hardware PoCs
subscribe (RSS)Proof-of-concept research filed under the hardware category.
Entries
6
in hardware
CISA KEV
0
exploited in the wild
Ransomware
0
known campaign use
Unpatched
3
no vendor fix
Critical
1
17% of listed
Severity
Exploitation signals
Patch status
Date range
6 result(s)
- CVE-2025-65856 hardware CRITICAL 9.8
Xiongmai XM530 IP Camera ONVIF Authentication Bypass (CVE-2025-65856)
CVE-2025-65856 is a critical authentication bypass in the ONVIF implementation shipped on Xiongmai XM530-based IP cameras. The device's deviceservice and mediaservice ONVIF SOAP endpoints accept and fully process requests such as GetDeviceInformation,…
Unverified 2026-07-06 - CVE-2026-40003 hardware HIGH
ZXIC/Sanechips ZX297520V3 BootROM Arbitrary Memory Write via USB Download Mode (CVE-2026-40003)
The ZX297520V3 BootROM falls back to a USB download mode when it cannot load or verify a valid image from flash, entering a handshake loop that accepts a stage-1 image over USB for device recovery. The BootROM's image-load command does not validate the…
Unverified 2026-07-05 - CVE-2026-32707 hardware HIGH 7.5
PX4-Autopilot tattu_can Driver — CAN Bus Stack Buffer Overflow DoS (CVE-2026-32707)
The tattucan driver in PX4-Autopilot reassembles multi-frame Tattu12SBatteryMessage telemetry from the battery's CAN bus into a fixed 48-byte stack buffer, but performs the per-frame memcpy() without checking the cumulative write offset against the buffer…
Patched 2026-07-05 - CVE-2026-32743 hardware MEDIUM 6.5
PX4 Autopilot MAVLink FTP Stack Buffer Overflow (CVE-2026-32743)
PX4 Autopilot's MAVLink FTP log-handling code (MavlinkLogHandler / MAVLink FTP directory listing path) copies an attacker-supplied directory path into a fixed-size stack buffer without validating its length. Sending a MAVLink FTP request (e.g. via…
Patched 2026-07-05 - CVE-2026-31156 hardware HIGH
OpenPLC_v3 glue_generator Path Traversal — CVE-2026-31156
gluegenerator.cpp is a code-generation utility used in the OpenPLCv3 build pipeline to parse a variable-definition header file and emit corresponding glue-code source. The tool accepts input and output file paths as command-line arguments without validating…
Unverified 2026-07-05 - CVE-2026-56111 hardware HIGH 8.3
Marlin Firmware M421 G-code Handler Out-of-Bounds Write — CVE-2026-56111
Marlin's M421 G-code handler, used to set Mesh Bed Leveling (MBL) grid points, validates only that the supplied I/J grid indices are non-negative and never checks the upper bound against the actual mesh grid size. The underlying setz() function then writes…
Patched 2026-07-05