported Oct 01, 2025 00:00 UTCCatalog metadata updated Oct 14, 2026 08:37 UTCOpen evidence record
Summary In this advisory we are disclosing a heap overflow vulnerability in the MediaTek baseband. The vulnerability can be exploited to gain arbitrary code execution in the context of the baseband runtime. The vulnerability was fixed in 2020 in some models, and received a CVE and more widely deployed fix in 2021. Vulnerability Details When processing the GSM Radio Resource Management Channel Release message, the CSN.1 decoding of the “Cell selection indicator after release of all TCH and SDCCH” information element contains a heap buffer overflow in the function FDD_csrr_decode_redirection_ie. The “Cell selection indicator after release of all TCH and SDCCH” is a type 4 information element with a minimum length of 4 octets.
First reported Mar 10, 2022 00:00 UTCCatalog metadata updated Oct 14, 2026 08:37 UTCOpen evidence record
An attacker sending a malformed HTTP POST request over LAN to a TP-Link Smart camera device can trigger the vulnerability described here. This report describes an authentication bypass vulnerability in the HTTP server implementation. The vulnerability we are disclosing in this advisory affected a wide range of TP-Link devices, including TAPO Smart Cameras. A TP-Link Security Advisory released was promised to be released in April 2026 after several delays, but this did not happen, without the vendor providing any explanation. Vulnerability Details The TAPO architecture can authenticate different account roles, one of them is the hub user. A whitelist introduced in recent builds (2025) limits this role to a few less sensitive actions.
First reported Apr 28, 2026 00:00 UTCCatalog metadata updated Oct 14, 2026 08:37 UTCOpen evidence record
Written in Go, Hugo is an open source static site generator available under the Apache Licence 2.0. Hugo supports TOML, YAML and JSON data file types, Markdown and HTML content files and uses shortcodes to add rich content. Other notable features are taxonomies, multilingual mode, image processing, custom output formats, HTML/CSS/JS minification and support for Sass SCSS workflows. Hugo makes use of a variety of open source projects including: https://github.com/yuin/goldmark https://github.com/alecthomas/chroma https://github.com/muesli/smartcrop https://github.com/spf13/cobra https://github.com/spf13/viper Hugo is ideal for blogs, corporate websites, creative portfolios, online magazines, single page applications or even a website with thousands of pages. Hugo is for people who want to hand code their own website without worrying about setting up complicated runtimes, dependencies and databases.
First reported Apr 11, 2020 11:15 UTCCatalog metadata updated Oct 14, 2026 08:37 UTCOpen evidence record
Summary There is a vulnerability in the Huawei Kirin SoC’s DDR Controller (DMSS) Access Permission system which allows the Linux kernel to bypass memory access restrictions and directly compromise multiple privileged subsystems of the SoC. As demonstrated by CVE-2021-3710, CVE-2021-39991, CVE-2021-37115, and CVE-2021-39986, read and write of critical system memory, including secure memory regions, is possible via those subsystems. Therefore, this vulnerability combined with one of CVE-2021-3710, CVE-2021-39991, CVE-2021-37115, or CVE-2021-39986 results in a fully realized chain of elevation of privileges from a kernel-level write primitive to total control of the secure world (TEE). The vulnerability was fixed in February 2022.
First reported May 18, 2022 00:00 UTCCatalog metadata updated Oct 14, 2026 08:37 UTCOpen evidence record
Summary In a previous advisory we disclosed multiple vulnerabilities within the NPU device’s mmap handler and discussed how it exposes sensitive kernel data. This advisory focuses on the implementation errors in the same handler. The mapping function ignores the requested size parameter and fails to back regions of the mapped virtual memory with an actual mapping. Trying to access these holes or requesting an mmap that is smaller than the memory mapped by the kernel driver results in a kernel crash, most likely caused by invalid page accesses. The mmap handler is exposed through the /dev/davinci0 character device. Due to the applied selinux policy, access to this device is restricted to the hiaiserver system process.
First reported Aug 02, 2021 00:00 UTCCatalog metadata updated Oct 14, 2026 08:37 UTCOpen evidence record
In this advisory we are disclosing a vulnerability in the Huawei log device that allows any unprivileged process to disclose sensitive information from the kernel. Huawei kernels are shipped with custom log devices (/dev/hwlog_dubai, /dev/hwlog_exception and /dev/hwlog_jank) that facilitate better system diagnostics through a series of ioctl calls. One of these diagnostics module is referred to as zrhung, and it provides information and configuration options to monitor hung processes. The implementation of the config set ioctl contains a race condition vulnerability that allows an attacker to free the underlying buffer that holds the configuration data. Consecutive config get ioctl calls use the dangling pointers to read and disclose, potentially sensitive, dynamically allocated kernel data.
First reported Jul 24, 2022 00:00 UTCCatalog metadata updated Oct 14, 2026 08:37 UTCOpen evidence record
Once upon a time, I started at TASZK Security Labs as an intern. My internship project was about hacking hypervisors, and the target we picked for it was Huawei’s HEE (Hypervisor Execution Environment). The research was carried out in late 2020 to early 2021. Although we didn’t publish this work all the way until 2025, it was kept relevant by the fact that the issues remained unaddressed, to the best of our knowledge. If that piqued your interest in the story of the disclosure, please check out our recent Troopers/LeHack talk titled Eastern Promises. In this blogpost, I’ll focus on the technical aspects of the project.
First reported Sep 24, 2025 00:00 UTCCatalog metadata updated Oct 14, 2026 08:37 UTCOpen evidence record
Summary The NPU device’s kernel driver implements a set of ioctl handlers one of which uses unsanitized user data as an offset to retrieve a kernel structure. Fields of the structure are written with user provided values. A malicious actor can use this vulnerability to overwrite kernel memory with controlled data. The mmap handler is exposed through the /dev/davinci0 character device. Due to the applied selinux policy, access to this device is restricted to the hiaiserver system process. Because of these limitations a practical attack would need to target the hiaiserver first. The /dev/davinci0 device exposes a series of ioctl handlers, one of which is devdrv_ioctl_load_stream_buff.
First reported Aug 02, 2021 00:00 UTCCatalog metadata updated Oct 14, 2026 08:37 UTCOpen evidence record
OpenAI, which is trying to develop a substantial cybersecurity business, is in early talks to buy Trail of Bits, a firm that finds and fixes vulnerabilities in open-source software, according to people familiar with the matter. The size of the potential deal couldn’t be learned. OpenAI has sometimes paid in the low hundreds of millions of dollars in the form of stock to acquire small startups, though it sometimes pays less. Discussions are ongoing and the deal could fall apart, said the people.
First reported Oct 13, 2026 22:07 UTCCatalog metadata updated Oct 14, 2026 08:34 UTCOpen evidence record
JPMorgan CFO Jeremy Barnum said on Tuesday that the bank is carefully monitoring its AI exposure as the capital expenditure demands of the AI buildout grow. He noted that lenders generally need to keep tabs on direct and indirect exposure to AI infrastructure spending, as well as other factors ...
First reported Oct 13, 2026 20:38 UTCCatalog metadata updated Oct 14, 2026 08:34 UTCOpen evidence record
JPMorgan said it’s blocking external AI agents like Meta’s Muse and Instinct from accessing client accounts. “We’re not going to allow just any outside agent to come in inside the company because that’s just too risky for clients and for JPMorgan,” said Jamie Dimon, CEO of the bank, on its ...
First reported Oct 13, 2026 20:53 UTCCatalog metadata updated Oct 14, 2026 08:34 UTCOpen evidence record
Apple is launching a tablet-like smart home device as part of a renewed push into the home. The $299 HomeView is a 7-inch screen that sits on kitchen counters or mounts on walls. Apple said the HomeView is designed for watching and listening to content as well as smart home management. It can ...
First reported Oct 13, 2026 16:42 UTCCatalog metadata updated Oct 14, 2026 08:34 UTCOpen evidence record
Character.ai, a five-year-old startup that lets users create and interact with AI-powered personas, on Monday said it filed for Chapter 11 bankruptcy after encountering “significant legal, regulatory, and operational headwinds.” The startup said Disney, which will serve as the initial bidder in ...
First reported Oct 13, 2026 21:04 UTCCatalog metadata updated Oct 14, 2026 08:34 UTCOpen evidence record
Anthropic is in the final stages of talks with NTT Data Group to build its first data center in Japan, Nikkei reported. The facility is expected to have a total power intake capacity of up to 500 megawatts, which would make it one of Japan’s largest data centers. Construction costs for the ...
First reported Oct 13, 2026 09:48 UTCCatalog metadata updated Oct 14, 2026 08:34 UTCOpen evidence record
To understand the decision-making of AI, developers often look at the text that models produce as they reason through problems. But these “chains of thought” are increasingly hard to read, which is prompting AI developers to consider other approaches. One alternative, known as “mechanistic interpretability,” seeks to explain the inner workings of AI models, rather than just relying on their outward behavior. Leading AI companies have formed mechanistic interpretability teams in recent years, and the field has spawned several startups, the most prominent of which is Goodfire AI, whose chief scientist Tom McGrath joined the latest episode of AI Deep Dive. (The full episode is available here.)
First reported Oct 13, 2026 00:43 UTCCatalog metadata updated Oct 14, 2026 08:34 UTCOpen evidence record
Microsoft has discussed making significant cost reductions in its Azure cloud unit, The Information reported late Tuesday. Girish Bablani, president of Microsoft’s Azure cloud unit, recently told senior leaders in his group to think about ideas for reducing costs by at least 20%, according to a ...
First reported Oct 14, 2026 07:52 UTCCatalog metadata updated Oct 14, 2026 08:34 UTCOpen evidence record
Neoclouds and so-called inference providers that help app developers run open source models are trying to differentiate themselves in a very crowded market. For instance, one such neocloud, Prime Intellect, which was valued at $1 billion in an equity financing in July, is buying a startup to help it make open models run faster and more cheaply on its Nvidia servers, compared to its rivals. Prime Intellect, based in San Francisco, is acquiring Moondream, a young developer of open-source models that has fewer than 10 employees, according to Prime Intellect co-founder and CEO Vincent Weisser. (Weisser wouldn’t share the terms of the deal, but Moondream has raised $4.5 million in funding.) San Francisco- and Seattle-based Moondream is best known for an open-source vision-language model for analyzing and understanding images, like identifying boxes in an image of a warehouse or ads in a livestream. But Prime Intellect is largely acquiring the startup for its employees’ skills in writing software to make models run more efficiently, Weisser said.
First reported Oct 13, 2026 14:00 UTCCatalog metadata updated Oct 14, 2026 08:34 UTCOpen evidence record
The trillion-dollar question of the AI boom is whether businesses’ spending on the technology pays off. But measuring that return is often uncertain, confusing or incomplete. That’s because it takes time for AI to show a return on investment that can be demonstrated in a company’s income statement, as we’ve written.A new study from the University of Pennsylvania’s Wharton School and GBK Collective, a consultancy, echoes this idea, showing that most companies are still tracking ROI by measuring whether it makes their workers more efficient rather than whether it is driving more revenue. The study, based on online surveys of 1,400 U.S.-based employees from firms that have at least 1,000 staff and generate more than $50 million annually, showed that 40% of managers measured AI’s impact on their business in terms of “hours saved per employee” and 37% tracked how AI reduced their workers’ errors. Only about 27% of managers said they track the revenue they generate from AI features, apps and tools they provide to their customers.Perhaps worryingly, 44% of managers said that over the next one to two years, AI’s primary role will be to improve productivity and just 8% said it would be to drive new revenue or create new products.
First reported Oct 13, 2026 18:16 UTCCatalog metadata updated Oct 14, 2026 08:34 UTCOpen evidence record
The public shared-host view reaches the newest 2,400 matching records. Narrow the filters or search an exact MD5, SHA-1, or SHA-256 value to reach a specific record.
A filename, label, or report mention alone does not establish maliciousness. Observation dates describe cited sources; collection dates describe this local metadata catalog. No malware samples are stored, fetched, or executed by these pages.