GV

GeezerVison

The World Wide Web, restored to 800 pixels of glory.

Home|About|Gaming cabinet|Archives|How it works|Starter sites

On this site

  • POSTS
  • VULNS
  • GITHUB
  • TWITTER
  • ABOUT
  • Lev Aronsky
  • Idan Strovinsky
  • Tomer Telem
  • CVE-2023-7006
  • CVE-2023-7005
  • CVE-2023-7003
  • CVE-2023-6960
  • CVE-2023-7004
  • CVE-2023-7007

This view

  • Original page
  • New address

GeezerVison is showing alephsecurity.com — Aleph Research

א
0
Aleph
Research
  • POSTS
  • VULNS
  • GITHUB
  • TWITTER
  • ABOUT

Security Research by HCL Software

by HCL Software

POSTS

  • Say Friend and Enter: Digitally lockpicking an advanced smart lock (Part 2: discovered vulnerabilities)
    By Lev Aronsky & Idan Strovinsky & Tomer Telem,
    07-Mar 2024
    ,
    CVE-2023-7006
    CVE-2023-7005
    CVE-2023-7003
    CVE-2023-6960

    CVE-2023-7004
    CVE-2023-7007
    CVE-2023-7009
    CVE-2023-7017

  • Say Friend and Enter: Digitally lockpicking an advanced smart lock (Part 1: functional analysis)
    By Lev Aronsky & Idan Strovinsky & Tomer Telem,
    20-Feb 2024
    ,
    CVE-2023-7006
    CVE-2023-7005
    CVE-2023-7003
    CVE-2023-6960

    CVE-2023-7004
    CVE-2023-7007
    CVE-2023-7009
    CVE-2023-7017

  • Why is it so hot here? Hacking Electra Smart air conditioners for fun and profit
    By Lev Aronsky & Idan Strovinsky,
    19-Jun 2023
    ,
    CVE-2023-24500
    CVE-2023-24501
    CVE-2023-24502
    CVE-2023-24503

    CVE-2023-24504
    CVE-2023-30160
  • AFL++ on Android with QEMU support
    By Itai Greenhut,
    16-Nov 2021
    ,
  • SuDump: Exploiting suid binaries through the kernel
    By Itai Greenhut,
    20-Oct 2021
    ,
  • Aruba in Chains: Chaining Vulnerabilities for Fun and Profit
    By Itai Greenhut & Gal Zror,
    15-Jul 2021
    ,
    CVE-2021-25155
    CVE-2021-25156
    CVE-2021-25157
    CVE-2021-25158

    CVE-2021-25159
    CVE-2021-25160
    CVE-2021-25161
    CVE-2021-25162

  • Revised Homograph Attacks - Part 3
    By Tzachy Horesh,
    28-Feb 2021
    ,
  • Exploiting crash handlers: LPE on Ubuntu
    By Itai Greenhut,
    16-Feb 2021
    ,
    CVE-2021-25682
    CVE-2021-25683
    CVE-2021-25684
  • Don't Ruck Us Again - The Exploit Returns
    By Gal Zror,
    14-Oct 2020
    ,
    CVE-2020-13913
    CVE-2020-13914
    CVE-2020-13915
    CVE-2020-13916

    CVE-2020-13918
    CVE-2020-13917
  • Revised Homograph Attacks - Part 2
    By Tzachy Horesh,
    23-Jul 2020
    ,
    CVE-2020-6401
  • Accelerating iOS on QEMU with hardware virtualization (KVM)
    By Lev Aronsky,
    19-Jul 2020
    ,
  • Tunnelling TCP connections into iOS on QEMU
    By Lev Aronsky,
    29-Mar 2020
    ,
  • Don't Ruck Us Too Hard - Owning Ruckus AP devices
    By Gal Zror,
    14-Jan 2020
    ,
    CVE-2019-19834
    CVE-2019-19835
    CVE-2019-19836
    CVE-2019-19837

    CVE-2019-19838
    CVE-2019-19839
    CVE-2019-19840
    CVE-2019-19841

    CVE-2019-19842
    CVE-2019-19843
  • Revised Homograph Attacks
    By Tzachy Horesh,
    29-Dec 2019
    ,
  • Breaking Algorithms - SMT Solvers for WebApp Security
    By Leo Goldstien,
    02-Sep 2019
    ,
  • Xiaomi Zigbee (3): Live Debugging
    By Lev Aronsky,
    15-Jul 2019
    ,
  • Xiaomi Zigbee (2): Beyond Architecture
    By Lev Aronsky,
    09-Jul 2019
    ,
  • Xiaomi Zigbee (1): Getting to know the hardware
    By Lev Aronsky,
    01-Jul 2019
    ,
  • Running iOS in QEMU to an interactive bash shell (2): research
    By Jonathan Afek,
    25-Jun 2019
    ,
  • Running iOS in QEMU to an interactive bash shell (1): tutorial
    By Jonathan Afek,
    17-Jun 2019
    ,
  • It takes only one StackOverflowException to bring down an Application deployed on IIS
    By Gil Mirmovitch,
    22-Oct 2018
    ,
    CVE-2018-8269
    ALEPH-2018002
    ALEPH-2018003
    ALEPH-2018004

    ALEPH-2018005
    ALEPH-2018006
  • Overcoming (some) Spectre browser mitigations
    By Noam Hadad & Jonathan Afek,
    26-Jun 2018
    ,
  • Exploiting Qualcomm EDL Programmers (5): Breaking Nokia 6's Secure Boot
    By Roee Hay & Noam Hadad,
    22-Jan 2018
    ,
    QPSIIR-909
    ALEPH-2017029
    CVE-2017-13174
    CVE-2017-5947

  • Exploiting Qualcomm EDL Programmers (4): Runtime Debugger
    By Roee Hay & Noam Hadad,
    22-Jan 2018
    ,
    QPSIIR-909
    ALEPH-2017029
    CVE-2017-13174
    CVE-2017-5947

  • Exploiting Qualcomm EDL Programmers (3): Memory-based Attacks & PBL Extraction
    By Roee Hay & Noam Hadad,
    22-Jan 2018
    ,
    QPSIIR-909
    ALEPH-2017029
    CVE-2017-13174
    CVE-2017-5947

  • Exploiting Qualcomm EDL Programmers (2): Storage-based Attacks & Rooting
    By Roee Hay & Noam Hadad,
    22-Jan 2018
    ,
    QPSIIR-909
    ALEPH-2017029
    CVE-2017-13174
    CVE-2017-5947

  • Exploiting Qualcomm EDL Programmers (1): Gaining Access & PBL Internals
    By Roee Hay & Noam Hadad,
    22-Jan 2018
    ,
    QPSIIR-909
    ALEPH-2017029
    CVE-2017-13174
    CVE-2017-5947

  • Untethered initroot (USENIX WOOT '17)
    By Roee Hay,
    30-Aug 2017
    ,
    CVE-2016-10277
    A-62345923
  • Nexus 9 vs. Malicious Headphones, Take Two
    By Roee Hay,
    13-Jun 2017
    ,
    CVE-2017-0648
    CVE-2017-0510
    CVE-2017-0563
    CVE-2017-0582

  • initroot: Hello Moto
    By Roee Hay,
    07-Jun 2017
    ,
    CVE-2016-10277
  • initroot: Bypassing Nexus 6 Secure Boot through Kernel Command-line Injection
    By Roee Hay,
    23-May 2017
    ,
    CVE-2016-10277
    CVE-2017-1000363
  • OnePlus OTAs: Analysis & Exploitation
    By Roee Hay,
    11-May 2017
    ,
    CVE-2017-5948
    CVE-2017-8850
    CVE-2017-8851
    CVE-2016-10370

  • Owning OnePlus 3/3T with a Malicious Charger: The Last Piece of the Puzzle
    By Roee Hay,
    26-Mar 2017
    ,
    CVE-2017-5622
    CVE-2017-5626
    CVE-2017-5624
  • Attacking Nexus 9 with Malicious Headphones
    By Roee Hay,
    08-Mar 2017
    ,
    CVE-2017-0510
    CVE-2017-0563
    CVE-2017-0582
  • Owning a Locked OnePlus 3/3T: Bootloader Vulns
    By Roee Hay,
    08-Feb 2017
    ,
    CVE-2017-5626
    CVE-2017-5624
  • Attacking Nexus 6/6P Custom Boot Modes
    By Roee Hay & Michael Goberman,
    05-Jan 2017
    ,
    CVE-2016-8467
    CVE-2016-6678

VULNS

  • 12/21/23
    CVE-2023-7017
    The firmware of the Kontrol Lux lock can be updated w/o AuthZ/AuthC
  • 12/21/23
    CVE-2023-7009
    The Kontrol Lux lock can be forced to process arbitrary unencrypted messages
  • 12/21/23
    CVE-2023-7007
    A Gateway G2 can be impersonated using its MAC address
  • 12/21/23
    CVE-2023-7004
    The TTLock app does not properly verify that it is connected to a real lock
  • 12/21/23
    CVE-2023-6960
    TTLock virtual keys can be reused even after invalidation
  • 12/21/23
    CVE-2023-7003
    Challenge response can be retried indefinitely upon failure
  • 12/21/23
    CVE-2023-7005
    Protocol downgrade on the TTLock app can expose the unlock key
  • 12/21/23
    CVE-2023-7006
    Challenge response can be retried indefinitely upon failure
  • 03/12/23
    CVE-2023-30160
    Unauthorized attacker can connect to the MQTT server controlling all of Electra's Smart AC units and gain full control of them
  • 03/12/23
    CVE-2023-24504
    Attacker within WiFi range can cause unconfigured units to connect to a malicious update server
  • 03/12/23
    CVE-2023-24503
    Attacker within IR range can install arbitrary firmware over the air
  • 03/12/23
    CVE-2023-24502
    A WiFi hotspot with a known password is always availiable on unconfigured units
  • 03/12/23
    CVE-2023-24501
    Credentials for connecting to the MQTT server hardcoded inside the firmware
  • 03/12/23
    CVE-2023-24500
    Attacker within WiFi range can install arbitrary firmware over the air on unconfigured units
  • 06/03/21
    CVE-2021-33813
    XXE in JDOM library - Java
  • 03/09/21
    CVE-2021-25155
    Authenticated Arbitrary File Write via Web UI (cplogo-install)
  • 03/09/21
    CVE-2021-25162
    Unauthenticated Command Injection via Web UI
  • 03/09/21
    CVE-2021-25161
    Authenticated Reflected Cross-Site Scripting (cp_perview)
  • 03/09/21
    CVE-2021-25160
    Authenticated Arbitrary File Write via Web UI to Specific Backup File
  • 03/09/21
    CVE-2021-25159
    Authenticated Arbitrary File Write via Web UI (cp-upload)
  • 03/09/21
    CVE-2021-25158
    Unauthenticated Arbitrary File Read via Race Condition Vulnerability
  • 03/09/21
    CVE-2021-25157
    Authenticated Arbitrary File Read via Web UI (cplogo-install)
  • 03/09/21
    CVE-2021-25156
    Authenticated Arbitrary Directory Create via Web UI (cplogo-install)
[ALL]
You are visitor 01402503 — GeezerVison does not store the pages you look up.
Best viewed with Netscape Navigator 4.7 or Internet Explorer 6 at 800×600. No cookies required.