{"vulnerability": "cve-2022-2725", "sightings": [{"uuid": "00b63d58-04ce-4aa2-8850-b4be9d22e460", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-27254", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/1706", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2022\n\u63cf\u8ff0\uff1aPoC for vulnerability in Honda's Remote Keyless System(CVE-2022-27254)\nURL\uff1ahttps://github.com/nonamecoder/CVE-2022-27254\n\n\u6807\u7b7e\uff1a#CVE-2022", "creation_timestamp": "2022-03-23T15:39:22.000000Z"}, {"uuid": "81b8eb58-95df-4f7d-af0e-56f094372960", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-27255", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/3051", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2022\n\u63cf\u8ff0\uff1aSimple checker for CVE-2022-27255 using poc_crash and telnet availability\nURL\uff1ahttps://github.com/stryker-project/CVE-2022-27255-checker\n\n\u6807\u7b7e\uff1a#CVE-2022", "creation_timestamp": "2022-08-27T16:05:01.000000Z"}, {"uuid": "1ca3b8c6-4dfd-4f4b-9975-e52614704553", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-27254", "type": "published-proof-of-concept", "source": "https://t.me/technical_private_cat/247", "content": "\u041f\u0440\u0438\u0432\u0435\u0442, \u043c\u043e\u0438 \u041c\u0435\u0440\u0440\u0438 \u044d\u043d \ud83d\udc2d\ud83e\udde9\n\n\u0425\u043e\u0447\u0443 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u0438\u0442\u044c \u0432\u0430\u043c \u0430\u0432\u0442\u043e\u043c\u043e\u0431\u0438\u043b\u044c\u043d\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2022-27254. \ud83d\ude97\n\u041e\u043d\u0430 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0430\u044f \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0434\u0435\u043b\u0438 \u0430\u0432\u0442\u043e\u043c\u043e\u0431\u0438\u043b\u0435\u0439 Honda \u0438 Acura\n\n\u0412 \u043d\u0435\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u043e\u043b\u043d\u044b\u0439 \u0438 \u043d\u0435\u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0437\u0430\u043f\u0438\u0440\u0430\u043d\u0438\u044e, \u043e\u0442\u043f\u0438\u0440\u0430\u043d\u0438\u044e, \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044e \u043e\u043a\u043d\u0430\u043c\u0438, \u043e\u0442\u043a\u0440\u044b\u0442\u0438\u044e \u0431\u0430\u0433\u0430\u0436\u043d\u0438\u043a\u0430 \u0438 \u0437\u0430\u043f\u0443\u0441\u043a\u0443 \u0434\u0432\u0438\u0433\u0430\u0442\u0435\u043b\u044f \u0446\u0435\u043b\u0435\u0432\u043e\u0433\u043e \u0430\u0432\u0442\u043e\u043c\u043e\u0431\u0438\u043b\u044f\n\n\u0410\u0442\u0430\u043a\u0430 \u0441\u043e\u0441\u0442\u043e\u0438\u0442 \u0432 \u0442\u043e\u043c, \u0447\u0442\u043e: \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043f\u0435\u0440\u0435\u0445\u0432\u0430\u0442\u044b\u0432\u0430\u0435\u0442 \u0440\u0430\u0434\u0438\u043e\u0447\u0430\u0441\u0442\u043e\u0442\u043d\u044b\u0435 \u0441\u0438\u0433\u043d\u0430\u043b\u044b \u0441 \u0432\u0430\u0448\u0435\u0433\u043e \u0431\u0440\u0435\u043b\u043e\u043a\u0430, \u0438 \u043f\u043e\u0432\u0442\u043e\u0440\u043d\u043e \u043e\u0442\u043f\u0440\u0430\u0432\u043b\u044f\u0435\u0442 \u0438\u0445, \u0447\u0442\u043e\u0431\u044b \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 \u0441\u0438\u0441\u0442\u0435\u043c\u043e\u0439 \u0431\u0435\u0437 \u043a\u043b\u044e\u0447\u0430 \u0432\u0430\u0448\u0435\u0433\u043e \u0430\u0432\u0442\u043e\u043c\u043e\u0431\u0438\u043b\u044f.\n\n\u041f\u043e\u0434\u0440\u043e\u0431\u043d\u0435\u0435 CVE-2022-27254, \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 \u0430\u0442\u0430\u043a\u0443 MitM \u0438\u043b\u0438, \u0442\u043e\u0447\u043d\u0435\u0435, \u0430\u0442\u0430\u043a\u0443 \u043f\u043e\u0432\u0442\u043e\u0440\u043d\u043e\u0433\u043e \u0432\u043e\u0441\u043f\u0440\u043e\u0438\u0437\u0432\u0435\u0434\u0435\u043d\u0438\u044f, \u043f\u0440\u0438 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043f\u0435\u0440\u0435\u0445\u0432\u0430\u0442\u044b\u0432\u0430\u0435\u0442 \u0420\u0427-\u0441\u0438\u0433\u043d\u0430\u043b\u044b, \u043e\u0431\u044b\u0447\u043d\u043e \u043e\u0442\u043f\u0440\u0430\u0432\u043b\u044f\u0435\u043c\u044b\u0435 \u0441 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0431\u0440\u0435\u043b\u043a\u0430 \u0432 \u0430\u0432\u0442\u043e\u043c\u043e\u0431\u0438\u043b\u044c. \n\u041f\u043e\u0442\u043e\u043c \u043f\u043e\u0432\u0442\u043e\u0440\u043d\u043e \u043e\u0442\u043f\u0440\u0430\u0432\u043b\u044f\u0435\u0442 \u0438\u0445, \u0447\u0442\u043e\u0431\u044b \u0440\u0430\u0437\u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0430\u0432\u0442\u043e\u043c\u043e\u0431\u0438\u043b\u044c \u043f\u043e \u0436\u0435\u043b\u0430\u043d\u0438\u044e.\n\u041f\u0440\u043e\u0441\u0442\u043e\u0433\u043e \u0437\u0430\u0445\u0432\u0430\u0442\u0430 \u0441\u0438\u0433\u043d\u0430\u043b\u0430, \u043e\u0442\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0441 FOB, \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e, \u0447\u0442\u043e\u0431\u044b \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0445\u043e\u0442\u044c \u043a\u0430\u043a\u043e\u0439-\u0442\u043e \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 \u0442\u0440\u0430\u043d\u0441\u043f\u043e\u0440\u0442\u043d\u044b\u043c \u0441\u0440\u0435\u0434\u0441\u0442\u0432\u043e\u043c, \u043b\u043e\u043b\ud83d\ude36\u200d\ud83c\udf2b\ufe0f. \n\u0415\u0441\u043b\u0438 \u0446\u0435\u043b\u044c \u0431\u043b\u043e\u043a\u0438\u0440\u0443\u0435\u0442 \u0441\u0432\u043e\u044e \u043c\u0430\u0448\u0438\u043d\u0443, \u0432\u0441\u0435, \u0447\u0442\u043e \u0442\u0440\u0435\u0431\u0443\u0435\u0442\u0441\u044f, \u2014 \u044d\u0442\u043e \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0435\u0435 \u0441\u0438\u0433\u043d\u0430\u043b \u0438 \u0441\u043e\u0445\u0440\u0430\u043d\u0438\u0442\u044c \u0435\u0433\u043e, \u0447\u0442\u043e\u0431\u044b \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0432\u043e\u0441\u043f\u0440\u043e\u0438\u0437\u0432\u0435\u0441\u0442\u0438 \u0442\u0443 \u0436\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u0443 \u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0443\u044e\u0449\u0443\u044e \u0440\u0435\u0430\u043a\u0446\u0438\u044e \u043c\u0430\u0448\u0438\u043d\u044b.\n\nHonda \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0430 \u043d\u0430\u043c, \u0447\u0442\u043e \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0430\u0432\u0442\u043e\u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u0439 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u0443\u0441\u0442\u0430\u0440\u0435\u0432\u0448\u0438\u0435 \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u0438 \u0434\u043b\u044f \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u0444\u0443\u043d\u043a\u0446\u0438\u0439 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0439 \u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u043a\u0438 \u0438 \u0440\u0430\u0437\u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u043a\u0438, \u0438 \u043f\u043e\u044d\u0442\u043e\u043c\u0443 \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u044b \u0434\u043b\u044f \"\u0440\u0435\u0448\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0445 \u0438 \u043e\u0447\u0435\u043d\u044c \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438 \u043f\u0440\u043e\u0434\u0432\u0438\u043d\u0443\u0442\u044b\u0445 \u0432\u043e\u0440\u043e\u0432\".\n\n\"\u0412 \u043d\u0430\u0441\u0442\u043e\u044f\u0449\u0435\u0435 \u0432\u0440\u0435\u043c\u044f \u043a\u0430\u0436\u0435\u0442\u0441\u044f, \u0447\u0442\u043e \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0442 \u0442\u043e\u043b\u044c\u043a\u043e \u0432 \u043d\u0435\u043f\u043e\u0441\u0440\u0435\u0434\u0441\u0442\u0432\u0435\u043d\u043d\u043e\u0439 \u0431\u043b\u0438\u0437\u043e\u0441\u0442\u0438 \u0438\u043b\u0438 \u0444\u0438\u0437\u0438\u0447\u0435\u0441\u043a\u0438 \u043f\u0440\u0438\u043a\u0440\u0435\u043f\u043b\u0435\u043d\u044b \u043a \u0446\u0435\u043b\u0435\u0432\u043e\u043c\u0443 \u0442\u0440\u0430\u043d\u0441\u043f\u043e\u0440\u0442\u043d\u043e\u043c\u0443 \u0441\u0440\u0435\u0434\u0441\u0442\u0432\u0443, \u0447\u0442\u043e \u0442\u0440\u0435\u0431\u0443\u0435\u0442 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u043f\u0440\u0438\u0435\u043c\u0430 \u0440\u0430\u0434\u0438\u043e\u0441\u0438\u0433\u043d\u0430\u043b\u043e\u0432 \u043e\u0442 \u0431\u0440\u0435\u043b\u043a\u0430 \u0432\u043b\u0430\u0434\u0435\u043b\u044c\u0446\u0430 \u0442\u0440\u0430\u043d\u0441\u043f\u043e\u0440\u0442\u043d\u043e\u0433\u043e \u0441\u0440\u0435\u0434\u0441\u0442\u0432\u0430, \u043a\u043e\u0433\u0434\u0430 \u0442\u0440\u0430\u043d\u0441\u043f\u043e\u0440\u0442\u043d\u043e\u0435 \u0441\u0440\u0435\u0434\u0441\u0442\u0432\u043e \u043e\u0442\u043a\u0440\u044b\u0432\u0430\u0435\u0442\u0441\u044f \u0438 \u0437\u0430\u0432\u043e\u0434\u0438\u0442\u0441\u044f \u043f\u043e\u0431\u043b\u0438\u0437\u043e\u0441\u0442\u0438\"\n\n\u041e\u0431\u0440\u0430\u0442\u0438\u0442\u0435 \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435, \u0447\u0442\u043e \u0432 \u0441\u0432\u043e\u0435\u043c \u0437\u0430\u044f\u0432\u043b\u0435\u043d\u0438\u0438 Honda \u043f\u0440\u044f\u043c\u043e \u0443\u043f\u043e\u043c\u0438\u043d\u0430\u0435\u0442, \u0447\u0442\u043e \u043d\u0435 \u043f\u0440\u043e\u0432\u0435\u0440\u044f\u043b\u0430 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e, \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u0435\u043d\u043d\u0443\u044e \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c\u0438, \u0438 \u043d\u0435 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0434\u0438\u0442\u044c, \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u043b\u0438 \u0430\u0432\u0442\u043e\u043c\u043e\u0431\u0438\u043b\u0438 Honda \u0443\u044f\u0437\u0432\u0438\u043c\u044b \u0434\u043b\u044f \u0442\u0430\u043a\u043e\u0433\u043e \u0442\u0438\u043f\u0430 \u0430\u0442\u0430\u043a.\n\u0418 \u043a\u0430\u043a \u0432\u044b \u043f\u043e\u043d\u0438\u043c\u0430\u0439\u0442\u0435 \u043e\u043d\u0438 \u043d\u0435 \u0441\u0438\u043b\u044c\u043d\u043e \u0433\u043e\u0440\u044f\u0442 \u0436\u0435\u043b\u0430\u043d\u0438\u0435\u043c \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u0442\u044c \u044d\u0442\u043e. \n\n\u0410 \u043d\u0430 \u044d\u0442\u043e\u043c \u0432\u0441\u0435, \u0431\u0443\u0434\u044c\u0442\u0435 \u043e\u0441\u0442\u043e\u0440\u043e\u0436\u043d\u0435\u0435 \u0441 \u0432\u0430\u0448\u0438\u043c\u0438 \u0430\u0432\u0442\u043e. \ud83d\ude98\n\n\u0412\u043e\u0442 \u0432\u0430\u043c \u043f\u043e\u043b\u0435\u0437\u043d\u044b\u0435 \u0441\u0441\u044b\u043b\u043a\u0438 \u043d\u0430 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0435 poc \u0438 \u0441\u0442\u0430\u0442\u044c\u0438 \u043f\u0440\u043e \u044d\u0442\u0443 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c\n\n\u0422\u044b\u043a \n\u0422\u044b\u043a \n\u0422\u044b\u043a \n\u0422\u044b\u043a \n\u0422\u044b\u043a\n\n\u0421\u043f\u0430\u0441\u0438\u0431\u043e \u0437\u0430 \u043f\u0440\u043e\u0447\u0442\u0435\u043d\u0438\u0435\u2764\ufe0f\n\u0418 \u043f\u043e\u043c\u043d\u0438\u0442\u0435: \u041c\u043b\u0430\u0434\u0435\u043d\u0435\u0446 \u043a\u043e\u0442\u043e\u0440\u043e\u0433\u043e \u043a\u0430\u0447\u0430\u0435\u0442 \u0433\u0435\u0440\u0446\u043e\u0433\u0438\u043d\u044f \u043d\u0430 \u0441\u0430\u043c\u043e\u043c \u0434\u0435\u043b\u0435 \u043f\u043e\u0440\u043e\u0441\u0435\u043d\u043e\u043a \ud83d\udc37\n#car  #attacks #cve #exploit #news", "creation_timestamp": "2022-10-16T14:48:43.000000Z"}, {"uuid": "5efefbc5-a3e6-4a85-93ba-cb0cf2c6daf7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-27255", "type": "published-proof-of-concept", "source": "https://t.me/strykerapp/276", "content": "https://github.com/stryker-project/CVE-2022-27255-checker\n\u043c\u043e\u0436\u0435\u0442\u0435 \u0434\u043e\u0431\u0430\u0432\u043b\u044f\u0442\u044c \u0432 \u0441\u0442\u0440\u0430\u0439\u043a\u0435\u0440 \u043f\u043e\u043a\u0430 \u0436\u0434\u0451\u0442\u0435 \u0440\u0435\u043b\u0438\u0437)", "creation_timestamp": "2022-08-28T21:20:58.000000Z"}, {"uuid": "88ff3e90-1313-4afc-8faf-896e0b51e5ed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-27255", "type": "published-proof-of-concept", "source": "https://t.me/strykerapp/270", "content": "CVE-2022-27255 - Realtek eCos SDK SIP ALG buffer overflow\n\n\u0421\u043e\u0432\u0441\u0435\u043c \u043d\u043e\u0432\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u044f\u0432\u0438\u043b\u0430\u0441\u044c \u0432 \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u043e\u043c \u0434\u043e\u0441\u0442\u0443\u043f\u0435 \u0438 \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f RCE \u0434\u043b\u044f \u0431\u043e\u043b\u044c\u0448\u0438\u043d\u0441\u0442\u0432\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 \u043d\u0430 RTL819x. \u041f\u0440\u043e\u0434\u0443\u043a\u0442\u044b \u0431\u043e\u043b\u0435\u0435 50 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u0439 (Asus, A-Link, Beeline, Belkin, Buffalo, D-Link, Edison, Huawei, LG, Logitec, MT-Link, Netgear, Smartlink, UPVEL, ZTE , Zyxel) \u0442\u0430\u043a\u0438\u0435 \u043a\u0430\u043a: \u0440\u043e\u0443\u0442\u0435\u0440\u044b, \u0430\u0439\u043f\u0438 \u043a\u0430\u043c\u0435\u0440\u044b, iot \u0438 \u0434\u0440\u0443\u0433\u0438\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 \u043f\u043e\u0434\u0432\u0435\u0440\u0436\u0435\u043d\u044b \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438.\n\n\u0414\u0430\u0436\u0435 \u0435\u0441\u043b\u0438 \u043d\u0430 \u043d\u0438\u0445 \u043d\u0435 \u0432\u043a\u043b\u044e\u0447\u0435\u043d web \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441. \u041d\u043e \u044d\u0442\u043e \u0432\u044b \u043c\u043e\u0433\u043b\u0438 \u0432\u0438\u0434\u0435\u0442\u044c \u0432 \u0434\u0440\u0443\u0433\u0438\u0445 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0430\u0445.\n\nStryker - \u0434\u0430\u0441\u0442 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u043f\u043e\u0442\u0435\u0441\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0441\u0432\u043e\u0438 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 \u043d\u0430 \u044d\u0442\u0443 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0436\u0435 \u0432 \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0435\u043c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0438 3.0!\n\n\u041d\u0443 \u0430 \u0435\u0441\u043b\u0438 \u043a\u043e\u043c\u0443 \u0442\u043e \u043d\u0430\u0434\u043e \u0440\u0430\u043d\u044c\u0448\u0435, \u044f \u043d\u0430\u043f\u043e\u043c\u043d\u044e \u0447\u0442\u043e \u0432 \u0441\u0442\u0440\u0430\u0439\u043a\u0435\u0440\u0435 \u0432\u044b \u0441\u0430\u043c\u0438 \u043c\u043e\u0436\u0435\u0442\u0435 \u0434\u043e\u0431\u0430\u0432\u0438\u0442\u044c \u043f\u043e\u0447\u0442\u0438 \u043b\u044e\u0431\u043e\u0439 \u0441\u043a\u0430\u043d\u0435\u0440. \u0421\u0441\u044b\u043b\u043a\u0443 \u043d\u0430 \u0444\u0430\u0439\u043b\u0438\u043a \u044f \u043e\u0441\u0442\u0430\u0432\u043b\u044e \u0442\u0443\u0442.", "creation_timestamp": "2022-08-17T11:24:32.000000Z"}, {"uuid": "c416438c-3810-4ee9-938b-d807615f62fe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-27255", "type": "published-proof-of-concept", "source": "https://t.me/codeby_sec/6417", "content": "\u200b\ud83d\udcf6 \u042d\u043a\u0441\u043f\u043b\u043e\u0439\u0442 \u0434\u043b\u044f \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 Realtek SDK \u0432\u044b\u043b\u043e\u0436\u0438\u043b\u0438 \u043d\u0430 GitHub\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0438\u0437 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Faraday Security \u043d\u0430 \u043a\u043e\u043d\u0444\u0435\u0440\u0435\u043d\u0446\u0438\u0438 DEFCON \u0440\u0430\u0441\u0441\u043a\u0430\u0437\u0430\u043b\u0438 \u043e \u0434\u0435\u0442\u0430\u043b\u044f\u0445 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 (CVE-2022-27255) \u0432 SDK \u0434\u043b\u044f \u0447\u0438\u043f\u043e\u0432 Realtek RTL819x.\n\n\u041e\u0448\u0438\u0431\u043a\u0430 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u043d\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0435 \u0447\u0435\u0440\u0435\u0437 \u043e\u0442\u043f\u0440\u0430\u0432\u043a\u0443 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0433\u043e UDP-\u043f\u0430\u043a\u0435\u0442\u0430. \u041e\u043d\u0430 \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0430 9.8 \u0431\u0430\u043b\u043b\u043e\u0432 \u0438\u0437 10 \u043f\u043e \u0448\u043a\u0430\u043b\u0435 CVSS (\u0441\u0442\u0430\u0442\u0443\u0441 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439). \u041f\u0440\u0438\u043c\u0435\u0447\u0430\u0442\u0435\u043b\u044c\u043d\u043e, \u0447\u0442\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0430\u0442\u0430\u043a\u043e\u0432\u0430\u0442\u044c \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430, \u0432 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043e\u0442\u043a\u043b\u044e\u0447\u0451\u043d \u0434\u043e\u0441\u0442\u0443\u043f \u0432 WEB-\u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441 \u0434\u043b\u044f \u0432\u043d\u0435\u0448\u043d\u0438\u0445 \u0441\u0435\u0442\u0435\u0439.\n\nCVE-2022-27255 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 \u043a\u043b\u0430\u0441\u0441\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0443 \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0431\u0443\u0444\u0435\u0440\u0430 \u043d\u0430 \u0443\u0440\u043e\u0432\u043d\u0435 \u0441\u0442\u0435\u043a\u0430. \u0421 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u044d\u0442\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u044b\u0435 SIP-\u043f\u0430\u043a\u0435\u0442\u044b \u0441 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u043c\u0438 SDP-\u0434\u0430\u043d\u043d\u044b\u043c\u0438 \u0432\u043d\u0443\u0442\u0440\u0438 \u0434\u043b\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430 \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438.\n\n\u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 Realtek \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u043b\u0438 \u0431\u0430\u0433 \u0432 \u043c\u0430\u0440\u0442\u0435, \u043e\u0442\u043c\u0435\u0442\u0438\u0432, \u0447\u0442\u043e \u043e\u043d \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0441\u0435\u0440\u0438\u0438 rtl819x-eCos-v0.x \u0438 rtl819x-eCos-v1.x. \u0421\u043e\u0433\u043b\u0430\u0441\u043d\u043e \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u044e, \u0430\u0442\u0430\u043a\u0443 \u043c\u043e\u0436\u043d\u043e \u0441\u043e\u0432\u0435\u0440\u0448\u0438\u0442\u044c \u0438 \u0447\u0435\u0440\u0435\u0437 WAN-\u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441.\n\n\ud83d\uddde \u0411\u043b\u043e\u0433 \u041a\u043e\u0434\u0435\u0431\u0430\u0439\n\n#news #realtek #vulnerability", "creation_timestamp": "2022-08-17T10:17:33.000000Z"}, {"uuid": "97c555b8-f030-41e0-9073-7b090c0a4080", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-27255", "type": "exploited", "source": "https://t.me/antichat/9959", "content": "\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d PoC \u0434\u043b\u044f \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043e \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u043c\u044b \u043f\u0438\u0441\u0430\u043b\u0438 \u043d\u0430 \u043f\u0440\u043e\u0448\u043b\u043e\u0439 \u043d\u0435\u0434\u0435\u043b\u0435, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0435\u0439 \u0441\u0435\u0442\u0435\u0432\u044b\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 \u0441 \u0441\u0438\u0441\u0442\u0435\u043c\u043e\u0439 Realtek RTL819x \u043d\u0430 \u043a\u0440\u0438\u0441\u0442\u0430\u043b\u043b\u0435 (SoC), \u043a\u043e\u043b\u0438\u0447\u0435\u0441\u0442\u0432\u043e \u043a\u043e\u0442\u043e\u0440\u044b\u0445, \u043f\u043e \u043e\u0446\u0435\u043d\u043a\u0430\u043c, \u0438\u0441\u0447\u0438\u0441\u043b\u044f\u0435\u0442\u0441\u044f \u043c\u0438\u043b\u043b\u0438\u043e\u043d\u0430\u043c\u0438. \n\nCVE-2022-27255\u00a0\u2014 \u044d\u0442\u043e \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u0431\u0443\u0444\u0435\u0440\u0430 \u043d\u0430 \u043e\u0441\u043d\u043e\u0432\u0435 \u0441\u0442\u0435\u043a\u0430, \u043a\u043e\u0442\u043e\u0440\u043e\u0435 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043a\u043e\u0434 \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u044b\u0435 SIP-\u043f\u0430\u043a\u0435\u0442\u044b \u0441 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u043c\u0438 \u0434\u0430\u043d\u043d\u044b\u043c\u0438 SDP.\n\nCVE-2022-27255 (\u0441 \u043e\u0446\u0435\u043d\u043a\u043e\u0439 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438 9,8 \u0438\u0437 10) \u043c\u043e\u0436\u0435\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u0434\u043b\u044f \u0432\u0437\u043b\u043e\u043c\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 \u043e\u0442 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0445 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u0439 \u043e\u0440\u0438\u0433\u0438\u043d\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u043e\u0431\u043e\u0440\u0443\u0434\u043e\u0432\u0430\u043d\u0438\u044f (OEM): \u043e\u0442 \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0442\u043e\u0440\u043e\u0432 \u0438 \u0442\u043e\u0447\u0435\u043a \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u0434\u043e \u043f\u043e\u0432\u0442\u043e\u0440\u0438\u0442\u0435\u043b\u0435\u0439 \u0441\u0438\u0433\u043d\u0430\u043b\u043e\u0432. \n\nRealtek \u0438\u0437\u0443\u0447\u0438\u043b\u0430 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0443 \u0435\u0449\u0435 \u0432 \u043c\u0430\u0440\u0442\u0435,\u00a0\u043e\u0442\u043c\u0435\u0442\u0438\u0432, \u0447\u0442\u043e \u043e\u043d\u0430 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0441\u0435\u0440\u0438\u0438 rtl819x-eCos-v0.x \u0438 rtl819x-eCos-v1.x, \u0430 \u0435\u0435 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u0430 \u0447\u0435\u0440\u0435\u0437 \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441 WAN.\n\n\u041e\u0448\u0438\u0431\u043a\u0430 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0441 \u043d\u0443\u043b\u0435\u0432\u044b\u043c \u043a\u043b\u0438\u043a\u043e\u043c: \u0435\u0435 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043d\u0435 \u0442\u0440\u0435\u0431\u0443\u0435\u0442 \u0432\u0437\u0430\u0438\u043c\u043e\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f \u0441 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c.\n\n\u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0435\u043c\u0443 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u0434\u043b\u044f \u0443\u0441\u043f\u0435\u0448\u043d\u043e\u0439 \u0430\u0442\u0430\u043a\u0438 \u043f\u043e\u0442\u0440\u0435\u0431\u0443\u0435\u0442\u0441\u044f \u043b\u0438\u0448\u044c \u0437\u043d\u0430\u0442\u044c \u0432\u043d\u0435\u0448\u043d\u0438\u0439 IP-\u0430\u0434\u0440\u0435\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0433\u043e \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430.\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 Faraday Security \u0438\u0437 \u0410\u0440\u0433\u0435\u043d\u0442\u0438\u043d\u044b (\u041e\u043a\u0442\u0430\u0432\u0438\u043e \u0414\u0436\u0430\u043d\u0430\u0442\u0438\u0435\u043c\u043f\u043e, \u041e\u043a\u0442\u0430\u0432\u0438\u043e \u0413\u0430\u043b\u043b\u0430\u043d\u0434, \u042d\u043c\u0438\u043b\u0438\u043e \u041a\u043e\u0443\u0442\u043e, \u0425\u0430\u0432\u044c\u0435\u0440 \u0410\u0433\u0438\u043d\u0430\u0433\u0430) \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 SDK Realtek \u0434\u043b\u044f \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b eCos \u0441 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u043c \u0438\u0441\u0445\u043e\u0434\u043d\u044b\u043c \u043a\u043e\u0434\u043e\u043c \u0438\u00a0\u0440\u0430\u0441\u043a\u0440\u044b\u043b\u0438 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438\u00a0\u043d\u0430 \u043f\u0440\u043e\u0448\u043b\u043e\u0439 \u043d\u0435\u0434\u0435\u043b\u0435 \u043d\u0430 DEFCON.\n\n\u041e\u043d\u0438 \u0436\u0435 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043b\u0438 \u0438 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b\u0438\u00a0PoC \u0434\u043b\u044f CVE-2022-27255, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0440\u0430\u0431\u043e\u0442\u0430\u0435\u0442 \u043d\u0430 \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0442\u043e\u0440\u0430\u0445 Nexxt Nebula 300 Plus, \u0430 \u0442\u0430\u043a\u0436\u0435 \u043f\u043e\u0434\u0435\u043b\u0438\u043b\u0438\u0441\u044c \u0434\u0435\u043c\u043e\u043d\u0441\u0442\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u043c \u0432\u0438\u0434\u0435\u043e.\n\n\u0420\u0435\u0441\u0435\u0440\u0447\u0435\u0440\u044b \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u044e\u0442, \u0447\u0442\u043e \u0435\u0441\u043b\u0438 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442 \u0434\u043b\u044f CVE-2022-27255 \u043f\u0440\u0435\u0432\u0440\u0430\u0442\u0438\u0442\u0441\u044f \u0432 \u0447\u0435\u0440\u0432\u044f, \u043e\u043d \u043c\u043e\u0436\u0435\u0442 \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0438\u0442\u044c\u0441\u044f \u043f\u043e \u0418\u043d\u0442\u0435\u0440\u043d\u0435\u0442\u0443 \u0437\u0430 \u0441\u0447\u0438\u0442\u0430\u043d\u043d\u044b\u0435 \u043c\u0438\u043d\u0443\u0442\u044b.\n\n\u041d\u0435\u0441\u043c\u043e\u0442\u0440\u044f \u043d\u0430 \u0442\u043e, \u0447\u0442\u043e \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e \u0441 \u043c\u0430\u0440\u0442\u0430, \u0447\u0442\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432\u0441\u0435 \u0435\u0449\u0435 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u043c\u0438\u043b\u043b\u0438\u043e\u043d\u044b \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u0431\u0443\u0434\u0435\u0442 \u0434\u043e\u0441\u0442\u0430\u0432\u043b\u0435\u043d\u043e \u0435\u0449\u0435 \u043d\u0435 \u0441\u043a\u043e\u0440\u043e.\n\n\u041d\u0435\u044f\u0441\u043d\u043e, \u0441\u043a\u043e\u043b\u044c\u043a\u043e \u043a\u043e\u043d\u043a\u0440\u0435\u0442\u043d\u043e \u0441\u0435\u0442\u0435\u0432\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u0447\u0438\u043f\u044b RTL819x, \u043d\u043e \u0432\u0435\u0440\u0441\u0438\u044f SoC RTL819xD \u043f\u0440\u0438\u0441\u0443\u0442\u0441\u0442\u0432\u043e\u0432\u0430\u043b\u0430 \u0432 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u0445 \u0431\u043e\u043b\u0435\u0435 \u0447\u0435\u043c 60 \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a\u043e\u0432.\u00a0\u0421\u0440\u0435\u0434\u0438 \u043d\u0438\u0445 ASUSTek, Belkin, Buffalo, D-Link, Edimax, TRENDnet \u0438 Zyxel.\n\n\u041f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0441\u043b\u0435\u0434\u0443\u0435\u0442 \u043f\u0440\u043e\u0432\u0435\u0440\u0438\u0442\u044c, \u043d\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e \u043b\u0438 \u0438\u0445 \u0441\u0435\u0442\u0435\u0432\u043e\u0435 \u043e\u0431\u043e\u0440\u0443\u0434\u043e\u0432\u0430\u043d\u0438\u0435, \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0438 \u043e\u0442 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044f, \u0432\u044b\u043f\u0443\u0449\u0435\u043d\u043d\u043e\u0435 \u043f\u043e\u0441\u043b\u0435 \u043c\u0430\u0440\u0442\u0430, \u0435\u0441\u043b\u0438 \u043e\u043d\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e.\n\n\u041f\u043e\u043c\u0438\u043c\u043e \u044d\u0442\u043e\u0433\u043e, \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u044f\u043c \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043d\u0435\u0436\u0435\u043b\u0430\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u0437\u0430\u043f\u0440\u043e\u0441\u044b UDP.\n\n\u041c\u0430\u0442\u0435\u0440\u0438\u0430\u043b\u044b \u043f\u0440\u0435\u0437\u0435\u043d\u0442\u0430\u0446\u0438\u0438 \u0441 DEFCON \u0432\u043c\u0435\u0441\u0442\u0435 \u0441 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430\u043c\u0438 \u0438 \u0441\u043a\u0440\u0438\u043f\u0442\u043e\u043c \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u044f CVE-2022-27255\u00a0\u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b \u0432 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0438 GitHub.", "creation_timestamp": "2022-08-17T11:01:10.000000Z"}, {"uuid": "55e3a6d8-7498-472d-92c1-d726ec363e78", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-27254", "type": "seen", "source": "https://t.me/ics_cert/563", "content": "\u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631\u06cc \u0628\u0647 \u0647\u06a9\u0631\u0647\u0627 \u0627\u062c\u0627\u0632\u0647 \u0645\u06cc \u062f\u0647\u062f \u062a\u0627 \u0642\u0641\u0644 \u062e\u0648\u062f\u0631\u0648\u0647\u0627\u06cc \u0647\u0648\u0646\u062f\u0627 \u0631\u0627 \u0627\u0632 \u0631\u0627\u0647 \u062f\u0648\u0631 \u0628\u0627\u0632 \u06a9\u0631\u062f\u0647 \u0648 \u0631\u0627\u0647 \u0627\u0646\u062f\u0627\u0632\u06cc \u06a9\u0646\u0646\u062f. \n\n\u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0648\u0631\u0648\u062f \u0628\u062f\u0648\u0646 \u06a9\u0644\u06cc\u062f \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u062f \u0628\u0647\u200c\u0637\u0648\u0631 \u0628\u0627\u0644\u0642\u0648\u0647 \u0628\u0631 \u062f\u06cc\u06af\u0631 \u062e\u0648\u062f\u0631\u0648\u0647\u0627 \u0648 \u0645\u062f\u0644\u200c\u0647\u0627\u06cc \u063a\u06cc\u0631\u0647\u0648\u0646\u062f\u0627 \u062a\u0623\u062b\u06cc\u0631 \u0628\u06af\u0630\u0627\u0631\u062f\n\n\u0645\u062d\u0642\u0642\u0627\u0646 \u0627\u062e\u06cc\u0631\u0627\u064b \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0631\u0627 \u06a9\u0634\u0641 \u06a9\u0631\u062f\u0647\u200c\u0627\u0646\u062f \u06a9\u0647 \u0628\u0647 \u0647\u06a9\u0631\u0647\u0627 \u0627\u062c\u0627\u0632\u0647 \u0645\u06cc\u200c\u062f\u0647\u062f \u0686\u0646\u062f\u06cc\u0646 \u0645\u062f\u0644 \u062e\u0648\u062f\u0631\u0648\u06cc \u0647\u0648\u0646\u062f\u0627 \u0631\u0627 \u0627\u0632 \u0631\u0627\u0647 \u062f\u0648\u0631 \u0628\u0627\u0632 \u06a9\u0631\u062f\u0647 \u0648 \u0631\u0627\u0647\u200c\u0627\u0646\u062f\u0627\u0632\u06cc \u06a9\u0646\u0646\u062f.\n 10 \u0645\u062f\u0644 \u0627\u0632 \u0645\u062d\u0628\u0648\u0628\u200c\u062a\u0631\u06cc\u0646 \u0645\u062f\u0644\u200c\u0647\u0627\u06cc \u0647\u0648\u0646\u062f\u0627 \u0631\u0627 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631 \u0645\u0639\u0631\u0641\u06cc \u0645\u06cc\u200c\u06a9\u0646\u062f. \u0628\u062f\u062a\u0631 \u0627\u0632 \u0647\u0645\u0647\u060c \u06cc\u0627\u0641\u062a\u0647\u200c\u0647\u0627\u06cc \u0641\u0639\u0644\u06cc \u0645\u062d\u0642\u0642\u0627\u0646 \u0631\u0627 \u0628\u0647 \u0627\u06cc\u0646 \u0628\u0627\u0648\u0631 \u0645\u06cc\u200c\u0631\u0633\u0627\u0646\u062f \u06a9\u0647 \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u062f \u062f\u0631 \u062a\u0645\u0627\u0645 \u062e\u0648\u062f\u0631\u0648\u0647\u0627\u06cc \u0647\u0648\u0646\u062f\u0627 \u0627\u0632 \u0633\u0627\u0644 2012 \u062a\u0627 2022 \u0648\u062c\u0648\u062f \u062f\u0627\u0634\u062a\u0647 \u0628\u0627\u0634\u062f.\n\u0627\u06cc\u0646 \u0646\u0642\u0635 \u0627\u0645\u0646\u06cc\u062a\u06cc \u06a9\u0647 \u062a\u0648\u0633\u0637 \u0645\u062d\u0642\u0642\u0627\u0646 RollingPWN \u0646\u0627\u0645\u06cc\u062f\u0647 \u0645\u06cc \u0634\u0648\u062f\u060c \u0627\u0632 \u06cc\u06a9\u06cc \u0627\u0632 \u0627\u062c\u0632\u0627\u06cc \u0633\u06cc\u0633\u062a\u0645 \u0648\u0631\u0648\u062f \u0628\u062f\u0648\u0646 \u06a9\u0644\u06cc\u062f \u0647\u0648\u0646\u062f\u0627 \u0633\u0648\u0621 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0645\u06cc \u06a9\u0646\u062f. \u0633\u06cc\u0633\u062a\u0645 \u0648\u0631\u0648\u062f\u06cc \u0641\u0639\u0644\u06cc \u0645\u062a\u06a9\u06cc \u0628\u0647 \u06cc\u06a9 \u0645\u062f\u0644 \u06a9\u062f \u0645\u062a\u062d\u0631\u06a9 \u0627\u0633\u062a \u06a9\u0647 \u0647\u0631 \u0628\u0627\u0631 \u06a9\u0647 \u0635\u0627\u062d\u0628\u0627\u0646 \u062f\u06a9\u0645\u0647 fob \u0631\u0627 \u0641\u0634\u0627\u0631 \u0645\u06cc\u200c\u062f\u0647\u0646\u062f\u060c \u06cc\u06a9 \u06a9\u062f \u0648\u0631\u0648\u062f\u06cc \u062c\u062f\u06cc\u062f \u0627\u06cc\u062c\u0627\u062f \u0645\u06cc\u200c\u06a9\u0646\u062f. \u067e\u0633 \u0627\u0632 \u0635\u062f\u0648\u0631\u060c \u0645\u0648\u0627\u0631\u062f \u0642\u0628\u0644\u06cc \u0628\u0627\u06cc\u062f \u063a\u06cc\u0631\u0642\u0627\u0628\u0644 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0634\u0648\u0646\u062f \u062a\u0627 \u0627\u0632 \u062d\u0645\u0644\u0627\u062a \u0645\u062c\u062f\u062f \u062c\u0644\u0648\u06af\u06cc\u0631\u06cc \u0634\u0648\u062f. \u062f\u0631 \u0639\u0648\u0636\u060c \u0645\u062d\u0642\u0642\u0627\u0646 Kevin26000 \u0648 Wesley Li \u06a9\u0634\u0641 \u06a9\u0631\u062f\u0646\u062f \u06a9\u0647 \u06a9\u062f\u0647\u0627\u06cc \u0642\u062f\u06cc\u0645\u06cc \u0631\u0627 \u0645\u06cc \u062a\u0648\u0627\u0646 \u0628\u0647 \u0639\u0642\u0628 \u0628\u0631\u06af\u0631\u062f\u0627\u0646\u062f \u0648 \u0628\u0631\u0627\u06cc \u062f\u0633\u062a\u0631\u0633\u06cc \u0646\u0627\u062e\u0648\u0627\u0633\u062a\u0647 \u0628\u0647 \u0648\u0633\u06cc\u0644\u0647 \u0646\u0642\u0644\u06cc\u0647 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u06a9\u0631\u062f.\n\u0645\u062d\u0642\u0642\u0627\u0646 \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0631\u0627 \u062f\u0631 \u0686\u0646\u062f\u06cc\u0646 \u0645\u062f\u0644 \u0647\u0648\u0646\u062f\u0627 \u0627\u0632 \u0633\u0627\u0644 2012 \u062a\u0627 2022 \u0622\u0632\u0645\u0627\u06cc\u0634 \u06a9\u0631\u062f\u0646\u062f. \u0641\u0647\u0631\u0633\u062a \u062e\u0648\u062f\u0631\u0648\u0647\u0627\u06cc \u0622\u0632\u0645\u0627\u06cc\u0634\u06cc \u062a\u062d\u062a \u062a\u0623\u062b\u06cc\u0631 \u0634\u0627\u0645\u0644 \u0645\u0648\u0627\u0631\u062f \u0632\u06cc\u0631 \u0627\u0633\u062a:\n  \u0647\u0648\u0646\u062f\u0627 \u0633\u06cc\u0648\u06cc\u06a9 2012\n  \u0647\u0648\u0646\u062f\u0627 XR-V 2018\n  \u0647\u0648\u0646\u062f\u0627 CR-V 2020\n  \u0647\u0648\u0646\u062f\u0627 \u0622\u06a9\u0648\u0631\u062f 2020\n  \u0647\u0648\u0646\u062f\u0627 \u0627\u0648\u062f\u06cc\u0633\u0647 2020\n  \u0647\u0648\u0646\u062f\u0627 \u0627\u06cc\u0646\u0633\u067e\u0627\u06cc\u0631 2021\n  \u0647\u0648\u0646\u062f\u0627 \u0641\u06cc\u062a 2022\n  \u0647\u0648\u0646\u062f\u0627 \u0633\u06cc\u0648\u06cc\u06a9 2022\n  \u0647\u0648\u0646\u062f\u0627 VE-1 2022\n  \u0647\u0648\u0646\u062f\u0627 \u0628\u0631\u06cc\u0632 2022\n\u0628\u0631\u0627\u0633\u0627\u0633 \u0641\u0647\u0631\u0633\u062a \u0648 \u0622\u0632\u0645\u0627\u06cc\u0634\u200c\u0647\u0627\u06cc \u0645\u0648\u0641\u0642\u06cc\u062a\u200c\u0622\u0645\u06cc\u0632 \u0627\u06cc\u0646 \u0627\u06a9\u0633\u067e\u0644\u0648\u06cc\u062a\u060c Kevin26000 \u0648 Li \u0642\u0648\u06cc\u0627\u064b \u0645\u0639\u062a\u0642\u062f\u0646\u062f \u06a9\u0647 \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u062f \u0628\u0631 \u0647\u0645\u0647 \u062e\u0648\u062f\u0631\u0648\u0647\u0627\u06cc \u0647\u0648\u0646\u062f\u0627 \u0648 \u0646\u0647 \u0641\u0642\u0637 \u062f\u0647 \u0627\u0648\u0644\u06cc\u0647 \u0641\u0647\u0631\u0633\u062a \u0634\u062f\u0647 \u062f\u0631 \u0628\u0627\u0644\u0627 \u062a\u0623\u062b\u06cc\u0631 \u0628\u06af\u0630\u0627\u0631\u062f.\n\n\u0627\u0631\u0627\u0626\u0647 \u0631\u0627\u0647 \u062d\u0644\u06cc \u0628\u0631\u0627\u06cc \u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631\u06cc \u0645\u0645\u06a9\u0646 \u0627\u0633\u062a \u0628\u0647 \u0627\u0646\u062f\u0627\u0632\u0647 \u062e\u0648\u062f \u0627\u06a9\u0633\u067e\u0644\u0648\u06cc\u062a \u067e\u06cc\u0686\u06cc\u062f\u0647 \u0628\u0627\u0634\u062f. \u0647\u0648\u0646\u062f\u0627 \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u062f \u0627\u06cc\u0646 \u0646\u0642\u0635 \u0631\u0627 \u0627\u0632 \u0637\u0631\u06cc\u0642 \u0628\u0647\u200c\u0631\u0648\u0632\u0631\u0633\u0627\u0646\u06cc \u0645\u06cc\u0627\u0646\u200c\u0627\u0641\u0632\u0627\u0631 (OTA) \u0628\u0631\u0637\u0631\u0641 \u06a9\u0646\u062f\u060c \u0627\u0645\u0627 \u0628\u0633\u06cc\u0627\u0631\u06cc \u0627\u0632 \u062e\u0648\u062f\u0631\u0648\u0647\u0627\u06cc \u0622\u0633\u06cc\u0628\u200c\u062f\u06cc\u062f\u0647 \u0627\u0632 OTA \u067e\u0634\u062a\u06cc\u0628\u0627\u0646\u06cc \u0646\u0645\u06cc\u200c\u06a9\u0646\u0646\u062f. \u062a\u0639\u062f\u0627\u062f \u0632\u06cc\u0627\u062f \u0648\u0633\u0627\u06cc\u0644 \u0646\u0642\u0644\u06cc\u0647 \u0627\u062d\u062a\u0645\u0627\u0644\u06cc \u0622\u0633\u06cc\u0628 \u062f\u06cc\u062f\u0647 \u0633\u0646\u0627\u0631\u06cc\u0648\u06cc \u0641\u0631\u0627\u062e\u0648\u0627\u0646 \u0631\u0627 \u0628\u0639\u06cc\u062f \u0645\u06cc \u0633\u0627\u0632\u062f.\n\n\u062f\u0631 \u062d\u0627\u0644 \u062d\u0627\u0636\u0631\u060c \u062a\u062d\u0642\u06cc\u0642\u0627\u062a \u0628\u0631\u0627\u06cc \u062a\u0639\u06cc\u06cc\u0646 \u0645\u06cc\u0632\u0627\u0646 \u06af\u0633\u062a\u0631\u062f\u06af\u06cc \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0627\u062f\u0627\u0645\u0647 \u062f\u0627\u0631\u062f. \u0628\u0631 \u0627\u0633\u0627\u0633 \u0645\u0627\u0647\u06cc\u062a \u062d\u0645\u0644\u0647\u060c Kevin26000 \u0648 Li \u0628\u0647 \u0634\u062f\u062a \u0645\u0634\u06a9\u0648\u06a9 \u0647\u0633\u062a\u0646\u062f \u06a9\u0647 \u0627\u06cc\u0646 \u0645\u0648\u0636\u0648\u0639 \u0645\u0645\u06a9\u0646 \u0627\u0633\u062a \u0628\u0631 \u0633\u0627\u06cc\u0631 \u062e\u0648\u062f\u0631\u0648\u0633\u0627\u0632\u0627\u0646 \u0646\u06cc\u0632 \u062a\u0623\u062b\u06cc\u0631 \u0628\u06af\u0630\u0627\u0631\u062f.\n\n\u0627\u06cc\u0646 \u06cc\u0627\u0641\u062a\u0647 \u062a\u0646\u0647\u0627 \u06cc\u06a9\u06cc \u062f\u06cc\u06af\u0631 \u0627\u0632 \u06cc\u06a9 \u0633\u0631\u06cc \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc\u200c\u0647\u0627\u06cc \u062f\u0633\u062a\u0631\u0633\u06cc \u0627\u0633\u062a \u06a9\u0647 \u062f\u0631 \u0633\u0631\u06cc \u062e\u0648\u062f\u0631\u0648\u0647\u0627\u06cc \u0647\u0648\u0646\u062f\u0627 \u062f\u0631 \u0633\u0627\u0644 \u062c\u0627\u0631\u06cc \u06a9\u0634\u0641 \u0634\u062f. \u062f\u0631 \u0645\u0627\u0647 \u0645\u0627\u0631\u0633\u060c \u0645\u062d\u0642\u0642\u0627\u0646 \u06cc\u06a9 \u0627\u06a9\u0633\u067e\u0644\u0648\u06cc\u062a \u0627\u0646\u0633\u0627\u0646 \u062f\u0631 \u0648\u0633\u0637 ( CVE-2022-27254 ) \u0631\u0627 \u0634\u0646\u0627\u0633\u0627\u06cc\u06cc \u06a9\u0631\u062f\u0646\u062f \u06a9\u0647 \u062f\u0631 \u0622\u0646 \u0633\u06cc\u06af\u0646\u0627\u0644\u200c\u0647\u0627\u06cc RF \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u0646\u062f \u0631\u0647\u06af\u06cc\u0631\u06cc \u0648 \u0628\u0631\u0627\u06cc \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0628\u0639\u062f\u06cc \u062f\u0633\u062a\u06a9\u0627\u0631\u06cc \u0634\u0648\u0646\u062f. Kevin26000 \u0647\u0645\u0686\u0646\u06cc\u0646 \u062f\u0631 \u0698\u0627\u0646\u0648\u06cc\u0647 2022 \u06cc\u06a9 \u062d\u0645\u0644\u0647 \u062a\u06a9\u0631\u0627\u0631\u06cc \u0645\u0634\u0627\u0628\u0647 ( CVE-2021-46145 ) \u0631\u0627 \u06af\u0632\u0627\u0631\u0634 \u06a9\u0631\u062f\u0647 \u0628\u0648\u062f.\n\n\ud83d\udc6e\u200d\u2640\ufe0f\ud83d\udc6e\u200d\u2640\ufe0f \u0628\u0627\u0632\u0646\u0634\u0631 \u0645\u0637\u0627\u0644\u0628 \u0627\u06cc\u0646 \u06a9\u0627\u0646\u0627\u0644 \u0635\u0631\u0641\u0627 \u0628\u0627 \u0630\u06a9\u0631 \u0645\u0646\u0628\u0639 \u0648 \u0622\u062f\u0631\u0633 \u06a9\u0627\u0645\u0644 \u06a9\u0627\u0646\u0627\u0644 \u0645\u062c\u0627\u0632 \u0645\u06cc\u0628\u0627\u0634\u062f.\n\n\ud83c\udfed\u0648\u0628\u0633\u0627\u06cc\u062a \u0648 \u06a9\u0627\u0646\u0627\u0644 \u062a\u062e\u0635\u0635\u06cc \u0627\u0645\u0646\u06cc\u062a \u0632\u06cc\u0631\u0633\u0627\u062e\u062a\u0647\u0627\u06cc \u0627\u062a\u0648\u0645\u0627\u0633\u06cc\u0648\u0646 \u0648 \u06a9\u0646\u062a\u0631\u0644 \u0635\u0646\u0639\u062a\u06cc\n\n\u0627\u062f\u0645\u06cc\u0646:\nhttps://t.me/pedram_kiani\n\u06a9\u0627\u0646\u0627\u0644 \u062a\u0644\u06af\u0631\u0627\u0645:\nhttps://t.me/ics_cert\n\u062a\u0648\u06cc\u06cc\u062a\u0631:\nhttps://twitter.com/icscerti", "creation_timestamp": "2022-07-10T16:05:39.000000Z"}, {"uuid": "e8b425e0-bef9-4230-8916-99abe348661f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-27254", "type": "published-proof-of-concept", "source": "https://t.me/poxek/1923", "content": "\u041d\u0435 \u043c\u043e\u0433 \u043e\u0431\u043e\u0439\u0442\u0438 \u0441\u0442\u043e\u0440\u043e\u043d\u043e\u0439 \u044d\u0442\u0443 CVE-2022-27254(Mitre).\n\u042d\u0442\u0430 CVE \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 Honda Civic(LX, EX, EX-L, Touring, Si, Type R) 2016-2020 \u0433\u043e\u0434\u043e\u0432 \u0432\u044b\u043f\u0443\u0441\u043a\u0430. \u0421\u0443\u0442\u044c \u0432 \u0447\u0451\u043c: \u0441\u0438\u0441\u0442\u0435\u043c\u0430 \u0431\u0435\u0441\u043a\u043b\u044e\u0447\u0435\u0432\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043d\u0430 \u0441\u0438\u0432\u0438\u043a\u0430\u0445 \u043f\u043e\u0441\u044b\u043b\u0430\u0435\u0442 \u043e\u0434\u0438\u043d \u0438 \u0442\u043e\u0442 \u0436\u0435 \u0440\u0430\u0434\u0438\u043e\u0447\u0430\u0441\u0442\u043e\u0442\u043d\u044b\u0439 \u0441\u0438\u0433\u043d\u0430\u043b \u0434\u043b\u044f \u043a\u0430\u0436\u0434\u043e\u0433\u043e \u0437\u0430\u043f\u0440\u043e\u0441\u0430 \u043d\u0430 \u043e\u0442\u043a\u0440\u044b\u0442\u0438\u0435 \u0434\u0432\u0435\u0440\u0438, \u0447\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043f\u0440\u043e\u0432\u043e\u0434\u0438\u0442\u044c \u043f\u043e\u0432\u0442\u043e\u0440\u043d\u0443\u044e \u0430\u0442\u0430\u043a\u0443, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0443\u044e \u0441 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u043e\u0439 CVE-2019-20626.\n\n\u0418\u0437 \u0430\u0440\u0441\u0435\u043d\u0430\u043b\u0430, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043f\u043e\u0442\u0440\u0435\u0431\u043e\u0432\u0430\u043b\u0441\u044f \u0434\u043b\u044f \u0434\u043e\u043a\u0430\u0437\u0430\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u0430 \u043a\u043e\u043d\u0446\u0435\u043f\u0446\u0438\u0438(PoC):\n\u2316FCCID.io\n\u2316HackRF One\n\u2316Gqrx\n\u2316GNURadio\n\u0421\u043e\u0431\u0441\u0442\u0432\u0435\u043d\u043d\u043e, \u0432\u043e\u0442 \u0438 \u0441\u0430\u043c PoC:       \n\u25b6\ufe0f \u0442\u044b\u043a(github)\n\nI couldn't ignore this CVE-2022-27254 (Mitre).\nThis CVE affects the 2016-2020 Honda Civic(LX, EX, EX-L, Touring, Si, Type R). The bottom line is this: the keyless access system on Civics sends the same radio frequency signal for each request to open the door, which allows for a repeat attack related to the CVE-2019-20626 problem .\nFrom the arsenal that was required for Proof of Concept(PoC):\n\u2316FCC ID.io\n\u2316HackRF One\n\u2316Gqrx\n\u2316GNURadio\nActually, here is the PoC itself:\n\u25b6\ufe0f click(github)\n\n#cve #poc #car #hackrf", "creation_timestamp": "2024-11-06T19:30:33.000000Z"}, {"uuid": "e4597c14-ede3-40bf-9a27-cf4dd78fa531", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-27255", "type": "exploited", "source": "https://t.me/poxek/2292", "content": "\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d PoC \u0434\u043b\u044f \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043e \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u043c\u044b \u043f\u0438\u0441\u0430\u043b\u0438 \u043d\u0430 \u043f\u0440\u043e\u0448\u043b\u043e\u0439 \u043d\u0435\u0434\u0435\u043b\u0435, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0435\u0439 \u0441\u0435\u0442\u0435\u0432\u044b\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 \u0441 \u0441\u0438\u0441\u0442\u0435\u043c\u043e\u0439 Realtek RTL819x \u043d\u0430 \u043a\u0440\u0438\u0441\u0442\u0430\u043b\u043b\u0435 (SoC), \u043a\u043e\u043b\u0438\u0447\u0435\u0441\u0442\u0432\u043e \u043a\u043e\u0442\u043e\u0440\u044b\u0445, \u043f\u043e \u043e\u0446\u0435\u043d\u043a\u0430\u043c, \u0438\u0441\u0447\u0438\u0441\u043b\u044f\u0435\u0442\u0441\u044f \u043c\u0438\u043b\u043b\u0438\u043e\u043d\u0430\u043c\u0438. \n\nCVE-2022-27255\u00a0\u2014 \u044d\u0442\u043e \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u0431\u0443\u0444\u0435\u0440\u0430 \u043d\u0430 \u043e\u0441\u043d\u043e\u0432\u0435 \u0441\u0442\u0435\u043a\u0430, \u043a\u043e\u0442\u043e\u0440\u043e\u0435 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043a\u043e\u0434 \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u044b\u0435 SIP-\u043f\u0430\u043a\u0435\u0442\u044b \u0441 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u043c\u0438 \u0434\u0430\u043d\u043d\u044b\u043c\u0438 SDP.\n\nCVE-2022-27255 (\u0441 \u043e\u0446\u0435\u043d\u043a\u043e\u0439 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438 9,8 \u0438\u0437 10) \u043c\u043e\u0436\u0435\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u0434\u043b\u044f \u0432\u0437\u043b\u043e\u043c\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 \u043e\u0442 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0445 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u0439 \u043e\u0440\u0438\u0433\u0438\u043d\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u043e\u0431\u043e\u0440\u0443\u0434\u043e\u0432\u0430\u043d\u0438\u044f (OEM): \u043e\u0442 \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0442\u043e\u0440\u043e\u0432 \u0438 \u0442\u043e\u0447\u0435\u043a \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u0434\u043e \u043f\u043e\u0432\u0442\u043e\u0440\u0438\u0442\u0435\u043b\u0435\u0439 \u0441\u0438\u0433\u043d\u0430\u043b\u043e\u0432. \n\nRealtek \u0438\u0437\u0443\u0447\u0438\u043b\u0430 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0443 \u0435\u0449\u0435 \u0432 \u043c\u0430\u0440\u0442\u0435,\u00a0\u043e\u0442\u043c\u0435\u0442\u0438\u0432, \u0447\u0442\u043e \u043e\u043d\u0430 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0441\u0435\u0440\u0438\u0438 rtl819x-eCos-v0.x \u0438 rtl819x-eCos-v1.x, \u0430 \u0435\u0435 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u0430 \u0447\u0435\u0440\u0435\u0437 \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441 WAN.\n\n\u041e\u0448\u0438\u0431\u043a\u0430 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0441 \u043d\u0443\u043b\u0435\u0432\u044b\u043c \u043a\u043b\u0438\u043a\u043e\u043c: \u0435\u0435 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043d\u0435 \u0442\u0440\u0435\u0431\u0443\u0435\u0442 \u0432\u0437\u0430\u0438\u043c\u043e\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f \u0441 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c.\n\n\u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0435\u043c\u0443 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u0434\u043b\u044f \u0443\u0441\u043f\u0435\u0448\u043d\u043e\u0439 \u0430\u0442\u0430\u043a\u0438 \u043f\u043e\u0442\u0440\u0435\u0431\u0443\u0435\u0442\u0441\u044f \u043b\u0438\u0448\u044c \u0437\u043d\u0430\u0442\u044c \u0432\u043d\u0435\u0448\u043d\u0438\u0439 IP-\u0430\u0434\u0440\u0435\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0433\u043e \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430.\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 Faraday Security \u0438\u0437 \u0410\u0440\u0433\u0435\u043d\u0442\u0438\u043d\u044b (\u041e\u043a\u0442\u0430\u0432\u0438\u043e \u0414\u0436\u0430\u043d\u0430\u0442\u0438\u0435\u043c\u043f\u043e, \u041e\u043a\u0442\u0430\u0432\u0438\u043e \u0413\u0430\u043b\u043b\u0430\u043d\u0434, \u042d\u043c\u0438\u043b\u0438\u043e \u041a\u043e\u0443\u0442\u043e, \u0425\u0430\u0432\u044c\u0435\u0440 \u0410\u0433\u0438\u043d\u0430\u0433\u0430) \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 SDK Realtek \u0434\u043b\u044f \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b eCos \u0441 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u043c \u0438\u0441\u0445\u043e\u0434\u043d\u044b\u043c \u043a\u043e\u0434\u043e\u043c \u0438\u00a0\u0440\u0430\u0441\u043a\u0440\u044b\u043b\u0438 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438\u00a0\u043d\u0430 \u043f\u0440\u043e\u0448\u043b\u043e\u0439 \u043d\u0435\u0434\u0435\u043b\u0435 \u043d\u0430 DEFCON.\n\n\u041e\u043d\u0438 \u0436\u0435 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043b\u0438 \u0438 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b\u0438\u00a0PoC \u0434\u043b\u044f CVE-2022-27255, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0440\u0430\u0431\u043e\u0442\u0430\u0435\u0442 \u043d\u0430 \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0442\u043e\u0440\u0430\u0445 Nexxt Nebula 300 Plus, \u0430 \u0442\u0430\u043a\u0436\u0435 \u043f\u043e\u0434\u0435\u043b\u0438\u043b\u0438\u0441\u044c \u0434\u0435\u043c\u043e\u043d\u0441\u0442\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u043c \u0432\u0438\u0434\u0435\u043e.\n\n\u0420\u0435\u0441\u0435\u0440\u0447\u0435\u0440\u044b \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u044e\u0442, \u0447\u0442\u043e \u0435\u0441\u043b\u0438 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442 \u0434\u043b\u044f CVE-2022-27255 \u043f\u0440\u0435\u0432\u0440\u0430\u0442\u0438\u0442\u0441\u044f \u0432 \u0447\u0435\u0440\u0432\u044f, \u043e\u043d \u043c\u043e\u0436\u0435\u0442 \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0438\u0442\u044c\u0441\u044f \u043f\u043e \u0418\u043d\u0442\u0435\u0440\u043d\u0435\u0442\u0443 \u0437\u0430 \u0441\u0447\u0438\u0442\u0430\u043d\u043d\u044b\u0435 \u043c\u0438\u043d\u0443\u0442\u044b.\n\n\u041d\u0435\u0441\u043c\u043e\u0442\u0440\u044f \u043d\u0430 \u0442\u043e, \u0447\u0442\u043e \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e \u0441 \u043c\u0430\u0440\u0442\u0430, \u0447\u0442\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432\u0441\u0435 \u0435\u0449\u0435 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u043c\u0438\u043b\u043b\u0438\u043e\u043d\u044b \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u0431\u0443\u0434\u0435\u0442 \u0434\u043e\u0441\u0442\u0430\u0432\u043b\u0435\u043d\u043e \u0435\u0449\u0435 \u043d\u0435 \u0441\u043a\u043e\u0440\u043e.\n\n\u041d\u0435\u044f\u0441\u043d\u043e, \u0441\u043a\u043e\u043b\u044c\u043a\u043e \u043a\u043e\u043d\u043a\u0440\u0435\u0442\u043d\u043e \u0441\u0435\u0442\u0435\u0432\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u0447\u0438\u043f\u044b RTL819x, \u043d\u043e \u0432\u0435\u0440\u0441\u0438\u044f SoC RTL819xD \u043f\u0440\u0438\u0441\u0443\u0442\u0441\u0442\u0432\u043e\u0432\u0430\u043b\u0430 \u0432 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u0445 \u0431\u043e\u043b\u0435\u0435 \u0447\u0435\u043c 60 \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a\u043e\u0432.\u00a0\u0421\u0440\u0435\u0434\u0438 \u043d\u0438\u0445 ASUSTek, Belkin, Buffalo, D-Link, Edimax, TRENDnet \u0438 Zyxel.\n\n\u041f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0441\u043b\u0435\u0434\u0443\u0435\u0442 \u043f\u0440\u043e\u0432\u0435\u0440\u0438\u0442\u044c, \u043d\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e \u043b\u0438 \u0438\u0445 \u0441\u0435\u0442\u0435\u0432\u043e\u0435 \u043e\u0431\u043e\u0440\u0443\u0434\u043e\u0432\u0430\u043d\u0438\u0435, \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0438 \u043e\u0442 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044f, \u0432\u044b\u043f\u0443\u0449\u0435\u043d\u043d\u043e\u0435 \u043f\u043e\u0441\u043b\u0435 \u043c\u0430\u0440\u0442\u0430, \u0435\u0441\u043b\u0438 \u043e\u043d\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e.\n\n\u041f\u043e\u043c\u0438\u043c\u043e \u044d\u0442\u043e\u0433\u043e, \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u044f\u043c \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043d\u0435\u0436\u0435\u043b\u0430\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u0437\u0430\u043f\u0440\u043e\u0441\u044b UDP.\n\n\u041c\u0430\u0442\u0435\u0440\u0438\u0430\u043b\u044b \u043f\u0440\u0435\u0437\u0435\u043d\u0442\u0430\u0446\u0438\u0438 \u0441 DEFCON \u0432\u043c\u0435\u0441\u0442\u0435 \u0441 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430\u043c\u0438 \u0438 \u0441\u043a\u0440\u0438\u043f\u0442\u043e\u043c \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u044f CVE-2022-27255\u00a0\u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b \u0432 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0438 GitHub.", "creation_timestamp": "2022-08-17T11:24:40.000000Z"}, {"uuid": "d515d5da-7929-410a-8076-c23ef16f6954", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-27255", "type": "seen", "source": "https://t.me/poxek/2421", "content": "#CVE\n\nExploit for Improper Input Validation in Realtek Ecos Rsdk Firmware\nCVE-2022-27255\n\nIn Realtek eCos RSDK 1.5.7p1 and MSDK 4.9.4p1, the SIP ALG function that rewrites SDP data has a stack-based buffer overflow. This allows an attacker to remotely execute code without authentication via a crafted SIP packet that contains malicious SDP data.", "creation_timestamp": "2022-09-01T11:00:04.000000Z"}, {"uuid": "f277f28f-f6f5-4720-801f-95df9ad33f62", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-27255", "type": "exploited", "source": "https://t.me/arm1tage/285", "content": "\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d PoC \u0434\u043b\u044f \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043e \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u043c\u044b \u043f\u0438\u0441\u0430\u043b\u0438 \u043d\u0430 \u043f\u0440\u043e\u0448\u043b\u043e\u0439 \u043d\u0435\u0434\u0435\u043b\u0435, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0435\u0439 \u0441\u0435\u0442\u0435\u0432\u044b\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 \u0441 \u0441\u0438\u0441\u0442\u0435\u043c\u043e\u0439 Realtek RTL819x \u043d\u0430 \u043a\u0440\u0438\u0441\u0442\u0430\u043b\u043b\u0435 (SoC), \u043a\u043e\u043b\u0438\u0447\u0435\u0441\u0442\u0432\u043e \u043a\u043e\u0442\u043e\u0440\u044b\u0445, \u043f\u043e \u043e\u0446\u0435\u043d\u043a\u0430\u043c, \u0438\u0441\u0447\u0438\u0441\u043b\u044f\u0435\u0442\u0441\u044f \u043c\u0438\u043b\u043b\u0438\u043e\u043d\u0430\u043c\u0438. \n\nCVE-2022-27255\u00a0\u2014 \u044d\u0442\u043e \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u0431\u0443\u0444\u0435\u0440\u0430 \u043d\u0430 \u043e\u0441\u043d\u043e\u0432\u0435 \u0441\u0442\u0435\u043a\u0430, \u043a\u043e\u0442\u043e\u0440\u043e\u0435 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043a\u043e\u0434 \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u044b\u0435 SIP-\u043f\u0430\u043a\u0435\u0442\u044b \u0441 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u043c\u0438 \u0434\u0430\u043d\u043d\u044b\u043c\u0438 SDP.\n\nCVE-2022-27255 (\u0441 \u043e\u0446\u0435\u043d\u043a\u043e\u0439 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438 9,8 \u0438\u0437 10) \u043c\u043e\u0436\u0435\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u0434\u043b\u044f \u0432\u0437\u043b\u043e\u043c\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 \u043e\u0442 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0445 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u0439 \u043e\u0440\u0438\u0433\u0438\u043d\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u043e\u0431\u043e\u0440\u0443\u0434\u043e\u0432\u0430\u043d\u0438\u044f (OEM): \u043e\u0442 \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0442\u043e\u0440\u043e\u0432 \u0438 \u0442\u043e\u0447\u0435\u043a \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u0434\u043e \u043f\u043e\u0432\u0442\u043e\u0440\u0438\u0442\u0435\u043b\u0435\u0439 \u0441\u0438\u0433\u043d\u0430\u043b\u043e\u0432. \n\nRealtek \u0438\u0437\u0443\u0447\u0438\u043b\u0430 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0443 \u0435\u0449\u0435 \u0432 \u043c\u0430\u0440\u0442\u0435,\u00a0\u043e\u0442\u043c\u0435\u0442\u0438\u0432, \u0447\u0442\u043e \u043e\u043d\u0430 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0441\u0435\u0440\u0438\u0438 rtl819x-eCos-v0.x \u0438 rtl819x-eCos-v1.x, \u0430 \u0435\u0435 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u0430 \u0447\u0435\u0440\u0435\u0437 \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441 WAN.\n\n\u041e\u0448\u0438\u0431\u043a\u0430 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0441 \u043d\u0443\u043b\u0435\u0432\u044b\u043c \u043a\u043b\u0438\u043a\u043e\u043c: \u0435\u0435 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043d\u0435 \u0442\u0440\u0435\u0431\u0443\u0435\u0442 \u0432\u0437\u0430\u0438\u043c\u043e\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f \u0441 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c.\n\n\u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0435\u043c\u0443 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u0434\u043b\u044f \u0443\u0441\u043f\u0435\u0448\u043d\u043e\u0439 \u0430\u0442\u0430\u043a\u0438 \u043f\u043e\u0442\u0440\u0435\u0431\u0443\u0435\u0442\u0441\u044f \u043b\u0438\u0448\u044c \u0437\u043d\u0430\u0442\u044c \u0432\u043d\u0435\u0448\u043d\u0438\u0439 IP-\u0430\u0434\u0440\u0435\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0433\u043e \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430.\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 Faraday Security \u0438\u0437 \u0410\u0440\u0433\u0435\u043d\u0442\u0438\u043d\u044b (\u041e\u043a\u0442\u0430\u0432\u0438\u043e \u0414\u0436\u0430\u043d\u0430\u0442\u0438\u0435\u043c\u043f\u043e, \u041e\u043a\u0442\u0430\u0432\u0438\u043e \u0413\u0430\u043b\u043b\u0430\u043d\u0434, \u042d\u043c\u0438\u043b\u0438\u043e \u041a\u043e\u0443\u0442\u043e, \u0425\u0430\u0432\u044c\u0435\u0440 \u0410\u0433\u0438\u043d\u0430\u0433\u0430) \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 SDK Realtek \u0434\u043b\u044f \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b eCos \u0441 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u043c \u0438\u0441\u0445\u043e\u0434\u043d\u044b\u043c \u043a\u043e\u0434\u043e\u043c \u0438\u00a0\u0440\u0430\u0441\u043a\u0440\u044b\u043b\u0438 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438\u00a0\u043d\u0430 \u043f\u0440\u043e\u0448\u043b\u043e\u0439 \u043d\u0435\u0434\u0435\u043b\u0435 \u043d\u0430 DEFCON.\n\n\u041e\u043d\u0438 \u0436\u0435 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043b\u0438 \u0438 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b\u0438\u00a0PoC \u0434\u043b\u044f CVE-2022-27255, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0440\u0430\u0431\u043e\u0442\u0430\u0435\u0442 \u043d\u0430 \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0442\u043e\u0440\u0430\u0445 Nexxt Nebula 300 Plus, \u0430 \u0442\u0430\u043a\u0436\u0435 \u043f\u043e\u0434\u0435\u043b\u0438\u043b\u0438\u0441\u044c \u0434\u0435\u043c\u043e\u043d\u0441\u0442\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u043c \u0432\u0438\u0434\u0435\u043e.\n\n\u0420\u0435\u0441\u0435\u0440\u0447\u0435\u0440\u044b \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u044e\u0442, \u0447\u0442\u043e \u0435\u0441\u043b\u0438 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442 \u0434\u043b\u044f CVE-2022-27255 \u043f\u0440\u0435\u0432\u0440\u0430\u0442\u0438\u0442\u0441\u044f \u0432 \u0447\u0435\u0440\u0432\u044f, \u043e\u043d \u043c\u043e\u0436\u0435\u0442 \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0438\u0442\u044c\u0441\u044f \u043f\u043e \u0418\u043d\u0442\u0435\u0440\u043d\u0435\u0442\u0443 \u0437\u0430 \u0441\u0447\u0438\u0442\u0430\u043d\u043d\u044b\u0435 \u043c\u0438\u043d\u0443\u0442\u044b.\n\n\u041d\u0435\u0441\u043c\u043e\u0442\u0440\u044f \u043d\u0430 \u0442\u043e, \u0447\u0442\u043e \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e \u0441 \u043c\u0430\u0440\u0442\u0430, \u0447\u0442\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432\u0441\u0435 \u0435\u0449\u0435 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u043c\u0438\u043b\u043b\u0438\u043e\u043d\u044b \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u0431\u0443\u0434\u0435\u0442 \u0434\u043e\u0441\u0442\u0430\u0432\u043b\u0435\u043d\u043e \u0435\u0449\u0435 \u043d\u0435 \u0441\u043a\u043e\u0440\u043e.\n\n\u041d\u0435\u044f\u0441\u043d\u043e, \u0441\u043a\u043e\u043b\u044c\u043a\u043e \u043a\u043e\u043d\u043a\u0440\u0435\u0442\u043d\u043e \u0441\u0435\u0442\u0435\u0432\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u0447\u0438\u043f\u044b RTL819x, \u043d\u043e \u0432\u0435\u0440\u0441\u0438\u044f SoC RTL819xD \u043f\u0440\u0438\u0441\u0443\u0442\u0441\u0442\u0432\u043e\u0432\u0430\u043b\u0430 \u0432 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u0445 \u0431\u043e\u043b\u0435\u0435 \u0447\u0435\u043c 60 \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a\u043e\u0432.\u00a0\u0421\u0440\u0435\u0434\u0438 \u043d\u0438\u0445 ASUSTek, Belkin, Buffalo, D-Link, Edimax, TRENDnet \u0438 Zyxel.\n\n\u041f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0441\u043b\u0435\u0434\u0443\u0435\u0442 \u043f\u0440\u043e\u0432\u0435\u0440\u0438\u0442\u044c, \u043d\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e \u043b\u0438 \u0438\u0445 \u0441\u0435\u0442\u0435\u0432\u043e\u0435 \u043e\u0431\u043e\u0440\u0443\u0434\u043e\u0432\u0430\u043d\u0438\u0435, \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0438 \u043e\u0442 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044f, \u0432\u044b\u043f\u0443\u0449\u0435\u043d\u043d\u043e\u0435 \u043f\u043e\u0441\u043b\u0435 \u043c\u0430\u0440\u0442\u0430, \u0435\u0441\u043b\u0438 \u043e\u043d\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e.\n\n\u041f\u043e\u043c\u0438\u043c\u043e \u044d\u0442\u043e\u0433\u043e, \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u044f\u043c \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043d\u0435\u0436\u0435\u043b\u0430\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u0437\u0430\u043f\u0440\u043e\u0441\u044b UDP.\n\n\u041c\u0430\u0442\u0435\u0440\u0438\u0430\u043b\u044b \u043f\u0440\u0435\u0437\u0435\u043d\u0442\u0430\u0446\u0438\u0438 \u0441 DEFCON \u0432\u043c\u0435\u0441\u0442\u0435 \u0441 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430\u043c\u0438 \u0438 \u0441\u043a\u0440\u0438\u043f\u0442\u043e\u043c \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u044f CVE-2022-27255\u00a0\u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b \u0432 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0438 GitHub.", "creation_timestamp": "2022-08-17T16:37:16.000000Z"}, {"uuid": "3ec4bb33-634f-45a4-9d32-3f110b424482", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-27254", "type": "seen", "source": "https://t.me/technical_private_cat/248", "content": "Hello, my Merry en \ud83d\udc2d\ud83e\udde9\n\nI want to give you the automotive vulnerability CVE-2022-27254 . \ud83d\ude97\nIt affects some models of Honda and Acura cars.\n\nIn it, an attacker can gain full and unrestricted access to lock, unlock, control windows, open the trunk, and start the engine of the target vehicle\n\nThe attack is this: the attacker intercepts radio frequency signals from your key fob, and re-sends them to gain control of the system without your car key.\n\nRead more CVE-2022-27254, is a MitM attack or, more specifically, a replay attack in which an attacker intercepts RF signals normally sent from a remote key fob to your car. \nThen re-sends them to unlock the car at will.\nSimply capturing the signal sent from the FOB is enough to gain some control over the vehicle, lol\ud83d\ude36\u200d\ud83c\udf2b\ufe0f. \nIf a target locks their car, all it takes is getting their signal and saving it to be able to replay the same command and get an appropriate response from the car.\n\nHonda told us that several automakers are using outdated technology to implement remote locking and unlocking features, and therefore may be vulnerable to \"determined and very technically advanced thieves.\"\n\n\"Currently, the devices seem to work only in close proximity or are physically attached to the target vehicle, requiring local reception of radio signals from the vehicle owner's key fob when the vehicle is opened and started nearby.\"\n\nNote that in its statement, Honda explicitly mentions that it has not verified the information provided by the researchers and cannot confirm whether Honda vehicles are indeed vulnerable to this type of attack.\nAnd as you can understand they're not too keen on fixing it. \n\nAnd that's it, be careful with your autos. \ud83d\ude98\n\nHere are some useful links to various poc and articles about this vulnerability\n\nLink  \nLink  \nLink  \nLink \nLink\n\nThanks for reading\u2764\ufe0f\nAnd remember: The baby the Duchess is rocking is actually a piggy \ud83d\udc37\n#car  #attacks #cve #exploit #news", "creation_timestamp": "2022-10-16T14:48:40.000000Z"}, {"uuid": "bc847fe1-efcf-439a-aeed-8d309fee20d1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-27254", "type": "published-proof-of-concept", "source": "https://t.me/q_1xx/4651", "content": "\u0641\u064a\u062f\u064a\u0648 \u062a\u0648\u0636\u064a\u062d \u0627\u0633\u062a\u063a\u0644\u0627\u0644 \u062b\u063a\u0631\u0629 \u0641\u064a \u0627\u0644\u0633\u064a\u0627\u0631\u0627\u062a \u0647\u0648\u0627\u0646\u062f\n\n\n \u0627\u0633\u062a\u063a\u0644\u0627\u0644 \u062b\u063a\u0631\u0629 \u0647\u0648\u0646\u062f\u0627 \u0641\u064a \u0646\u0638\u0627\u0645 \u0647\u0648\u0646\u062f\u0627 \u0639\u0646 \u0628\u0639\u062f \u0628\u062f\u0648\u0646 \u0645\u0641\u062a\u0627\u062d (CVE-2022-27254)\n\n\u0627\u0644\u0628\u0631\u0627\u0645\u062c \u0627\u0644\u062b\u0627\u0628\u062a\u0629 \u0644\u0641\u062a\u062d \u0623\u064a \u0648\u062c\u0645\u064a\u0639 \u0645\u0646\u0627\u0641\u0630 \u0634\u062d\u0646 \u0645\u0631\u0643\u0628\u0627\u062a Tesla \u0641\u064a \u0627\u0644\u0646\u0637\u0627\u0642!\n\n\u0627\u0644\u0645\u0632\u064a\u062f \u0645\u0646 \u0627\u0644\u0645\u0646\u0634\u0648\u0631\u0627\u062a \n\nhacking yemen\nhttp://t.me/q_1xx", "creation_timestamp": "2025-06-29T08:31:42.000000Z"}, {"uuid": "660e6388-819a-4474-950a-9517c27cb26a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-27255", "type": "published-proof-of-concept", "source": "https://t.me/wireshark_hacking/605", "content": "This repository contains the materials for the talk \"Exploring the hidden attack surface of OEM IoT devices: pwning thousands of routers with a vulnerability in Realtek\u2019s SDK for eCos OS.\", which was presented at\u00a0DEFCON30.\n\nhttps://github.com/infobyte/cve-2022-27255", "creation_timestamp": "2022-08-21T06:19:20.000000Z"}, {"uuid": "fb38227c-5dbb-4213-9dae-94a35abb9cc3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-27255", "type": "published-proof-of-concept", "source": "https://t.me/wireshark_hacking/603", "content": "This repository contains the materials for the talk \"Exploring the hidden attack surface of OEM IoT devices: pwning thousands of routers with a vulnerability in Realtek\u2019s SDK for eCos OS.\", which was presented at\u00a0DEFCON30.\n\nhttps://github.com/infobyte/cve-2022-27255", "creation_timestamp": "2022-08-21T06:13:51.000000Z"}, {"uuid": "45a03370-0ceb-45dc-8063-d67f0d26e653", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-27254", "type": "published-proof-of-concept", "source": "https://t.me/PentestingShop/285", "content": "\u200b\u200bHackRF One + Portapack H2 Mayhem\n\nThe HackRF is an exceptionally capable software defined radio (SDR) transceiver, but naturally you need to connect it to a computer to actually do anything with it. So the PortaPack was developed to turn it into a stand-alone device with the addition of a touchscreen LCD, a few buttons, and a headphone jack. With all the hardware in place, it\u2019s just a matter of installing a firmware capable enough to do some proper RF hacking on the go.\n\nEnter MAYHEM, an evolved fork of the original PortaPack firmware that the developers claim is the most up-to-date and feature packed version available. Without ever plugging into a computer, this firmware allows you to receive, decode, and re-transmit a dizzying number of wireless protocols. From firing off the seating pagers at a local restaurant to creating a fleet of phantom aircraft with spoofed ADS-B transponders, MAYHEM certainly seems like it lives up to the name.\n\nDetailed blog post about installing and using MAYHEM on the HackRF/PortaPack, complete with a number of real-world examples that show off just a handful of possible applications for the project. Jamming cell phones, sending fake pager messages, and cloning RF remotes is just scratching the surface of what\u2019s possible.\n\nExample of use: exploitation of a Honda vulnerability Honda's Remote Keyless System (CVE-2022-27254)\n\nFirmware to open any and all Tesla vehicle charging ports in range!\n\nBuy online: \n\ud83d\uded2 https://bit.ly/41HS7D3\n\n#radio #RF #SDR", "creation_timestamp": "2023-04-30T17:52:58.000000Z"}, {"uuid": "1c601105-ca03-43ae-b3d6-a7cc70fcd1cb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-27255", "type": "published-proof-of-concept", "source": "https://t.me/wireshark_hacking/572", "content": "CVE-2022-27255\n\nhttps://github.com/infobyte/cve-2022-27255/tree/main/exploits_nexxt", "creation_timestamp": "2022-08-19T21:10:08.000000Z"}, {"uuid": "16b6bf02-4009-472a-9642-67b6a3f7b2f3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-27254", "type": "published-proof-of-concept", "source": "https://t.me/ShizoPrivacy/112", "content": "\u041d\u0435 \u043c\u043e\u0433 \u043e\u0431\u043e\u0439\u0442\u0438 \u0441\u0442\u043e\u0440\u043e\u043d\u043e\u0439 \u044d\u0442\u0443 CVE-2022-27254(Mitre)\n\u042d\u0442\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 Honda Civic(LX, EX, EX-L, Touring, Si, Type R) 2016-2020 \u0433\u043e\u0434\u043e\u0432 \u0432\u044b\u043f\u0443\u0441\u043a\u0430. \u0421\u0443\u0442\u044c \u0432 \u0447\u0451\u043c: \u0441\u0438\u0441\u0442\u0435\u043c\u0430 \u0431\u0435\u0441\u043a\u043b\u044e\u0447\u0435\u0432\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043d\u0430 \u0441\u0438\u0432\u0438\u043a\u0430\u0445 \u043f\u043e\u0441\u044b\u043b\u0430\u0435\u0442 \u043e\u0434\u0438\u043d \u0438 \u0442\u043e\u0442 \u0436\u0435 \u0440\u0430\u0434\u0438\u043e\u0447\u0430\u0441\u0442\u043e\u0442\u043d\u044b\u0439 \u0441\u0438\u0433\u043d\u0430\u043b \u0434\u043b\u044f \u043a\u0430\u0436\u0434\u043e\u0433\u043e \u0437\u0430\u043f\u0440\u043e\u0441\u0430 \u043d\u0430 \u043e\u0442\u043a\u0440\u044b\u0442\u0438\u0435 \u0434\u0432\u0435\u0440\u0438, \u0447\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043f\u0440\u043e\u0432\u043e\u0434\u0438\u0442\u044c \u043f\u043e\u0432\u0442\u043e\u0440\u043d\u0443\u044e \u0430\u0442\u0430\u043a\u0443, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0443\u044e \u0441 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u043e\u0439 CVE-2019-20626.\n\n\u0418\u0437 \u0430\u0440\u0441\u0435\u043d\u0430\u043b\u0430, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043f\u043e\u0442\u0440\u0435\u0431\u043e\u0432\u0430\u043b\u0441\u044f \u0434\u043b\u044f \u0434\u043e\u043a\u0430\u0437\u0430\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u0430 \u043a\u043e\u043d\u0446\u0435\u043f\u0446\u0438\u0438(PoC):\n\u2316FCCID.io\n\u2316HackRF One\n\u2316Gqrx\n\u2316GNURadio\n\u0421\u043e\u0431\u0441\u0442\u0432\u0435\u043d\u043d\u043e, \u0432\u043e\u0442 \u0438 \u0441\u0430\u043c PoC:       \n\u25b6\ufe0f \u0442\u044b\u043a\n\nI couldn't ignore this CVE-2022-27254 (Mitre).\nThis vulnerability affects the 2016-2020 Honda Civic(LX, EX, EX-L, Touring, Si, Type R). The bottom line is this: the keyless access system on Civics sends the same radio frequency signal for each request to open the door, which allows for a repeat attack related to the CVE-2019-20626 problem .\nFrom the arsenal that was required for Proof of Concept(PoC):\n\u2316FCC ID.io\n\u2316HackRF One\n\u2316Gqrx\n\u2316GNURadio\nActually, here is the PoC itself:\n\u25b6\ufe0f click\n\n#cve #poc #car #hackrf", "creation_timestamp": "2022-11-03T21:45:14.000000Z"}, {"uuid": "6e8f1c0c-7e6d-414b-8cf6-7e89945b6859", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-27254", "type": "published-proof-of-concept", "source": "Telegram/szg74Qm4n38TtnLhVXmcs_KgRO4IWiuPmQYby4jF-2nImw", "content": "", "creation_timestamp": "2022-12-16T18:40:47.000000Z"}, {"uuid": "ea72b0d8-bd9a-41bd-b4a8-2903b97ed413", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-27254", "type": "published-proof-of-concept", "source": "https://t.me/q_1xx/2271", "content": "\u0641\u064a\u062f\u064a\u0648 \u062a\u0648\u0636\u064a\u062d \u0627\u0633\u062a\u063a\u0644\u0627\u0644 \u062b\u063a\u0631\u0629 \u0641\u064a \u0627\u0644\u0633\u064a\u0627\u0631\u0627\u062a \u0647\u0648\u0627\u0646\u062f\n\n\n \u0627\u0633\u062a\u063a\u0644\u0627\u0644 \u062b\u063a\u0631\u0629 \u0647\u0648\u0646\u062f\u0627 \u0641\u064a \u0646\u0638\u0627\u0645 \u0647\u0648\u0646\u062f\u0627 \u0639\u0646 \u0628\u0639\u062f \u0628\u062f\u0648\u0646 \u0645\u0641\u062a\u0627\u062d (CVE-2022-27254)\n\n\u0627\u0644\u0628\u0631\u0627\u0645\u062c \u0627\u0644\u062b\u0627\u0628\u062a\u0629 \u0644\u0641\u062a\u062d \u0623\u064a \u0648\u062c\u0645\u064a\u0639 \u0645\u0646\u0627\u0641\u0630 \u0634\u062d\u0646 \u0645\u0631\u0643\u0628\u0627\u062a Tesla \u0641\u064a \u0627\u0644\u0646\u0637\u0627\u0642!\n\n\u0627\u0644\u0645\u0632\u064a\u062f \u0645\u0646 \u0627\u0644\u0645\u0646\u0634\u0648\u0631\u0627\u062a \n\nhacking yemen\nhttp://t.me/q_1xx", "creation_timestamp": "2022-11-19T15:24:57.000000Z"}, {"uuid": "bf038f66-681a-47f6-b931-5cef700634e8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-27254", "type": "published-proof-of-concept", "source": "https://t.me/WARLOCK_DARK_ARMY_OFFICIALS/1291", "content": "HackRF One + Portapack H2 Mayhem.\n\nThe HackRF is an exceptionally capable software defined radio (SDR) transceiver, but naturally you need to connect it to a computer to actually do anything with it. So the PortaPack was developed to turn it into a stand-alone device with the addition of a touchscreen LCD, a few buttons, and a headphone jack. With all the hardware in place, it\u2019s just a matter of installing a firmware capable enough to do some proper RF hacking on the go.\n\nEnter MAYHEM, an evolved fork of the original PortaPack firmware that the developers claim is the most up-to-date and feature packed version available. Without ever plugging into a computer, this firmware allows you to receive, decode, and re-transmit a dizzying number of wireless protocols. From firing off the seating pagers at a local restaurant to creating a fleet of phantom aircraft with spoofed ADS-B transponders, MAYHEM certainly seems like it lives up to the name.\n\nDetailed blog post about installing and using MAYHEM on the HackRF/PortaPack, complete with a number of real-world examples that show off just a handful of possible applications for the project. Jamming cell phones, sending fake pager messages, and cloning RF remotes is just scratching the surface of what\u2019s possible.\n\nExample of use: exploitation of a Honda vulnerability Honda's Remote Keyless System (CVE-2022-27254)\n\nFirmware to open any and all Tesla vehicle charging ports in range!\n\nBuy online: \n\ud83d\uded2 https://alii.pub/6lfodk\n\ud83d\uded2 https://amzn.to/3kRIrFF\n\n#hackrf #radio #sdr #spoofing", "creation_timestamp": "2023-01-30T22:53:50.000000Z"}, {"uuid": "657400c5-a3cc-42e7-9a83-23cc2d7449df", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-27255", "type": "seen", "source": "Telegram/Uieng4hhAZFXjH9lPmah2RHnRpBbF9ZOA1GgoU9giQZ2kg", "content": "", "creation_timestamp": "2022-08-18T15:56:07.000000Z"}, {"uuid": "9a770c3b-91a9-4a98-963b-82b0d7d7dab5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-27254", "type": "published-proof-of-concept", "source": "https://t.me/SpidrX/797", "content": "\u0641\u064a\u062f\u064a\u0648 \u062a\u0648\u0636\u064a\u062d \u0627\u0633\u062a\u063a\u0644\u0627\u0644 \u062b\u063a\u0631\u0629 \u0641\u064a \u0627\u0644\u0633\u064a\u0627\u0631\u0627\u062a \u0647\u0648\u0627\u0646\u062f\n\n\n \u0627\u0633\u062a\u063a\u0644\u0627\u0644 \u062b\u063a\u0631\u0629 \u0647\u0648\u0646\u062f\u0627 \u0641\u064a \u0646\u0638\u0627\u0645 \u0647\u0648\u0646\u062f\u0627 \u0639\u0646 \u0628\u0639\u062f \u0628\u062f\u0648\u0646 \u0645\u0641\u062a\u0627\u062d (CVE-2022-27254)\n\n\u0627\u0644\u0628\u0631\u0627\u0645\u062c \u0627\u0644\u062b\u0627\u0628\u062a\u0629 \u0644\u0641\u062a\u062d \u0623\u064a \u0648\u062c\u0645\u064a\u0639 \u0645\u0646\u0627\u0641\u0630 \u0634\u062d\u0646 \u0645\u0631\u0643\u0628\u0627\u062a Tesla \u0641\u064a \u0627\u0644\u0646\u0637\u0627\u0642!", "creation_timestamp": "2022-12-16T18:40:47.000000Z"}, {"uuid": "f4add078-ed54-4a70-b6d6-3dda6c4223e0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-27255", "type": "seen", "source": "https://t.me/proxy_bar/936", "content": "CVE-2022-27255\nRealtek eCos SDK SIP ALG buffer overflow\nLink\u2014>", "creation_timestamp": "2022-08-17T15:53:12.000000Z"}, {"uuid": "6842e27b-ff9a-47b2-b9b7-cefdca2b737f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-27255", "type": "published-proof-of-concept", "source": "Telegram/rBR2P_tF_WhAviQzUjXoVNSmzF3vhzm8hoa2za_pE1mJ1w", "content": "", "creation_timestamp": "2022-08-19T12:07:04.000000Z"}, {"uuid": "d9e9ee69-a037-4d67-a2ee-bb1b3949a3b1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-27255", "type": "published-proof-of-concept", "source": "Telegram/jhOaoEUY64VNCIZVEkYLM9l-kb-VbdN5IKNS5r-Ra6VeJA", "content": "", "creation_timestamp": "2022-08-17T18:17:19.000000Z"}, {"uuid": "36a37dfb-8e77-4e76-bbf5-ed65bb08657a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-27254", "type": "published-proof-of-concept", "source": "https://t.me/zero_day_uz/115", "content": "#CVE\n\n\nCVE-2022-27254: PoC for vulnerability in Honda's Remote Keyless System(CVE-2022-27254)\n\n\n\n\n@zero_day_uz", "creation_timestamp": "2022-06-25T14:45:41.000000Z"}, {"uuid": "d5309e70-5bde-425f-bd49-dbd13ad1f3e3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-27255", "type": "published-proof-of-concept", "source": "https://t.me/true_secator/3302", "content": "\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d PoC \u0434\u043b\u044f \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043e \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u043c\u044b \u043f\u0438\u0441\u0430\u043b\u0438 \u043d\u0430 \u043f\u0440\u043e\u0448\u043b\u043e\u0439 \u043d\u0435\u0434\u0435\u043b\u0435, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0435\u0439 \u0441\u0435\u0442\u0435\u0432\u044b\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 \u0441 \u0441\u0438\u0441\u0442\u0435\u043c\u043e\u0439 Realtek RTL819x \u043d\u0430 \u043a\u0440\u0438\u0441\u0442\u0430\u043b\u043b\u0435 (SoC), \u043a\u043e\u043b\u0438\u0447\u0435\u0441\u0442\u0432\u043e \u043a\u043e\u0442\u043e\u0440\u044b\u0445, \u043f\u043e \u043e\u0446\u0435\u043d\u043a\u0430\u043c, \u0438\u0441\u0447\u0438\u0441\u043b\u044f\u0435\u0442\u0441\u044f \u043c\u0438\u043b\u043b\u0438\u043e\u043d\u0430\u043c\u0438. \n\nCVE-2022-27255\u00a0\u2014 \u044d\u0442\u043e \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u0431\u0443\u0444\u0435\u0440\u0430 \u043d\u0430 \u043e\u0441\u043d\u043e\u0432\u0435 \u0441\u0442\u0435\u043a\u0430, \u043a\u043e\u0442\u043e\u0440\u043e\u0435 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043a\u043e\u0434 \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u044b\u0435 SIP-\u043f\u0430\u043a\u0435\u0442\u044b \u0441 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u043c\u0438 \u0434\u0430\u043d\u043d\u044b\u043c\u0438 SDP.\n\nCVE-2022-27255 (\u0441 \u043e\u0446\u0435\u043d\u043a\u043e\u0439 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438 9,8 \u0438\u0437 10) \u043c\u043e\u0436\u0435\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u0434\u043b\u044f \u0432\u0437\u043b\u043e\u043c\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 \u043e\u0442 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0445 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u0439 \u043e\u0440\u0438\u0433\u0438\u043d\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u043e\u0431\u043e\u0440\u0443\u0434\u043e\u0432\u0430\u043d\u0438\u044f (OEM): \u043e\u0442 \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0442\u043e\u0440\u043e\u0432 \u0438 \u0442\u043e\u0447\u0435\u043a \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u0434\u043e \u043f\u043e\u0432\u0442\u043e\u0440\u0438\u0442\u0435\u043b\u0435\u0439 \u0441\u0438\u0433\u043d\u0430\u043b\u043e\u0432. \n\nRealtek \u0438\u0437\u0443\u0447\u0438\u043b\u0430 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0443 \u0435\u0449\u0435 \u0432 \u043c\u0430\u0440\u0442\u0435,\u00a0\u043e\u0442\u043c\u0435\u0442\u0438\u0432, \u0447\u0442\u043e \u043e\u043d\u0430 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0441\u0435\u0440\u0438\u0438 rtl819x-eCos-v0.x \u0438 rtl819x-eCos-v1.x, \u0430 \u0435\u0435 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u0430 \u0447\u0435\u0440\u0435\u0437 \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441 WAN.\n\n\u041e\u0448\u0438\u0431\u043a\u0430 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0441 \u043d\u0443\u043b\u0435\u0432\u044b\u043c \u043a\u043b\u0438\u043a\u043e\u043c: \u0435\u0435 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043d\u0435 \u0442\u0440\u0435\u0431\u0443\u0435\u0442 \u0432\u0437\u0430\u0438\u043c\u043e\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f \u0441 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c.\n\n\u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0435\u043c\u0443 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u0434\u043b\u044f \u0443\u0441\u043f\u0435\u0448\u043d\u043e\u0439 \u0430\u0442\u0430\u043a\u0438 \u043f\u043e\u0442\u0440\u0435\u0431\u0443\u0435\u0442\u0441\u044f \u043b\u0438\u0448\u044c \u0437\u043d\u0430\u0442\u044c \u0432\u043d\u0435\u0448\u043d\u0438\u0439 IP-\u0430\u0434\u0440\u0435\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0433\u043e \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430.\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 Faraday Security \u0438\u0437 \u0410\u0440\u0433\u0435\u043d\u0442\u0438\u043d\u044b (\u041e\u043a\u0442\u0430\u0432\u0438\u043e \u0414\u0436\u0430\u043d\u0430\u0442\u0438\u0435\u043c\u043f\u043e, \u041e\u043a\u0442\u0430\u0432\u0438\u043e \u0413\u0430\u043b\u043b\u0430\u043d\u0434, \u042d\u043c\u0438\u043b\u0438\u043e \u041a\u043e\u0443\u0442\u043e, \u0425\u0430\u0432\u044c\u0435\u0440 \u0410\u0433\u0438\u043d\u0430\u0433\u0430) \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 SDK Realtek \u0434\u043b\u044f \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b eCos \u0441 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u043c \u0438\u0441\u0445\u043e\u0434\u043d\u044b\u043c \u043a\u043e\u0434\u043e\u043c \u0438\u00a0\u0440\u0430\u0441\u043a\u0440\u044b\u043b\u0438 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438\u00a0\u043d\u0430 \u043f\u0440\u043e\u0448\u043b\u043e\u0439 \u043d\u0435\u0434\u0435\u043b\u0435 \u043d\u0430 DEFCON.\n\n\u041e\u043d\u0438 \u0436\u0435 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043b\u0438 \u0438 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b\u0438\u00a0PoC \u0434\u043b\u044f CVE-2022-27255, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0440\u0430\u0431\u043e\u0442\u0430\u0435\u0442 \u043d\u0430 \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0442\u043e\u0440\u0430\u0445 Nexxt Nebula 300 Plus, \u0430 \u0442\u0430\u043a\u0436\u0435 \u043f\u043e\u0434\u0435\u043b\u0438\u043b\u0438\u0441\u044c \u0434\u0435\u043c\u043e\u043d\u0441\u0442\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u043c \u0432\u0438\u0434\u0435\u043e.\n\n\u0420\u0435\u0441\u0435\u0440\u0447\u0435\u0440\u044b \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u044e\u0442, \u0447\u0442\u043e \u0435\u0441\u043b\u0438 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442 \u0434\u043b\u044f CVE-2022-27255 \u043f\u0440\u0435\u0432\u0440\u0430\u0442\u0438\u0442\u0441\u044f \u0432 \u0447\u0435\u0440\u0432\u044f, \u043e\u043d \u043c\u043e\u0436\u0435\u0442 \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0438\u0442\u044c\u0441\u044f \u043f\u043e \u0418\u043d\u0442\u0435\u0440\u043d\u0435\u0442\u0443 \u0437\u0430 \u0441\u0447\u0438\u0442\u0430\u043d\u043d\u044b\u0435 \u043c\u0438\u043d\u0443\u0442\u044b.\n\n\u041d\u0435\u0441\u043c\u043e\u0442\u0440\u044f \u043d\u0430 \u0442\u043e, \u0447\u0442\u043e \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e \u0441 \u043c\u0430\u0440\u0442\u0430, \u0447\u0442\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432\u0441\u0435 \u0435\u0449\u0435 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u043c\u0438\u043b\u043b\u0438\u043e\u043d\u044b \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u0431\u0443\u0434\u0435\u0442 \u0434\u043e\u0441\u0442\u0430\u0432\u043b\u0435\u043d\u043e \u0435\u0449\u0435 \u043d\u0435 \u0441\u043a\u043e\u0440\u043e.\n\n\u041d\u0435\u044f\u0441\u043d\u043e, \u0441\u043a\u043e\u043b\u044c\u043a\u043e \u043a\u043e\u043d\u043a\u0440\u0435\u0442\u043d\u043e \u0441\u0435\u0442\u0435\u0432\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u0447\u0438\u043f\u044b RTL819x, \u043d\u043e \u0432\u0435\u0440\u0441\u0438\u044f SoC RTL819xD \u043f\u0440\u0438\u0441\u0443\u0442\u0441\u0442\u0432\u043e\u0432\u0430\u043b\u0430 \u0432 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u0445 \u0431\u043e\u043b\u0435\u0435 \u0447\u0435\u043c 60 \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a\u043e\u0432.\u00a0\u0421\u0440\u0435\u0434\u0438 \u043d\u0438\u0445 ASUSTek, Belkin, Buffalo, D-Link, Edimax, TRENDnet \u0438 Zyxel.\n\n\u041f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0441\u043b\u0435\u0434\u0443\u0435\u0442 \u043f\u0440\u043e\u0432\u0435\u0440\u0438\u0442\u044c, \u043d\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e \u043b\u0438 \u0438\u0445 \u0441\u0435\u0442\u0435\u0432\u043e\u0435 \u043e\u0431\u043e\u0440\u0443\u0434\u043e\u0432\u0430\u043d\u0438\u0435, \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0438 \u043e\u0442 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044f, \u0432\u044b\u043f\u0443\u0449\u0435\u043d\u043d\u043e\u0435 \u043f\u043e\u0441\u043b\u0435 \u043c\u0430\u0440\u0442\u0430, \u0435\u0441\u043b\u0438 \u043e\u043d\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e.\n\n\u041f\u043e\u043c\u0438\u043c\u043e \u044d\u0442\u043e\u0433\u043e, \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u044f\u043c \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043d\u0435\u0436\u0435\u043b\u0430\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u0437\u0430\u043f\u0440\u043e\u0441\u044b UDP.\n\n\u041c\u0430\u0442\u0435\u0440\u0438\u0430\u043b\u044b \u043f\u0440\u0435\u0437\u0435\u043d\u0442\u0430\u0446\u0438\u0438 \u0441 DEFCON \u0432\u043c\u0435\u0441\u0442\u0435 \u0441 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430\u043c\u0438 \u0438 \u0441\u043a\u0440\u0438\u043f\u0442\u043e\u043c \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u044f CVE-2022-27255\u00a0\u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b \u0432 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0438 GitHub.", "creation_timestamp": "2022-08-17T12:45:06.000000Z"}, {"uuid": "3f1ec3c9-c5de-48b4-832f-428c7a42c2a9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-27250", "type": "seen", "source": "https://t.me/true_secator/3017", "content": "\u041c\u0438\u043b\u043b\u0438\u043e\u043d\u044b Android-\u0441\u043c\u0430\u0440\u0442\u0444\u043e\u043d\u043e\u0432 \u043d\u0430 \u0431\u0430\u0437\u0435 \u0447\u0438\u043f\u0441\u0435\u0442\u043e\u0432 \u043a\u0438\u0442\u0430\u0439\u0441\u043a\u043e\u0433\u043e \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044f UNISOC (\u0434\u043e 2018 \u0433\u043e\u0434\u0430 - Spreadtrum) \u0443\u044f\u0437\u0432\u0438\u043c\u044b \u0434\u043b\u044f \u0430\u0442\u0430\u043a, \u043d\u0430\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u043d\u0430 \u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0441\u0432\u044f\u0437\u0438.\n\n\u0412 \u0445\u043e\u0434\u0435 \u0430\u043d\u0430\u043b\u0438\u0437\u0430 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u044e \u0441\u0442\u0435\u043a\u0430 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u043e\u0432 LTE \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u044b Check Point \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u043e\u0448\u0438\u0431\u043a\u0443 \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0431\u0443\u0444\u0435\u0440\u0430 \u0432 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0435, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043e\u0431\u0440\u0430\u0431\u0430\u0442\u044b\u0432\u0430\u0435\u0442 \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u044f\u00a0Non-Access Stratum\u00a0(NAS), \u0441 \u043e\u0446\u0435\u043d\u043a\u043e\u0439 CVSS 9,4, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u043a\u0430\u043a CVE-2022-20210.\n\n\u0427\u0438\u043f\u0441\u0435\u0442\u044b UNISOC, \u043e\u0434\u043d\u043e\u0433\u043e \u0438\u0437 \u043a\u0440\u0443\u043f\u043d\u0435\u0439\u0448\u0438\u0445 \u043a\u0438\u0442\u0430\u0439\u0441\u043a\u0438\u0445 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u043e\u0432 \u0447\u0438\u043f\u043e\u0432 \u0434\u043b\u044f \u043c\u043e\u0431\u0438\u043b\u044c\u043d\u044b\u0445 \u0442\u0435\u043b\u0435\u0444\u043e\u043d\u043e\u0432, \u0448\u0438\u0440\u043e\u043a\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442\u0441\u044f \u0432 \u0431\u044e\u0434\u0436\u0435\u0442\u043d\u044b\u0445 \u0441\u043c\u0430\u0440\u0442\u0444\u043e\u043d\u0430\u0445, \u043e\u0441\u043d\u043e\u0432\u043d\u0430\u044f \u043c\u0430\u0441\u0441\u0430 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0440\u0435\u0430\u043b\u0438\u0437\u0443\u044e\u0442\u0441\u044f \u0432 \u0441\u0442\u0440\u0430\u043d\u0430\u0445 \u0410\u0437\u0438\u0438 \u0438 \u0410\u0444\u0440\u0438\u043a\u0438.\u00a0\u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c\u00a0Counterpoint Research, \u0432 2021 \u0433\u043e\u0434\u0430 \u0434\u043e\u043b\u044f UNISOC \u043d\u0430 \u0440\u044b\u043d\u043a\u0435 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u043e\u0432 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439 \u0434\u043b\u044f \u0441\u043c\u0430\u0440\u0442\u0444\u043e\u043d\u043e\u0432 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u043b\u0430 11% \u0440\u044b\u043d\u043a\u0430, \u044d\u0442\u043e \u0447\u0435\u0442\u0432\u0435\u0440\u0442\u043e\u0435 \u043c\u0435\u0441\u0442\u043e \u043f\u043e\u0441\u043b\u0435 Mediatek, Qualcomm \u0438 Apple.\n\n\u0425\u0430\u043a\u0435\u0440\u044b, \u0438\u043b\u0438 \u0432\u043e\u0435\u043d\u043d\u044b\u0435, \u043c\u043e\u0433\u0443\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0434\u043b\u044f \u043f\u043e\u0434\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0431\u0435\u0441\u043f\u0440\u043e\u0432\u043e\u0434\u043d\u043e\u0439 \u0441\u0432\u044f\u0437\u0438 \u0432 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u043d\u043e\u043c \u0440\u0430\u0439\u043e\u043d\u0435 \u0438\u043b\u0438 \u043b\u043e\u043a\u0430\u0446\u0438\u0438, \u0438\u043d\u0438\u0446\u0438\u0438\u0440\u043e\u0432\u0430\u0432 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u0443\u044e \u0430\u0442\u0430\u043a\u0443 \u0442\u0438\u043f\u0430 \u043e\u0442\u043a\u0430\u0437 \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438 (DoS) \u043d\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u043e\u0433\u043e \u043f\u0430\u043a\u0435\u0442\u0430.\n\n\u041a \u043d\u0430\u0441\u0442\u043e\u044f\u0449\u0435\u043c\u0443 \u0432\u0440\u0435\u043c\u0435\u043d\u0438 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u043f\u0440\u043e\u0448\u043b\u043e\u0433\u043e\u0434\u043d\u0438\u0445\u00a0\u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0439 Google \u0434\u043b\u044f Android \u0432\u043a\u043b\u044e\u0447\u0430\u043b\u0438 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 UNISOC. \u041f\u043e \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u044e Check Point, Google \u043f\u043b\u0430\u043d\u0438\u0440\u0443\u0435\u0442 \u043e\u043a\u043e\u043d\u0447\u0430\u0442\u0435\u043b\u044c\u043d\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0433\u0440\u044f\u0434\u0443\u0449\u0435\u043c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0438 Android. \u041f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a \u0436\u0435 \u0437\u0430\u043a\u0440\u044b\u043b \u0435\u0435 \u0432 \u043c\u0430\u0435, \u0432 \u0442\u043e\u043c \u0436\u0435 \u043c\u0435\u0441\u044f\u0446\u0435, \u043a\u043e\u0433\u0434\u0430 \u0441\u0442\u0430\u043b\u043e \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e \u043e \u0435\u0435 \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043e\u0432\u0430\u043d\u0438\u0438.\n\n\u041f\u0440\u0438\u043c\u0435\u0447\u0430\u0442\u0435\u043b\u044c\u043d\u043e, \u0447\u0442\u043e \u0440\u0430\u043d\u0435\u0435 \u0432 \u043c\u0430\u0440\u0442\u0435 2022 \u0433\u043e\u0434\u0430 Kryptowire \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0430, \u0447\u0442\u043e \u0441\u043c\u0430\u0440\u0442\u0444\u043e\u043d\u044b \u0441 \u0447\u0438\u043f\u0430\u043c\u0438 UNISOC \u0442\u0430\u043a\u0436\u0435 \u043f\u043e\u0434\u0432\u0435\u0440\u0436\u0435\u043d\u044b \u0434\u0440\u0443\u0433\u043e\u0439\u00a0\u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 (CVE-2022-27250), \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u043e\u0439 \u0441 \u043f\u0440\u0435\u0434\u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u043d\u044b\u043c \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0435\u043c, \u043a\u043e\u0442\u043e\u0440\u043e\u0435 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u043c\u0443 \u041f\u041e \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u0438\u043c\u0438 \u0434\u0430\u043d\u043d\u044b\u043c\u0438 \u0438 \u0444\u0443\u043d\u043a\u0446\u0438\u044f\u043c\u0438 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430.\n\n\u0414\u0430, \u0447\u0442\u043e \u0437\u0430\u043c\u0435\u0442\u0438\u043b\u0438, \u0432 \u043e\u0442\u0447\u0435\u0442\u0435 \u044f\u0432\u043d\u043e \u0437\u0430\u0431\u044b\u043b\u0438 \u0443\u043f\u043e\u043c\u044f\u043d\u0443\u0442\u044c, \u0447\u0442\u043e \u0432\u043e\u0432\u0441\u0435 \u043d\u0435 \u0431\u0430\u0433\u0430, \u0430 \u0432\u043f\u043e\u043b\u043d\u0435 \u0441\u0435\u0431\u0435 \u0444\u0438\u0442\u0447\u0430.", "creation_timestamp": "2022-06-03T13:45:04.000000Z"}, {"uuid": "a1c7d238-4d43-45ec-b3b3-feef05b0a7c2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-27255", "type": "seen", "source": "https://t.me/true_secator/3289", "content": "\u0421\u0435\u0440\u044c\u0435\u0437\u043d\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0430\u044f eCos SDK, \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u044b\u0439 \u0442\u0430\u0439\u0432\u0430\u043d\u044c\u0441\u043a\u043e\u0439 \u043f\u043e\u043b\u0443\u043f\u0440\u043e\u0432\u043e\u0434\u043d\u0438\u043a\u043e\u0432\u043e\u0439 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0435\u0439 Realtek, \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0434\u0432\u0435\u0440\u0433\u043d\u0443\u0442\u044c \u0441\u0435\u0442\u0435\u0432\u044b\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 \u043c\u043d\u043e\u0433\u0438\u0445 \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a\u043e\u0432 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u043c \u0430\u0442\u0430\u043a\u0430\u043c.\n\nCVE-2022-27255 \u0432\u044b\u0441\u043e\u043a\u043e\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u0438 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u0431\u0443\u0444\u0435\u0440\u0430 \u043d\u0430 \u043e\u0441\u043d\u043e\u0432\u0435 \u0441\u0442\u0435\u043a\u0430, \u043a\u043e\u0442\u043e\u0440\u043e\u0435 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0432\u044b\u0437\u0432\u0430\u0442\u044c \u0441\u0431\u043e\u0439 \u0438\u043b\u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u043d\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u0445 SDK.\n\n\u0410\u0442\u0430\u043a\u0430 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u0435\u043d\u0430 \u0447\u0435\u0440\u0435\u0437 \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441 WAN \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u044b\u0445 SIP-\u043f\u0430\u043a\u0435\u0442\u043e\u0432.\n\nRealtek eCos SDK \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442\u0441\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044f\u043c\u0438 \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0442\u043e\u0440\u043e\u0432, \u0442\u043e\u0447\u0435\u043a \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u0438 \u0440\u0435\u0442\u0440\u0430\u043d\u0441\u043b\u044f\u0442\u043e\u0440\u043e\u0432 \u043d\u0430 \u0431\u0430\u0437\u0435 SoC \u0441\u0435\u043c\u0435\u0439\u0441\u0442\u0432\u0430 RTL819x.\n\nSDK \u0440\u0435\u0430\u043b\u0438\u0437\u0443\u0435\u0442 \u0431\u0430\u0437\u043e\u0432\u044b\u0435 \u0444\u0443\u043d\u043a\u0446\u0438\u0438 \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0442\u043e\u0440\u0430, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441 \u0432\u0435\u0431-\u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0438 \u0441\u0435\u0442\u0435\u0432\u043e\u0439 \u0441\u0442\u0435\u043a. \n\nRealtek \u043f\u0440\u043e\u0438\u043d\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043b \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432 \u043e\u0431 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 eCos SDK \u0432 \u043c\u0430\u0440\u0442\u0435 \u0438 \u043e\u0431\u044a\u044f\u0432\u0438\u043b \u043e \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u0438 \u043f\u0430\u0442\u0447\u0430.\n\n\u041e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u0432\u0448\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 Faraday Security \u043e\u0442\u043c\u0435\u0442\u0438\u043b\u0438, \u0447\u0442\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0430 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e - \u043d\u0435\u043f\u043e\u0441\u0440\u0435\u0434\u0441\u0442\u0432\u0435\u043d\u043d\u043e \u0438\u0437 \u0418\u043d\u0442\u0435\u0440\u043d\u0435\u0442\u0430 - \u0434\u043b\u044f \u0432\u0437\u043b\u043e\u043c\u0430 \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044b\u0445 \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0442\u043e\u0440\u043e\u0432, \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0449\u0438\u0445 \u0441 \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0430\u043c\u0438 \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e. \n\n\u0414\u043b\u044f \u0443\u0441\u043f\u0435\u0448\u043d\u043e\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u043d\u0435 \u0442\u0440\u0435\u0431\u0443\u0435\u0442\u0441\u044f \u0432\u0437\u0430\u0438\u043c\u043e\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0435 \u0441 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u044b\u0439 \u043a\u043e\u0434 \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0447\u0430\u0441\u0442\u044c\u044e \u0441\u0435\u0442\u0435\u0432\u043e\u0433\u043e \u0441\u0442\u0435\u043a\u0430 - \u0435\u0441\u043b\u0438 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u043e \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u043e \u043a \u0418\u043d\u0442\u0435\u0440\u043d\u0435\u0442\u0443, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043d\u0443\u0436\u043d\u043e \u0442\u043e\u043b\u044c\u043a\u043e \u043e\u0442\u043f\u0440\u0430\u0432\u0438\u0442\u044c \u043f\u0430\u043a\u0435\u0442, \u0447\u0442\u043e\u0431\u044b \u0432\u0437\u044f\u0442\u044c \u043f\u043e\u0434 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u043e.\n\n\u0420\u0435\u0441\u0435\u0440\u0447\u0435\u0440\u044b \u0432\u044b\u0434\u0435\u043b\u0438\u043b\u0438 \u043e\u043a\u043e\u043b\u043e 20 \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a\u043e\u0432, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0439 SDK \u0434\u043b\u044f \u0441\u0432\u043e\u0438\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u043e\u0432, \u0432\u043a\u043b\u044e\u0447\u0430\u044f Tenda, Nexxt, Intelbras \u0438 D-Link.\n\n\u041f\u043e\u043a\u0430 \u043d\u0435 \u043f\u043e\u043d\u044f\u0442\u043d\u043e \u0431\u044b\u043b\u0430 \u043b\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0430 \u0432 \u0434\u0438\u043a\u043e\u0439 \u043f\u0440\u0438\u0440\u043e\u0434\u0435.\n\n\u041d\u043e \u0442\u043e\u0447\u043d\u043e \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e, \u0447\u0442\u043e \u0441\u043e\u0433\u043b\u0430\u0441\u043d\u043e \nShodan, \u0431\u043e\u043b\u0435\u0435 60 000 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0442\u043e\u0440\u043e\u0432 \u0441 \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u0439 \u043f\u0430\u043d\u0435\u043b\u044c\u044e \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u043d\u0430\u0445\u043e\u0434\u044f\u0442\u0441\u044f \u0432 \u0441\u0435\u0442\u0438.\n\n\u0410 \u0432\u0435\u0434\u044c \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e, \u0447\u0442\u043e \u0441\u0443\u0431\u044a\u0435\u043a\u0442\u044b \u0443\u0433\u0440\u043e\u0437, \u043a\u0430\u043a \u043f\u0440\u0430\u0432\u0438\u043b\u043e, \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u044b \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 Realtek SDK \u0432 \u0441\u0432\u043e\u0438\u0445 \u0430\u0442\u0430\u043a\u0430\u0445: \u0432 \u043f\u0440\u043e\u0448\u043b\u043e\u043c \u0433\u043e\u0434\u0443 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0437\u0430\u043c\u0435\u0442\u0438\u043b\u0438 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044e \u0434\u0435\u0444\u0435\u043a\u0442\u0430 \u0432\u0441\u0435\u0433\u043e \u0447\u0435\u0440\u0435\u0437 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0434\u043d\u0435\u0439 \u043f\u043e\u0441\u043b\u0435 \u0435\u0433\u043e \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u044f.", "creation_timestamp": "2022-08-12T19:07:37.000000Z"}, {"uuid": "f5398c5b-3ed9-4581-897b-a0dd72fbbf56", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-27254", "type": "published-proof-of-concept", "source": "https://t.me/NeKaspersky/2047", "content": "\u0412\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u043d\u043e\u0432\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0430\u0432\u0442\u043e\u043c\u043e\u0431\u0438\u043b\u044f\u0445 Honda \u0438 Acura, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0443\u0433\u043e\u043d\u044f\u0442\u044c \u0442\u0440\u0430\u043d\u0441\u043f\u043e\u0440\u0442\n\n\u0421\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u044b \u0432 \u0441\u0444\u0435\u0440\u0435 \u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u0430 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u043e\u0447\u0435\u0440\u0435\u0434\u043d\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043a\u0430\u0441\u0430\u044e\u0449\u0443\u044e\u0441\u044f \u0443\u0436\u0435 \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0430\u0432\u0442\u043e\u043c\u043e\u0431\u0438\u043b\u0435\u0439 \u0431\u0440\u0435\u043d\u0434\u043e\u0432 Honda \u0438 Acura. \u041e\u043d\u0430 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u044f\u0442\u044c \u0440\u0430\u0437\u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u043a\u0443 \u0434\u0432\u0435\u0440\u0435\u0439 \u0438 \u0437\u0430\u043f\u0443\u0441\u043a \u0441\u0438\u043b\u043e\u0432\u043e\u0433\u043e \u0430\u0433\u0440\u0435\u0433\u0430\u0442\u0430. \u041e\u0434\u043d\u0430\u043a\u043e \u0434\u043b\u044f \u044d\u0442\u043e\u0433\u043e \u043e\u043d\u0438 \u0434\u043e\u043b\u0436\u043d\u044b \u043d\u0430\u0445\u043e\u0434\u0438\u0442\u0441\u044f \u0440\u044f\u0434\u043e\u043c \u0441 \u0442\u0440\u0430\u043d\u0441\u043f\u043e\u0440\u0442\u043d\u044b\u043c \u0441\u0440\u0435\u0434\u0441\u0442\u0432\u043e\u043c.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0436\u0435 \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0430 \u0441\u0432\u043e\u0439  \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440 CVE-2022-27254 . \u041e\u0442\u043d\u043e\u0441\u0438\u0442\u0441\u044f \u043e\u043d\u0430 \u043a MitM-\u0430\u0442\u0430\u043a\u0430\u043c(man-in-the-middle \u2014 \u0447\u0435\u043b\u043e\u0432\u0435\u043a \u043f\u043e\u0441\u0435\u0440\u0435\u0434\u0438\u043d\u0435). \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0447\u0435\u043d\u044c \u043f\u0440\u043e\u0441\u0442\u0430, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043f\u0435\u0440\u0435\u0445\u0432\u0430\u0442\u044b\u0432\u0430\u0435\u0442 \u0441\u0438\u0433\u043d\u0430\u043b \u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442 \u0435\u0433\u043e \u043d\u0430 \u0441\u0432\u043e\u0451 \u0443\u0441\u043c\u043e\u0442\u0440\u0435\u043d\u0438\u0435. \u041f\u043e \u0441\u0443\u0442\u0438, \u0434\u0430\u043d\u043d\u044b\u0439 \u0441\u043f\u043e\u0441\u043e\u0431 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0438 \u043f\u043e \u0441\u0435\u0439 \u0434\u0435\u043d\u044c \u0434\u043b\u044f \u043a\u0440\u0430\u0436\u0438 \u0430\u0432\u0442\u043e\u043c\u043e\u0431\u0438\u043b\u0435\u0439 \u0438 \u0434\u0440\u0443\u0433\u0438\u0445 \u043c\u0430\u0440\u043e\u043a. \u0412\u043e\u0440\u044b \u0443\u0433\u043e\u043d\u044f\u044e\u0442 \u0430\u0432\u0442\u043e, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u043a\u043e\u0434\u0433\u0440\u0430\u0431\u0431\u0435\u0440\u044b. \u0421\u0443\u0442\u044c \u0440\u0430\u0431\u043e\u0442\u044b \u043a\u043e\u0434\u0433\u0440\u0430\u0431\u0431\u0435\u0440\u043e\u0432 \u2013 \u044d\u0442\u043e \u043f\u0435\u0440\u0435\u0445\u0432\u0430\u0442 \u0441\u0438\u0433\u043d\u0430\u043b\u0430 \u043e\u0442 \u0431\u0440\u0435\u043b\u043e\u043a\u0430, \u0435\u0433\u043e \u0437\u0430\u043f\u043e\u043c\u0438\u043d\u0430\u043d\u0438\u0435, \u043f\u043e\u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0435\u0435 \u043e\u0442\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044f \u0430\u0432\u0442\u043e\u0441\u0438\u0433\u043d\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u0438 \u043a\u0440\u0430\u0436\u0430 \u043c\u0430\u0448\u0438\u043d\u044b.\n\n\u041d\u043e \u0432\u0435\u0440\u043d\u0451\u043c\u0441\u044f \u043a \u043d\u0430\u0448\u0435\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438. \u041e\u043d\u0430 \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u043b\u0430 \u043f\u043e \u0431\u043e\u043b\u044c\u0448\u0435\u0439 \u0447\u0430\u0441\u0442\u0438 \u043c\u043e\u0434\u0435\u043b\u0438 Civic, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0431\u044b\u043b\u0438 \u0432\u044b\u043f\u0443\u0449\u0435\u043d\u044b \u0432 \u043f\u0435\u0440\u0438\u043e\u0434 2016 \u2013 2020 \u0433\u043e\u0434\u043e\u0432. \u0420\u0435\u0447\u044c \u0438\u0434\u0451\u0442 \u043e \u0442\u0430\u043a\u0438\u0445 \u043a\u043e\u043c\u043f\u043b\u0435\u043a\u0442\u0430\u0446\u0438\u044f\u0445 \u043a\u0430\u043a Type R/Si/EX-L/LX/Touring/EX. \u041f\u0440\u0438 \u044d\u0442\u043e\u043c \u043e\u0431\u043e\u0440\u0443\u0434\u043e\u0432\u0430\u043d\u0438\u0435, \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e\u0435 \u0434\u043b\u044f \u0430\u0442\u0430\u043a, \u0441\u043e\u0432\u0441\u0435\u043c \u043d\u0435\u043b\u044c\u0437\u044f \u043d\u0430\u0437\u0432\u0430\u0442\u044c \u0441\u043b\u043e\u0436\u043d\u044b\u043c: \u044d\u043a\u0441\u043f\u0435\u0440\u0442\u044b \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438 HackRF One SDR, \u043d\u043e\u0443\u0442\u0431\u0443\u043a, \u0443\u0447\u0435\u0442\u043d\u0443\u044e \u0437\u0430\u043f\u0438\u0441\u044c \u043d\u0430 FCCID.io, \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u041f\u041e Gqrx SDR \u0438 \u0442\u0443\u043b\u043a\u0438\u0442 GNURadio.\n\n\u0421\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u044b \u043f\u043e \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u0432 \u0441\u0432\u043e\u044e \u043e\u0447\u0435\u0440\u0435\u0434\u044c, \u0441\u043e\u0432\u0435\u0442\u0443\u044e\u0442 \u0430\u0432\u0442\u043e\u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044f\u043c \u0437\u0430\u043c\u0435\u043d\u0438\u0442\u044c \u0441\u0432\u043e\u044e \u043e\u0441\u043d\u043e\u0432\u043d\u0443\u044e \u0437\u0430\u0449\u0438\u0442\u0443 \u043d\u0430 \u0441\u0438\u0441\u0442\u0435\u043c\u0443 rolling codes (\u043f\u043b\u0430\u0432\u0430\u044e\u0449\u0438\u0435 \u043a\u043e\u0434\u044b).  \u0418\u043c\u0438 \u043f\u0440\u0435\u0434\u0443\u0441\u043c\u0430\u0442\u0440\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u0440\u044f\u0434 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0445 \u043d\u0430\u0431\u043e\u0440\u043e\u0432 \u0441\u0438\u0433\u043d\u0430\u043b\u043e\u0432 \u0432 \u0441\u043b\u0443\u0447\u0430\u0435 \u043a\u0430\u0436\u0434\u043e\u0439 \u043f\u0440\u043e\u0432\u043e\u0434\u0438\u043c\u043e\u0439 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438. \u042d\u0442\u0430 \u0441\u0438\u0441\u0442\u0435\u043c\u0430 \u0438\u0441\u043a\u043b\u044e\u0447\u0430\u0435\u0442 \u0438\u0445 \u0432\u043e\u0441\u043f\u0440\u043e\u0438\u0437\u0432\u0435\u0434\u0435\u043d\u0438\u0435 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c\u0438 \u0432 \u0434\u0430\u043b\u044c\u043d\u0435\u0439\u0448\u0435\u043c. \u0422\u0430\u043a\u0436\u0435 \u0441\u0442\u043e\u0438\u0442 \u043e\u0442\u043c\u0435\u0442\u0438\u0442\u044c \u0438 \u0442\u043e, \u0447\u0442\u043e \u043d\u0430 GitHub \u043f\u043e\u044f\u0432\u0438\u043b\u0438\u0441\u044c \u044d\u043a\u0441\u043f\u043e\u0439\u0442\u044b \u0434\u043b\u044f \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043f\u043e \u0434\u043e\u0432\u043e\u043b\u044c\u043d\u043e \u043f\u0440\u0438\u0435\u043c\u043b\u0435\u043c\u043e\u0439 \u0446\u0435\u043d\u0435 (\u0434\u043e 5$).\n\n\u0416\u0443\u0440\u043d\u0430\u043b\u0438\u0441\u0442\u044b \u0440\u0435\u0448\u0438\u043b\u0438 \u043e\u0431\u0440\u0430\u0442\u0438\u0442\u044c\u0441\u044f \u043a \u0430\u0432\u0442\u043e\u0431\u0440\u0435\u043d\u0434\u0443 Honda \u0437\u0430 \u0440\u0430\u0437\u044a\u044f\u0441\u043d\u0435\u043d\u0438\u044f\u043c\u0438 \u0434\u0430\u043d\u043d\u043e\u0439 \u0441\u0438\u0442\u0443\u0430\u0446\u0438\u0438. \u041a\u0430\u043a \u0437\u0430\u044f\u0432\u043b\u044f\u044e\u0442 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u0442\u0435\u043b\u0438 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438, \u0432 \u044d\u0442\u043e\u0442 \u0440\u0430\u0437 \u0442\u0430\u043a\u0438\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 \u0444\u0443\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u0443\u044e\u0442 \u0442\u043e\u043b\u044c\u043a\u043e \u0432\u043e\u0437\u043b\u0435 \u0430\u0432\u0442\u043e \u0438 \u0432 \u0441\u043b\u0443\u0447\u0430\u0435 \u0444\u0438\u0437\u0438\u0447\u0435\u0441\u043a\u043e\u0433\u043e \u043a\u043e\u043d\u0442\u0430\u043a\u0442\u0430 \u0441 \u0442\u0440\u0430\u043d\u0441\u043f\u043e\u0440\u0442\u043d\u044b\u043c\u0438 \u0441\u0440\u0435\u0434\u0441\u0442\u0432\u0430\u043c\u0438 \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0445 \u0436\u0435\u0440\u0442\u0432. \u0416\u0443\u0440\u043d\u0430\u043b\u0438\u0441\u0442\u0430\u043c\u0438 \u0431\u044b\u043b \u0441\u0434\u0435\u043b\u0430\u043d \u0432\u044b\u0432\u043e\u0434, \u0447\u0442\u043e \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u044b \u0444\u0438\u0440\u043c\u044b \u043d\u0435 \u043f\u0440\u043e\u0432\u043e\u0434\u0438\u043b\u0438 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0443 \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u044d\u0442\u043e\u0439 \u0430\u0442\u0430\u043a\u0438.\n\n\u0412 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 \u043c\u0435\u0440\u044b \u0437\u0430\u0449\u0438\u0442\u044b \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u044b \u043f\u043e \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043f\u043e\u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u043e\u0432\u0430\u043b\u0438 \u043e\u0442\u0434\u0430\u0442\u044c \u043f\u0440\u0435\u0434\u043f\u043e\u0447\u0442\u0435\u043d\u0438\u0435 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u043c \u043f\u0430\u0441\u0441\u0438\u0432\u043d\u043e\u0433\u043e \u0431\u0435\u0441\u043a\u043b\u044e\u0447\u0435\u0432\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0432 \u0441\u0438\u043b\u0443 \u0441\u0432\u043e\u0438\u0445 \u043e\u0441\u043e\u0431\u0435\u043d\u043d\u043e\u0441\u0442\u0435\u0439 \u043d\u0435 \u043f\u0440\u0435\u0434\u043f\u043e\u043b\u0430\u0433\u0430\u044e\u0442 \u043f\u043e\u0434\u043e\u0431\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439. \u0410 \u0430\u0432\u0442\u043e\u043c\u043e\u0431\u0438\u043b\u0438\u0441\u0442\u0430\u043c \u0441\u0442\u043e\u0438\u0442 \u0430\u043a\u0446\u0435\u043d\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0431\u043e\u043b\u044c\u0448\u0435\u0435 \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435 \u043f\u0440\u0438 \u0432\u044b\u0431\u043e\u0440\u0435 \u0430\u0432\u0442\u043e\u0442\u0440\u0430\u043d\u0441\u043f\u043e\u0440\u0442\u0430 \u043d\u0430 \u0437\u0430\u0449\u0438\u0442\u0435 \u0441\u0432\u043e\u0435\u0433\u043e \u00ab\u0436\u0435\u043b\u0435\u0437\u043d\u043e\u0433\u043e \u0434\u0440\u0443\u0433\u0430\u00bb.\n@NeKaspersky", "creation_timestamp": "2022-03-29T17:19:58.000000Z"}, {"uuid": "412f0628-de04-4718-bfca-d8470eaac6ac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-27255", "type": "published-proof-of-concept", "source": "https://t.me/crackcodes/1053", "content": "This repository contains the materials for the talk \"Exploring the hidden attack surface of OEM IoT devices: pwning thousands of routers with a vulnerability in Realtek\u2019s SDK for eCos OS.\", which was presented at\u00a0DEFCON30.\n\nhttps://github.com/infobyte/cve-2022-27255", "creation_timestamp": "2022-08-21T00:15:14.000000Z"}, {"uuid": "15294e34-e58b-4ba8-9934-dead7983d7f6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-27255", "type": "seen", "source": "https://t.me/crackcodes/1040", "content": "Updates On Hackbyte Forum:-\n\n1. Universidad IEU Mexico Leak Files\n2. SCS-Siberia \u201c\u0421\u041a\u0421-\u0421\u0438\u0431\u0438\u0440\u044c\u201d \u2013 Telecommunications Company Russia Leak\n3. D.RDynamicShellcode\n4. DashOverride\n5. CVE-2022-33980 - Apache Commons RCE can use url,dns,script key-words to connect any server\n6. lfimap - Local file inclusion discovery and exploitation tool\n7. MSMAP - Msmap is a Memory WebShell Generator\n8. CVE-2022-29968\n9. CVE-2022-21894 - Secure Boot Security Feature Bypass Vulnerability\n10. PowerHuntShares\n11. chrome_password Js script - Steal Get username & password from Chrome. (Now Only Windows)\n12. Fatebot - Fate is IRC botnet\n13. JNDI-Injection-Exploit-Plus\n14. CVE-2022-27255 - Realtek eCos SDK SIP ALG buffer overflow\n15. Bypass-Sandbox-Evasion\n16. blackhat-arsenal-tools\n17. Blackhat 2022 recap \u2013 cloud, eBPF, global conflicts, supply chain, and more\n18. Hacking Zyxel IP cameras to gain a root shell\n19. CobaltStrike4.5\n20. DUOCELL Leak\n21. KisasaCredit Leak\n\n\ud83d\udc49\ud83c\udffb\ud83d\udc49\ud83c\udffbAll Updates On :- https://bit.ly/3yRyah3 \ud83d\udc48\ud83c\udffb\ud83d\udc48\ud83c\udffb", "creation_timestamp": "2022-08-18T15:53:26.000000Z"}, {"uuid": "5a29f796-9a41-474a-94ef-d0bef94e8394", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-27254", "type": "published-proof-of-concept", "source": "https://t.me/BeholderIsHereHub/148", "content": "\u041d\u0435 \u043c\u043e\u0433 \u043e\u0431\u043e\u0439\u0442\u0438 \u0441\u0442\u043e\u0440\u043e\u043d\u043e\u0439 \u044d\u0442\u0443 CVE-2022-27254(Mitre).\n\u042d\u0442\u0430 CVE \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 Honda Civic(LX, EX, EX-L, Touring, Si, Type R) 2016-2020 \u0433\u043e\u0434\u043e\u0432 \u0432\u044b\u043f\u0443\u0441\u043a\u0430. \u0421\u0443\u0442\u044c \u0432 \u0447\u0451\u043c: \u0441\u0438\u0441\u0442\u0435\u043c\u0430 \u0431\u0435\u0441\u043a\u043b\u044e\u0447\u0435\u0432\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043d\u0430 \u0441\u0438\u0432\u0438\u043a\u0430\u0445 \u043f\u043e\u0441\u044b\u043b\u0430\u0435\u0442 \u043e\u0434\u0438\u043d \u0438 \u0442\u043e\u0442 \u0436\u0435 \u0440\u0430\u0434\u0438\u043e\u0447\u0430\u0441\u0442\u043e\u0442\u043d\u044b\u0439 \u0441\u0438\u0433\u043d\u0430\u043b \u0434\u043b\u044f \u043a\u0430\u0436\u0434\u043e\u0433\u043e \u0437\u0430\u043f\u0440\u043e\u0441\u0430 \u043d\u0430 \u043e\u0442\u043a\u0440\u044b\u0442\u0438\u0435 \u0434\u0432\u0435\u0440\u0438, \u0447\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043f\u0440\u043e\u0432\u043e\u0434\u0438\u0442\u044c \u043f\u043e\u0432\u0442\u043e\u0440\u043d\u0443\u044e \u0430\u0442\u0430\u043a\u0443, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0443\u044e \u0441 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u043e\u0439 CVE-2019-20626.\n\n\u0418\u0437 \u0430\u0440\u0441\u0435\u043d\u0430\u043b\u0430, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043f\u043e\u0442\u0440\u0435\u0431\u043e\u0432\u0430\u043b\u0441\u044f \u0434\u043b\u044f \u0434\u043e\u043a\u0430\u0437\u0430\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u0430 \u043a\u043e\u043d\u0446\u0435\u043f\u0446\u0438\u0438(PoC):\n\u2316FCCID.io\n\u2316HackRF One\n\u2316Gqrx\n\u2316GNURadio\n\u0421\u043e\u0431\u0441\u0442\u0432\u0435\u043d\u043d\u043e, \u0432\u043e\u0442 \u0438 \u0441\u0430\u043c PoC:       \n\u25b6\ufe0f \u0442\u044b\u043a(github)\n\nI couldn't ignore this CVE-2022-27254 (Mitre).\nThis CVE affects the 2016-2020 Honda Civic(LX, EX, EX-L, Touring, Si, Type R). The bottom line is this: the keyless access system on Civics sends the same radio frequency signal for each request to open the door, which allows for a repeat attack related to the CVE-2019-20626 problem .\nFrom the arsenal that was required for Proof of Concept(PoC):\n\u2316FCC ID.io\n\u2316HackRF One\n\u2316Gqrx\n\u2316GNURadio\nActually, here is the PoC itself:\n\u25b6\ufe0f click(github)\n\n#cve #poc #car #hackrf", "creation_timestamp": "2022-04-20T17:08:38.000000Z"}, {"uuid": "50d50c1b-e40c-486e-a7bc-fccf2ec80895", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-2725", "type": "seen", "source": "https://t.me/cibsecurity/47774", "content": "\u203c CVE-2022-2725 \u203c\n\nA vulnerability was found in SourceCodester Company Website CMS. It has been rated as problematic. Affected by this issue is some unknown functionality of the file add-blog.php. The manipulation leads to cross site scripting. The attack may be launched remotely. VDB-205838 is the identifier assigned to this vulnerability.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-08-09T12:24:40.000000Z"}, {"uuid": "50bdfd55-2b99-423a-a4cf-492c42e63364", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-27255", "type": "seen", "source": "https://t.me/cibsecurity/47317", "content": "\u203c CVE-2022-27255 \u203c\n\nIn Realtek eCos RSDK 1.5.7p1 and MSDK 4.9.4p1, the SIP ALG function that rewrites SDP data has a stack-based buffer overflow. This allows an attacker to remotely execute code without authentication via a crafted SIP packet that contains malicious SDP data.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-08-01T16:16:54.000000Z"}, {"uuid": "670ed8a8-735f-4aca-ae04-b3fd4f566d45", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-27254", "type": "seen", "source": "https://t.me/cibsecurity/39470", "content": "\u203c CVE-2022-27254 \u203c\n\nThe remote keyless system on Honda Civic 2018 vehicles sends the same RF signal for each door-open request, which allows for a replay attack, a related issue to CVE-2019-20626.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-03-24T01:29:10.000000Z"}, {"uuid": "eadc2d99-279e-487e-9025-8b72020f2f09", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-27258", "type": "seen", "source": "https://t.me/cibsecurity/40884", "content": "\u203c CVE-2022-27258 \u203c\n\nMultiple Cross-Site Scripting (XSS) vulnerabilities in Hubzilla 7.0.3 and earlier allows remote attacker to include arbitrary web script or HTML via the rpath parameter.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-04-15T20:20:20.000000Z"}, {"uuid": "9a716bb8-92c2-45c2-9aaa-406f8047929d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-27256", "type": "seen", "source": "https://t.me/cibsecurity/40727", "content": "\u203c CVE-2022-27256 \u203c\n\nAn open redirect vulnerability in Hubzilla before version 7.2 allows remote attackers to redirect a logged in user to an arbitrary URL via the rpath parameter.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-04-13T18:17:59.000000Z"}, {"uuid": "99385ef0-6ed6-4b1f-bf17-d2cdd3d72b8a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-27254", "type": "published-proof-of-concept", "source": "https://t.me/CNArsenal/161", "content": "https://github.com/nonamecoder/CVE-2022-27254\n\n\u672c\u7530\u8fdc\u7a0b\u65e0\u94a5\u5319\u7cfb\u7edf\u6f0f\u6d1e\u7684PoC\u2026\u2026", "creation_timestamp": "2023-06-06T05:02:13.000000Z"}, {"uuid": "387cd5f0-4b14-44b1-9eff-0d65bd0840a4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-27254", "type": "seen", "source": "https://t.me/CyberSecurityTechnologies/5786", "content": "#Analytics\nTop 10 Most Used Vulns of the Month (Mar 1-31)\n\nCVE-2022-1096 - Type Confusion in V8\nhttps://github.com/Maverick-cmd/Chrome-and-Edge-Version-Dumper\nCVE-2022-0847 - Dirty Pipe Vuln\nhttps://t.me/CyberSecurityTechnologies/5560\nCVE-2022-0778 - OpenSSL Illegal x.509 certificate construction\nhttps://t.me/CyberSecurityTechnologies/5692\nCVE-2022-0492 - Privilege escalation vuln causing container escape\nhttps://sysdig.com/blog/detecting-mitigating-cve-2022-0492-sysdig\nCVE-2022-22947 - Spring Cloud Gateway RCE\nhttps://t.me/CyberSecurityTechnologies/5554\nCVE-2022-22963 - Spring Core RCE\nhttps://t.me/CyberSecurityTechnologies/5711\nCVE-2022-25636 - net/netfilter/nf_dup_netdev.c in the Linux kernel <5.6.10 allows local users to gain privileges because of a heap out-of-bounds write\nhttps://t.me/CyberSecurityTechnologies/5570\nCVE-2022-27254 - Vuln in Honda's Remote Keyless System\nhttps://github.com/nonamecoder/CVE-2022-27254\nCVE-2022-0609 - https://blog.google/threat-analysis-group/countering-threats-north-korea", "creation_timestamp": "2022-04-11T11:00:21.000000Z"}, {"uuid": "a634ab2d-f922-4390-9c7f-512a1a430790", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-27255", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/6591", "content": "#exploit\n1. CVE-2022-36446:\nSoftware Package Updates RCE (Auth) on Webmin <1.997\nhttps://github.com/p0dalirius/CVE-2022-36446-Webmin-Software-Package-Updates-RCE\n\n2. CVE-2022-27255:\nRealtek eCos SDK SIP ALG Buffer Overflow\nhttps://github.com/infobyte/cve-2022-27255\n\n3. CVE-2022-35741:\nApache CloudStack SAML XXE Injection\nhttps://xz.aliyun.com/t/11600", "creation_timestamp": "2022-08-14T13:05:01.000000Z"}, {"uuid": "7fa8af43-081e-491f-b224-8084b7951687", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-27255", "type": "published-proof-of-concept", "source": "https://t.me/CVEhub/1282", "content": "\ud83d\udc7eCVE SERVICE \ud83c\udff7#CVE\nMumber: CVE-2022-27255\nGithub: https://github.com/infobyte/cve-2022-27255\nDescribe: \nIn Realtek eCos RSDK 1.5.7p1 and MSDK 4.9.4p1, the SIP ALG function that rewrites SDP data has a stack-based buffer overflow. This allows an attacker to remotely execute code without authentication via a crafted SIP packet that contains malicious SDP data.", "creation_timestamp": "2026-08-02T00:01:14.553577Z"}, {"uuid": "689c6374-d0b5-458b-910d-c11a657c7dd9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-27255", "type": "published-proof-of-concept", "source": "https://t.me/CVEhub/1282", "content": "\ud83d\udc7eCVE SERVICE \ud83c\udff7#CVE\nMumber: CVE-2022-27255\nGithub: https://github.com/infobyte/cve-2022-27255\nDescribe: \nIn Realtek eCos RSDK 1.5.7p1 and MSDK 4.9.4p1, the SIP ALG function that rewrites SDP data has a stack-based buffer overflow. This allows an attacker to remotely execute code without authentication via a crafted SIP packet that contains malicious SDP data.", "creation_timestamp": "2026-08-01T06:00:04.365800Z"}, {"uuid": "84c310b3-1850-43e8-b08f-5b6cc73d0f2b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-27254", "type": "published-proof-of-concept", "source": "https://t.me/Fzzee/431", "content": "\u0641\u064a\u062f\u064a\u0648 \u062a\u0648\u0636\u064a\u062d \u0627\u0633\u062a\u063a\u0644\u0627\u0644 \u062b\u063a\u0631\u0629 \u0641\u064a \u0627\u0644\u0633\u064a\u0627\u0631\u0627\u062a \u0647\u0648\u0627\u0646\u062f\n\n\n \u0627\u0633\u062a\u063a\u0644\u0627\u0644 \u062b\u063a\u0631\u0629 \u0647\u0648\u0646\u062f\u0627 \u0641\u064a \u0646\u0638\u0627\u0645 \u0647\u0648\u0646\u062f\u0627 \u0639\u0646 \u0628\u0639\u062f \u0628\u062f\u0648\u0646 \u0645\u0641\u062a\u0627\u062d (CVE-2022-27254)\n\n\u0627\u0644\u0628\u0631\u0627\u0645\u062c \u0627\u0644\u062b\u0627\u0628\u062a\u0629 \u0644\u0641\u062a\u062d \u0623\u064a \u0648\u062c\u0645\u064a\u0639 \u0645\u0646\u0627\u0641\u0630 \u0634\u062d\u0646 \u0645\u0631\u0643\u0628\u0627\u062a Tesla \u0641\u064a \u0627\u0644\u0646\u0637\u0627\u0642!", "creation_timestamp": "2022-12-16T17:12:27.000000Z"}, {"uuid": "09e061b8-fd02-493c-81ea-d881a258f5b6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-27255", "type": "seen", "source": "https://t.me/onelab1337/2315", "content": "#exploit\n1. CVE-2022-36446:\nSoftware Package Updates RCE (Auth) on Webmin <1.997\nhttps://github.com/p0dalirius/CVE-2022-36446-Webmin-Software-Package-Updates-RCE\n\n2. CVE-2022-27255:\nRealtek eCos SDK SIP ALG Buffer Overflow\nhttps://github.com/infobyte/cve-2022-27255\n\n3. CVE-2022-35741:\nApache CloudStack SAML XXE Injection\nhttps://xz.aliyun.com/t/11600", "creation_timestamp": "2026-08-09T04:29:26.914430Z"}, {"uuid": "9ebb4633-e523-4d08-b991-5705eb93857e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-27255", "type": "published-proof-of-concept", "source": "https://t.me/onelab1337/2315", "content": "#exploit\n1. CVE-2022-36446:\nSoftware Package Updates RCE (Auth) on Webmin <1.997\nhttps://github.com/p0dalirius/CVE-2022-36446-Webmin-Software-Package-Updates-RCE\n\n2. CVE-2022-27255:\nRealtek eCos SDK SIP ALG Buffer Overflow\nhttps://github.com/infobyte/cve-2022-27255\n\n3. CVE-2022-35741:\nApache CloudStack SAML XXE Injection\nhttps://xz.aliyun.com/t/11600", "creation_timestamp": "2026-08-10T00:00:28.942739Z"}, {"uuid": "484b3c38-cb94-48b0-93e4-96da2bbbb858", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-27255", "type": "published-proof-of-concept", "source": "https://t.me/strykerapp/31983", "content": "https://github.com/stryker-project/CVE-2022-27255-checker\n\u043c\u043e\u0436\u0435\u0442\u0435 \u0434\u043e\u0431\u0430\u0432\u043b\u044f\u0442\u044c \u0432 \u0441\u0442\u0440\u0430\u0439\u043a\u0435\u0440 \u043f\u043e\u043a\u0430 \u0436\u0434\u0451\u0442\u0435 \u0440\u0435\u043b\u0438\u0437)", "creation_timestamp": "2026-07-16T07:00:04.742989Z"}, {"uuid": "b7f0c20c-9200-416b-92f5-4165cfa76b2b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-27255", "type": "published-proof-of-concept", "source": "https://t.me/strykerapp/31070", "content": "CVE-2022-27255 - Realtek eCos SDK SIP ALG buffer overflow\n\n\u0421\u043e\u0432\u0441\u0435\u043c \u043d\u043e\u0432\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u044f\u0432\u0438\u043b\u0430\u0441\u044c \u0432 \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u043e\u043c \u0434\u043e\u0441\u0442\u0443\u043f\u0435 \u0438 \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f RCE \u0434\u043b\u044f \u0431\u043e\u043b\u044c\u0448\u0438\u043d\u0441\u0442\u0432\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 \u043d\u0430 RTL819x. \u041f\u0440\u043e\u0434\u0443\u043a\u0442\u044b \u0431\u043e\u043b\u0435\u0435 50 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u0439 (Asus, A-Link, Beeline, Belkin, Buffalo, D-Link, Edison, Huawei, LG, Logitec, MT-Link, Netgear, Smartlink, UPVEL, ZTE , Zyxel) \u0442\u0430\u043a\u0438\u0435 \u043a\u0430\u043a: \u0440\u043e\u0443\u0442\u0435\u0440\u044b, \u0430\u0439\u043f\u0438 \u043a\u0430\u043c\u0435\u0440\u044b, iot \u0438 \u0434\u0440\u0443\u0433\u0438\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 \u043f\u043e\u0434\u0432\u0435\u0440\u0436\u0435\u043d\u044b \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438.\n\n\u0414\u0430\u0436\u0435 \u0435\u0441\u043b\u0438 \u043d\u0430 \u043d\u0438\u0445 \u043d\u0435 \u0432\u043a\u043b\u044e\u0447\u0435\u043d web \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441. \u041d\u043e \u044d\u0442\u043e \u0432\u044b \u043c\u043e\u0433\u043b\u0438 \u0432\u0438\u0434\u0435\u0442\u044c \u0432 \u0434\u0440\u0443\u0433\u0438\u0445 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0430\u0445.\n\nStryker - \u0434\u0430\u0441\u0442 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u043f\u043e\u0442\u0435\u0441\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0441\u0432\u043e\u0438 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 \u043d\u0430 \u044d\u0442\u0443 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0436\u0435 \u0432 \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0435\u043c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0438 3.0!\n\n\u041d\u0443 \u0430 \u0435\u0441\u043b\u0438 \u043a\u043e\u043c\u0443 \u0442\u043e \u043d\u0430\u0434\u043e \u0440\u0430\u043d\u044c\u0448\u0435, \u044f \u043d\u0430\u043f\u043e\u043c\u043d\u044e \u0447\u0442\u043e \u0432 \u0441\u0442\u0440\u0430\u0439\u043a\u0435\u0440\u0435 \u0432\u044b \u0441\u0430\u043c\u0438 \u043c\u043e\u0436\u0435\u0442\u0435 \u0434\u043e\u0431\u0430\u0432\u0438\u0442\u044c \u043f\u043e\u0447\u0442\u0438 \u043b\u044e\u0431\u043e\u0439 \u0441\u043a\u0430\u043d\u0435\u0440. \u0421\u0441\u044b\u043b\u043a\u0443 \u043d\u0430 \u0444\u0430\u0439\u043b\u0438\u043a \u044f \u043e\u0441\u0442\u0430\u0432\u043b\u044e \u0442\u0443\u0442.", "creation_timestamp": "2026-07-16T07:00:04.781898Z"}, {"uuid": "f8ba2e31-851e-45ff-aa1b-dc763071f1ba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-27255", "type": "published-proof-of-concept", "source": "https://t.me/strykerapp/31983", "content": "https://github.com/stryker-project/CVE-2022-27255-checker\n\u043c\u043e\u0436\u0435\u0442\u0435 \u0434\u043e\u0431\u0430\u0432\u043b\u044f\u0442\u044c \u0432 \u0441\u0442\u0440\u0430\u0439\u043a\u0435\u0440 \u043f\u043e\u043a\u0430 \u0436\u0434\u0451\u0442\u0435 \u0440\u0435\u043b\u0438\u0437)", "creation_timestamp": "2026-07-17T00:00:56.375322Z"}, {"uuid": "c49951a5-f60d-40e9-a00e-69035f660db7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-27255", "type": "published-proof-of-concept", "source": "https://t.me/strykerapp/31070", "content": "CVE-2022-27255 - Realtek eCos SDK SIP ALG buffer overflow\n\n\u0421\u043e\u0432\u0441\u0435\u043c \u043d\u043e\u0432\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u044f\u0432\u0438\u043b\u0430\u0441\u044c \u0432 \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u043e\u043c \u0434\u043e\u0441\u0442\u0443\u043f\u0435 \u0438 \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f RCE \u0434\u043b\u044f \u0431\u043e\u043b\u044c\u0448\u0438\u043d\u0441\u0442\u0432\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 \u043d\u0430 RTL819x. \u041f\u0440\u043e\u0434\u0443\u043a\u0442\u044b \u0431\u043e\u043b\u0435\u0435 50 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u0439 (Asus, A-Link, Beeline, Belkin, Buffalo, D-Link, Edison, Huawei, LG, Logitec, MT-Link, Netgear, Smartlink, UPVEL, ZTE , Zyxel) \u0442\u0430\u043a\u0438\u0435 \u043a\u0430\u043a: \u0440\u043e\u0443\u0442\u0435\u0440\u044b, \u0430\u0439\u043f\u0438 \u043a\u0430\u043c\u0435\u0440\u044b, iot \u0438 \u0434\u0440\u0443\u0433\u0438\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 \u043f\u043e\u0434\u0432\u0435\u0440\u0436\u0435\u043d\u044b \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438.\n\n\u0414\u0430\u0436\u0435 \u0435\u0441\u043b\u0438 \u043d\u0430 \u043d\u0438\u0445 \u043d\u0435 \u0432\u043a\u043b\u044e\u0447\u0435\u043d web \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441. \u041d\u043e \u044d\u0442\u043e \u0432\u044b \u043c\u043e\u0433\u043b\u0438 \u0432\u0438\u0434\u0435\u0442\u044c \u0432 \u0434\u0440\u0443\u0433\u0438\u0445 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0430\u0445.\n\nStryker - \u0434\u0430\u0441\u0442 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u043f\u043e\u0442\u0435\u0441\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0441\u0432\u043e\u0438 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 \u043d\u0430 \u044d\u0442\u0443 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0436\u0435 \u0432 \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0435\u043c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0438 3.0!\n\n\u041d\u0443 \u0430 \u0435\u0441\u043b\u0438 \u043a\u043e\u043c\u0443 \u0442\u043e \u043d\u0430\u0434\u043e \u0440\u0430\u043d\u044c\u0448\u0435, \u044f \u043d\u0430\u043f\u043e\u043c\u043d\u044e \u0447\u0442\u043e \u0432 \u0441\u0442\u0440\u0430\u0439\u043a\u0435\u0440\u0435 \u0432\u044b \u0441\u0430\u043c\u0438 \u043c\u043e\u0436\u0435\u0442\u0435 \u0434\u043e\u0431\u0430\u0432\u0438\u0442\u044c \u043f\u043e\u0447\u0442\u0438 \u043b\u044e\u0431\u043e\u0439 \u0441\u043a\u0430\u043d\u0435\u0440. \u0421\u0441\u044b\u043b\u043a\u0443 \u043d\u0430 \u0444\u0430\u0439\u043b\u0438\u043a \u044f \u043e\u0441\u0442\u0430\u0432\u043b\u044e \u0442\u0443\u0442.", "creation_timestamp": "2026-07-17T00:00:56.406112Z"}, {"uuid": "533cf673-226a-4e12-ae1f-af10b145c511", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-27255", "type": "seen", "source": "https://t.me/EchelonEyes/573", "content": "\u041c\u0438\u043b\u043b\u0438\u043e\u043d\u044b \u0441\u0435\u0442\u0435\u0432\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 \u0441 \u0447\u0438\u043f\u0430\u043c\u0438 Realtek \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u0442 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c\n\n\u0412 \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442\u0435 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442 \u0434\u043b\u044f \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0435\u0439 \u0441\u0435\u0442\u0435\u0432\u044b\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 \u0441 \u0441\u0438\u0441\u0442\u0435\u043c\u043e\u0439 Realtek RTL819x \u043d\u0430 \u043a\u0440\u0438\u0441\u0442\u0430\u043b\u043b\u0435 (SoC). \u0411\u044b\u043b\u043e \u043f\u0440\u043e\u0434\u0435\u043c\u043e\u043d\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u043d\u043e, \u043a\u0430\u043a \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u043e, \u0434\u0430\u0436\u0435 \u0435\u0441\u043b\u0438 \u0444\u0443\u043d\u043a\u0446\u0438\u0438 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u043e\u0442\u043a\u043b\u044e\u0447\u0435\u043d\u044b.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2022-27255 \u0432 \u0441\u043b\u0443\u0447\u0430\u0435 \u0443\u0441\u043f\u0435\u0448\u043d\u043e\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0432\u0437\u043b\u043e\u043c\u0430\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0445 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u0439 \u043e\u0440\u0438\u0433\u0438\u043d\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u043e\u0431\u043e\u0440\u0443\u0434\u043e\u0432\u0430\u043d\u0438\u044f \u2013 \u043e\u0442 \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0442\u043e\u0440\u043e\u0432 \u0438 \u0442\u043e\u0447\u0435\u043a \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u0434\u043e \u043f\u043e\u0432\u0442\u043e\u0440\u0438\u0442\u0435\u043b\u0435\u0439 \u0441\u0438\u0433\u043d\u0430\u043b\u043e\u0432.\n\n\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0443 \u0432 SDK Realtek \u0434\u043b\u044f \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b eCos \u0441 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u043c \u0438\u0441\u0445\u043e\u0434\u043d\u044b\u043c \u043a\u043e\u0434\u043e\u043c \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 4 \u0441\u0442\u0443\u0434\u0435\u043d\u0442\u0430 \u0438\u0437 \u0410\u0440\u0433\u0435\u043d\u0442\u0438\u043d\u044b \u0438 \u0440\u0430\u0441\u043a\u0440\u044b\u043b\u0438 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438 \u043d\u0430 \u0445\u0430\u043a\u0435\u0440\u0441\u043a\u043e\u0439 \u043a\u043e\u043d\u0444\u0435\u0440\u0435\u043d\u0446\u0438\u0438 DEFCON.\n\nCVE-2022-27255 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 9.8) \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435\u043c \u0431\u0443\u0444\u0435\u0440\u0430 \u043d\u0430 \u043e\u0441\u043d\u043e\u0432\u0435 \u0441\u0442\u0435\u043a\u0430, \u0447\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u044b\u0435 SIP-\u043f\u0430\u043a\u0435\u0442\u044b \u0441 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u043c\u0438 \u0434\u0430\u043d\u043d\u044b\u043c\u0438 SDP.\n\n\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0441\u0435\u0440\u0438\u0438 rtl819x-eCos-v0.x \u0438 rtl819x-eCos-v1.x. \u0421\u043e\u043e\u0431\u0449\u0430\u0435\u0442\u0441\u044f, \u0447\u0442\u043e \u0435\u0435 \u043c\u043e\u0436\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0447\u0435\u0440\u0435\u0437 \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441 WAN.\n\n\u041e\u0441\u043e\u0431\u0435\u043d\u043d\u043e\u0441\u0442\u044c \u0434\u0430\u043d\u043d\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0441\u043e\u0441\u0442\u043e\u0438\u0442 \u0432 \u0442\u043e\u043c, \u0447\u0442\u043e \u043e\u043d\u0430 \u043d\u0435 \u0442\u0440\u0435\u0431\u0443\u0435\u0442 \u0432\u0437\u0430\u0438\u043c\u043e\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f \u0441 \u0436\u0435\u0440\u0442\u0432\u043e\u0439: \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u0437\u043d\u0430\u0442\u044c \u0432\u043d\u0435\u0448\u043d\u0438\u0439 IP-\u0430\u0434\u0440\u0435\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0433\u043e \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430.\n\n\u041d\u0435\u0441\u043c\u043e\u0442\u0440\u044f \u043d\u0430 \u0442\u043e, \u0447\u0442\u043e \u0432\u0435\u043d\u0434\u043e\u0440 \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0435\u0449\u0435 \u0432 \u043c\u0430\u0440\u0442\u0435, \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0443\u0432\u0435\u0440\u0435\u043d\u044b, \u0447\u0442\u043e \u0432\u0440\u044f\u0434 \u043b\u0438 \u0438\u0445 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u044f\u0442 \u0432\u0441\u0435 \u043c\u0438\u043b\u043b\u0438\u043e\u043d\u044b \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432. \u042d\u0442\u043e \u0441\u0432\u044f\u0437\u0430\u043d\u043e \u0441 \u0442\u0435\u043c, \u0447\u0442\u043e \u043c\u043d\u043e\u0433\u0438\u0435 \u0438\u0437 \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a\u043e\u0432, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0439 Realtek SDK \u0434\u043b\u044f \u043e\u0431\u043e\u0440\u0443\u0434\u043e\u0432\u0430\u043d\u0438\u044f \u043d\u0430 \u0431\u0430\u0437\u0435 SoC RTL819x, \u0435\u0449\u0435 \u043d\u0435 \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0438 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0438.\n\n\u0412\u0435\u0440\u0441\u0438\u044f SoC RTL819xD \u043f\u0440\u0438\u0441\u0443\u0442\u0441\u0442\u0432\u043e\u0432\u0430\u043b\u0430 \u0432 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u0445 \u0431\u043e\u043b\u0435\u0435 \u0447\u0435\u043c 60 \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a\u043e\u0432, \u0441\u0440\u0435\u0434\u0438 \u043d\u0438\u0445 ASUSTek, Belkin, Buffalo, D-Link, Edimax, TRENDnet \u0438 Zyxel.\n\n\u0418\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0438: \n\nhttps://www.realtek.com/images/safe-report/Realtek_APRouter_SDK_Advisory-CVE-2022-27255.pdf\n\nhttps://github.com/infobyte/cve-2022-27255/tree/main/exploits_nexxt \n\n#\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c #Realtek", "creation_timestamp": "2026-07-26T02:02:42.664820Z"}, {"uuid": "7561d1e7-3b15-48cb-be52-f2305c94d96f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-27255", "type": "seen", "source": "https://t.me/EchelonEyes/573", "content": "\u041c\u0438\u043b\u043b\u0438\u043e\u043d\u044b \u0441\u0435\u0442\u0435\u0432\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 \u0441 \u0447\u0438\u043f\u0430\u043c\u0438 Realtek \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u0442 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c\n\n\u0412 \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442\u0435 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442 \u0434\u043b\u044f \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0435\u0439 \u0441\u0435\u0442\u0435\u0432\u044b\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 \u0441 \u0441\u0438\u0441\u0442\u0435\u043c\u043e\u0439 Realtek RTL819x \u043d\u0430 \u043a\u0440\u0438\u0441\u0442\u0430\u043b\u043b\u0435 (SoC). \u0411\u044b\u043b\u043e \u043f\u0440\u043e\u0434\u0435\u043c\u043e\u043d\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u043d\u043e, \u043a\u0430\u043a \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u043e, \u0434\u0430\u0436\u0435 \u0435\u0441\u043b\u0438 \u0444\u0443\u043d\u043a\u0446\u0438\u0438 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u043e\u0442\u043a\u043b\u044e\u0447\u0435\u043d\u044b.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2022-27255 \u0432 \u0441\u043b\u0443\u0447\u0430\u0435 \u0443\u0441\u043f\u0435\u0448\u043d\u043e\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0432\u0437\u043b\u043e\u043c\u0430\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0445 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u0439 \u043e\u0440\u0438\u0433\u0438\u043d\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u043e\u0431\u043e\u0440\u0443\u0434\u043e\u0432\u0430\u043d\u0438\u044f \u2013 \u043e\u0442 \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0442\u043e\u0440\u043e\u0432 \u0438 \u0442\u043e\u0447\u0435\u043a \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u0434\u043e \u043f\u043e\u0432\u0442\u043e\u0440\u0438\u0442\u0435\u043b\u0435\u0439 \u0441\u0438\u0433\u043d\u0430\u043b\u043e\u0432.\n\n\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0443 \u0432 SDK Realtek \u0434\u043b\u044f \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b eCos \u0441 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u043c \u0438\u0441\u0445\u043e\u0434\u043d\u044b\u043c \u043a\u043e\u0434\u043e\u043c \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 4 \u0441\u0442\u0443\u0434\u0435\u043d\u0442\u0430 \u0438\u0437 \u0410\u0440\u0433\u0435\u043d\u0442\u0438\u043d\u044b \u0438 \u0440\u0430\u0441\u043a\u0440\u044b\u043b\u0438 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438 \u043d\u0430 \u0445\u0430\u043a\u0435\u0440\u0441\u043a\u043e\u0439 \u043a\u043e\u043d\u0444\u0435\u0440\u0435\u043d\u0446\u0438\u0438 DEFCON.\n\nCVE-2022-27255 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 9.8) \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435\u043c \u0431\u0443\u0444\u0435\u0440\u0430 \u043d\u0430 \u043e\u0441\u043d\u043e\u0432\u0435 \u0441\u0442\u0435\u043a\u0430, \u0447\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u044b\u0435 SIP-\u043f\u0430\u043a\u0435\u0442\u044b \u0441 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u043c\u0438 \u0434\u0430\u043d\u043d\u044b\u043c\u0438 SDP.\n\n\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0441\u0435\u0440\u0438\u0438 rtl819x-eCos-v0.x \u0438 rtl819x-eCos-v1.x. \u0421\u043e\u043e\u0431\u0449\u0430\u0435\u0442\u0441\u044f, \u0447\u0442\u043e \u0435\u0435 \u043c\u043e\u0436\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0447\u0435\u0440\u0435\u0437 \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441 WAN.\n\n\u041e\u0441\u043e\u0431\u0435\u043d\u043d\u043e\u0441\u0442\u044c \u0434\u0430\u043d\u043d\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0441\u043e\u0441\u0442\u043e\u0438\u0442 \u0432 \u0442\u043e\u043c, \u0447\u0442\u043e \u043e\u043d\u0430 \u043d\u0435 \u0442\u0440\u0435\u0431\u0443\u0435\u0442 \u0432\u0437\u0430\u0438\u043c\u043e\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f \u0441 \u0436\u0435\u0440\u0442\u0432\u043e\u0439: \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u0437\u043d\u0430\u0442\u044c \u0432\u043d\u0435\u0448\u043d\u0438\u0439 IP-\u0430\u0434\u0440\u0435\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0433\u043e \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430.\n\n\u041d\u0435\u0441\u043c\u043e\u0442\u0440\u044f \u043d\u0430 \u0442\u043e, \u0447\u0442\u043e \u0432\u0435\u043d\u0434\u043e\u0440 \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0435\u0449\u0435 \u0432 \u043c\u0430\u0440\u0442\u0435, \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0443\u0432\u0435\u0440\u0435\u043d\u044b, \u0447\u0442\u043e \u0432\u0440\u044f\u0434 \u043b\u0438 \u0438\u0445 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u044f\u0442 \u0432\u0441\u0435 \u043c\u0438\u043b\u043b\u0438\u043e\u043d\u044b \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432. \u042d\u0442\u043e \u0441\u0432\u044f\u0437\u0430\u043d\u043e \u0441 \u0442\u0435\u043c, \u0447\u0442\u043e \u043c\u043d\u043e\u0433\u0438\u0435 \u0438\u0437 \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a\u043e\u0432, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0439 Realtek SDK \u0434\u043b\u044f \u043e\u0431\u043e\u0440\u0443\u0434\u043e\u0432\u0430\u043d\u0438\u044f \u043d\u0430 \u0431\u0430\u0437\u0435 SoC RTL819x, \u0435\u0449\u0435 \u043d\u0435 \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0438 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0438.\n\n\u0412\u0435\u0440\u0441\u0438\u044f SoC RTL819xD \u043f\u0440\u0438\u0441\u0443\u0442\u0441\u0442\u0432\u043e\u0432\u0430\u043b\u0430 \u0432 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u0445 \u0431\u043e\u043b\u0435\u0435 \u0447\u0435\u043c 60 \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a\u043e\u0432, \u0441\u0440\u0435\u0434\u0438 \u043d\u0438\u0445 ASUSTek, Belkin, Buffalo, D-Link, Edimax, TRENDnet \u0438 Zyxel.\n\n\u0418\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0438: \n\nhttps://www.realtek.com/images/safe-report/Realtek_APRouter_SDK_Advisory-CVE-2022-27255.pdf\n\nhttps://github.com/infobyte/cve-2022-27255/tree/main/exploits_nexxt \n\n#\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c #Realtek", "creation_timestamp": "2026-07-27T00:01:19.085444Z"}, {"uuid": "8d8d73a4-b682-4c59-8d90-1f9d3c44e598", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-27255", "type": "published-proof-of-concept", "source": "https://t.me/EchelonEyes/573", "content": "\u041c\u0438\u043b\u043b\u0438\u043e\u043d\u044b \u0441\u0435\u0442\u0435\u0432\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 \u0441 \u0447\u0438\u043f\u0430\u043c\u0438 Realtek \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u0442 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c\n\n\u0412 \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442\u0435 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442 \u0434\u043b\u044f \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0435\u0439 \u0441\u0435\u0442\u0435\u0432\u044b\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 \u0441 \u0441\u0438\u0441\u0442\u0435\u043c\u043e\u0439 Realtek RTL819x \u043d\u0430 \u043a\u0440\u0438\u0441\u0442\u0430\u043b\u043b\u0435 (SoC). \u0411\u044b\u043b\u043e \u043f\u0440\u043e\u0434\u0435\u043c\u043e\u043d\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u043d\u043e, \u043a\u0430\u043a \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u043e, \u0434\u0430\u0436\u0435 \u0435\u0441\u043b\u0438 \u0444\u0443\u043d\u043a\u0446\u0438\u0438 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u043e\u0442\u043a\u043b\u044e\u0447\u0435\u043d\u044b.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2022-27255 \u0432 \u0441\u043b\u0443\u0447\u0430\u0435 \u0443\u0441\u043f\u0435\u0448\u043d\u043e\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0432\u0437\u043b\u043e\u043c\u0430\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0445 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u0439 \u043e\u0440\u0438\u0433\u0438\u043d\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u043e\u0431\u043e\u0440\u0443\u0434\u043e\u0432\u0430\u043d\u0438\u044f \u2013 \u043e\u0442 \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0442\u043e\u0440\u043e\u0432 \u0438 \u0442\u043e\u0447\u0435\u043a \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u0434\u043e \u043f\u043e\u0432\u0442\u043e\u0440\u0438\u0442\u0435\u043b\u0435\u0439 \u0441\u0438\u0433\u043d\u0430\u043b\u043e\u0432.\n\n\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0443 \u0432 SDK Realtek \u0434\u043b\u044f \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b eCos \u0441 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u043c \u0438\u0441\u0445\u043e\u0434\u043d\u044b\u043c \u043a\u043e\u0434\u043e\u043c \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 4 \u0441\u0442\u0443\u0434\u0435\u043d\u0442\u0430 \u0438\u0437 \u0410\u0440\u0433\u0435\u043d\u0442\u0438\u043d\u044b \u0438 \u0440\u0430\u0441\u043a\u0440\u044b\u043b\u0438 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438 \u043d\u0430 \u0445\u0430\u043a\u0435\u0440\u0441\u043a\u043e\u0439 \u043a\u043e\u043d\u0444\u0435\u0440\u0435\u043d\u0446\u0438\u0438 DEFCON.\n\nCVE-2022-27255 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 9.8) \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435\u043c \u0431\u0443\u0444\u0435\u0440\u0430 \u043d\u0430 \u043e\u0441\u043d\u043e\u0432\u0435 \u0441\u0442\u0435\u043a\u0430, \u0447\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u044b\u0435 SIP-\u043f\u0430\u043a\u0435\u0442\u044b \u0441 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u043c\u0438 \u0434\u0430\u043d\u043d\u044b\u043c\u0438 SDP.\n\n\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0441\u0435\u0440\u0438\u0438 rtl819x-eCos-v0.x \u0438 rtl819x-eCos-v1.x. \u0421\u043e\u043e\u0431\u0449\u0430\u0435\u0442\u0441\u044f, \u0447\u0442\u043e \u0435\u0435 \u043c\u043e\u0436\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0447\u0435\u0440\u0435\u0437 \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441 WAN.\n\n\u041e\u0441\u043e\u0431\u0435\u043d\u043d\u043e\u0441\u0442\u044c \u0434\u0430\u043d\u043d\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0441\u043e\u0441\u0442\u043e\u0438\u0442 \u0432 \u0442\u043e\u043c, \u0447\u0442\u043e \u043e\u043d\u0430 \u043d\u0435 \u0442\u0440\u0435\u0431\u0443\u0435\u0442 \u0432\u0437\u0430\u0438\u043c\u043e\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f \u0441 \u0436\u0435\u0440\u0442\u0432\u043e\u0439: \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u0437\u043d\u0430\u0442\u044c \u0432\u043d\u0435\u0448\u043d\u0438\u0439 IP-\u0430\u0434\u0440\u0435\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0433\u043e \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430.\n\n\u041d\u0435\u0441\u043c\u043e\u0442\u0440\u044f \u043d\u0430 \u0442\u043e, \u0447\u0442\u043e \u0432\u0435\u043d\u0434\u043e\u0440 \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0435\u0449\u0435 \u0432 \u043c\u0430\u0440\u0442\u0435, \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0443\u0432\u0435\u0440\u0435\u043d\u044b, \u0447\u0442\u043e \u0432\u0440\u044f\u0434 \u043b\u0438 \u0438\u0445 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u044f\u0442 \u0432\u0441\u0435 \u043c\u0438\u043b\u043b\u0438\u043e\u043d\u044b \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432. \u042d\u0442\u043e \u0441\u0432\u044f\u0437\u0430\u043d\u043e \u0441 \u0442\u0435\u043c, \u0447\u0442\u043e \u043c\u043d\u043e\u0433\u0438\u0435 \u0438\u0437 \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a\u043e\u0432, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0439 Realtek SDK \u0434\u043b\u044f \u043e\u0431\u043e\u0440\u0443\u0434\u043e\u0432\u0430\u043d\u0438\u044f \u043d\u0430 \u0431\u0430\u0437\u0435 SoC RTL819x, \u0435\u0449\u0435 \u043d\u0435 \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0438 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0438.\n\n\u0412\u0435\u0440\u0441\u0438\u044f SoC RTL819xD \u043f\u0440\u0438\u0441\u0443\u0442\u0441\u0442\u0432\u043e\u0432\u0430\u043b\u0430 \u0432 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u0445 \u0431\u043e\u043b\u0435\u0435 \u0447\u0435\u043c 60 \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a\u043e\u0432, \u0441\u0440\u0435\u0434\u0438 \u043d\u0438\u0445 ASUSTek, Belkin, Buffalo, D-Link, Edimax, TRENDnet \u0438 Zyxel.\n\n\u0418\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0438: \n\nhttps://www.realtek.com/images/safe-report/Realtek_APRouter_SDK_Advisory-CVE-2022-27255.pdf\n\nhttps://github.com/infobyte/cve-2022-27255/tree/main/exploits_nexxt \n\n#\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c #Realtek", "creation_timestamp": "2026-07-28T10:00:05.431652Z"}, {"uuid": "ceb3d58c-6436-4dd2-ba85-331d1914625b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-27255", "type": "published-proof-of-concept", "source": "https://t.me/EchelonEyes/573", "content": "\u041c\u0438\u043b\u043b\u0438\u043e\u043d\u044b \u0441\u0435\u0442\u0435\u0432\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 \u0441 \u0447\u0438\u043f\u0430\u043c\u0438 Realtek \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u0442 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c\n\n\u0412 \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442\u0435 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442 \u0434\u043b\u044f \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0435\u0439 \u0441\u0435\u0442\u0435\u0432\u044b\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 \u0441 \u0441\u0438\u0441\u0442\u0435\u043c\u043e\u0439 Realtek RTL819x \u043d\u0430 \u043a\u0440\u0438\u0441\u0442\u0430\u043b\u043b\u0435 (SoC). \u0411\u044b\u043b\u043e \u043f\u0440\u043e\u0434\u0435\u043c\u043e\u043d\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u043d\u043e, \u043a\u0430\u043a \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u043e, \u0434\u0430\u0436\u0435 \u0435\u0441\u043b\u0438 \u0444\u0443\u043d\u043a\u0446\u0438\u0438 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u043e\u0442\u043a\u043b\u044e\u0447\u0435\u043d\u044b.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2022-27255 \u0432 \u0441\u043b\u0443\u0447\u0430\u0435 \u0443\u0441\u043f\u0435\u0448\u043d\u043e\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0432\u0437\u043b\u043e\u043c\u0430\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0445 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u0439 \u043e\u0440\u0438\u0433\u0438\u043d\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u043e\u0431\u043e\u0440\u0443\u0434\u043e\u0432\u0430\u043d\u0438\u044f \u2013 \u043e\u0442 \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0442\u043e\u0440\u043e\u0432 \u0438 \u0442\u043e\u0447\u0435\u043a \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u0434\u043e \u043f\u043e\u0432\u0442\u043e\u0440\u0438\u0442\u0435\u043b\u0435\u0439 \u0441\u0438\u0433\u043d\u0430\u043b\u043e\u0432.\n\n\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0443 \u0432 SDK Realtek \u0434\u043b\u044f \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b eCos \u0441 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u043c \u0438\u0441\u0445\u043e\u0434\u043d\u044b\u043c \u043a\u043e\u0434\u043e\u043c \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 4 \u0441\u0442\u0443\u0434\u0435\u043d\u0442\u0430 \u0438\u0437 \u0410\u0440\u0433\u0435\u043d\u0442\u0438\u043d\u044b \u0438 \u0440\u0430\u0441\u043a\u0440\u044b\u043b\u0438 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438 \u043d\u0430 \u0445\u0430\u043a\u0435\u0440\u0441\u043a\u043e\u0439 \u043a\u043e\u043d\u0444\u0435\u0440\u0435\u043d\u0446\u0438\u0438 DEFCON.\n\nCVE-2022-27255 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 9.8) \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435\u043c \u0431\u0443\u0444\u0435\u0440\u0430 \u043d\u0430 \u043e\u0441\u043d\u043e\u0432\u0435 \u0441\u0442\u0435\u043a\u0430, \u0447\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u044b\u0435 SIP-\u043f\u0430\u043a\u0435\u0442\u044b \u0441 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u043c\u0438 \u0434\u0430\u043d\u043d\u044b\u043c\u0438 SDP.\n\n\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0441\u0435\u0440\u0438\u0438 rtl819x-eCos-v0.x \u0438 rtl819x-eCos-v1.x. \u0421\u043e\u043e\u0431\u0449\u0430\u0435\u0442\u0441\u044f, \u0447\u0442\u043e \u0435\u0435 \u043c\u043e\u0436\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0447\u0435\u0440\u0435\u0437 \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441 WAN.\n\n\u041e\u0441\u043e\u0431\u0435\u043d\u043d\u043e\u0441\u0442\u044c \u0434\u0430\u043d\u043d\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0441\u043e\u0441\u0442\u043e\u0438\u0442 \u0432 \u0442\u043e\u043c, \u0447\u0442\u043e \u043e\u043d\u0430 \u043d\u0435 \u0442\u0440\u0435\u0431\u0443\u0435\u0442 \u0432\u0437\u0430\u0438\u043c\u043e\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f \u0441 \u0436\u0435\u0440\u0442\u0432\u043e\u0439: \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u0437\u043d\u0430\u0442\u044c \u0432\u043d\u0435\u0448\u043d\u0438\u0439 IP-\u0430\u0434\u0440\u0435\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0433\u043e \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430.\n\n\u041d\u0435\u0441\u043c\u043e\u0442\u0440\u044f \u043d\u0430 \u0442\u043e, \u0447\u0442\u043e \u0432\u0435\u043d\u0434\u043e\u0440 \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0435\u0449\u0435 \u0432 \u043c\u0430\u0440\u0442\u0435, \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0443\u0432\u0435\u0440\u0435\u043d\u044b, \u0447\u0442\u043e \u0432\u0440\u044f\u0434 \u043b\u0438 \u0438\u0445 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u044f\u0442 \u0432\u0441\u0435 \u043c\u0438\u043b\u043b\u0438\u043e\u043d\u044b \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432. \u042d\u0442\u043e \u0441\u0432\u044f\u0437\u0430\u043d\u043e \u0441 \u0442\u0435\u043c, \u0447\u0442\u043e \u043c\u043d\u043e\u0433\u0438\u0435 \u0438\u0437 \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a\u043e\u0432, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0439 Realtek SDK \u0434\u043b\u044f \u043e\u0431\u043e\u0440\u0443\u0434\u043e\u0432\u0430\u043d\u0438\u044f \u043d\u0430 \u0431\u0430\u0437\u0435 SoC RTL819x, \u0435\u0449\u0435 \u043d\u0435 \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0438 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0438.\n\n\u0412\u0435\u0440\u0441\u0438\u044f SoC RTL819xD \u043f\u0440\u0438\u0441\u0443\u0442\u0441\u0442\u0432\u043e\u0432\u0430\u043b\u0430 \u0432 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u0445 \u0431\u043e\u043b\u0435\u0435 \u0447\u0435\u043c 60 \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a\u043e\u0432, \u0441\u0440\u0435\u0434\u0438 \u043d\u0438\u0445 ASUSTek, Belkin, Buffalo, D-Link, Edimax, TRENDnet \u0438 Zyxel.\n\n\u0418\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0438: \n\nhttps://www.realtek.com/images/safe-report/Realtek_APRouter_SDK_Advisory-CVE-2022-27255.pdf\n\nhttps://github.com/infobyte/cve-2022-27255/tree/main/exploits_nexxt \n\n#\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c #Realtek", "creation_timestamp": "2026-07-29T00:00:39.911889Z"}, {"uuid": "32496744-f8a1-4f0a-8901-c5c19261452a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-27255", "type": "seen", "source": "https://t.me/CVEhub/1282", "content": "\ud83d\udc7eCVE SERVICE \ud83c\udff7#CVE\nMumber: CVE-2022-27255\nGithub: https://github.com/infobyte/cve-2022-27255\nDescribe: \nIn Realtek eCos RSDK 1.5.7p1 and MSDK 4.9.4p1, the SIP ALG function that rewrites SDP data has a stack-based buffer overflow. This allows an attacker to remotely execute code without authentication via a crafted SIP packet that contains malicious SDP data.", "creation_timestamp": "2026-07-29T12:01:03.020189Z"}, {"uuid": "b16431fa-46f0-4ef3-81a0-0839e1130349", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-27255", "type": "seen", "source": "https://t.me/CVEhub/1282", "content": "\ud83d\udc7eCVE SERVICE \ud83c\udff7#CVE\nMumber: CVE-2022-27255\nGithub: https://github.com/infobyte/cve-2022-27255\nDescribe: \nIn Realtek eCos RSDK 1.5.7p1 and MSDK 4.9.4p1, the SIP ALG function that rewrites SDP data has a stack-based buffer overflow. This allows an attacker to remotely execute code without authentication via a crafted SIP packet that contains malicious SDP data.", "creation_timestamp": "2026-07-30T00:01:44.049440Z"}, {"uuid": "ed5fc7c9-e884-451a-a032-127d6af095f8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-27254", "type": "seen", "source": "https://t.me/cissp/5722", "content": "Analytics\nTop 10 Most Used Vulns of the Month\n\nCVE-2022-1096 - Type Confusion in V8\nhttps://github.com/Maverick-cmd/Chrome-and-Edge-Version-Dumper\n\nCVE-2022-0847 - Dirty Pipe Vuln\n\nCVE-2022-0778 - OpenSSL Illegal x.509 certificate construction\n\nCVE-2022-0492 - Privilege escalation vuln causing container escape\nhttps://sysdig.com/blog/detecting-mitigating-cve-2022-0492-sysdig\n\nCVE-2022-22947 - Spring Cloud Gateway RCE\n\nCVE-2022-22963 - Spring Core RCE\n\nCVE-2022-25636 - net/netfilter/nf_dup_netdev.c in the Linux kernel <5.6.10 allows local users to gain privileges because of a heap out-of-bounds write\n\nCVE-2022-27254 - Vuln in Honda's Remote Keyless System\nhttps://github.com/nonamecoder/CVE-2022-27254\n\nCVE-2022-0609 - https://blog.google/threat-analysis-group/countering-threats-north-korea", "creation_timestamp": "2026-09-01T17:00:30.369967Z"}, {"uuid": "39186b39-0dbd-4015-9607-14aa08cdeb5d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-27254", "type": "seen", "source": "https://t.me/hacking_Attack/71855", "content": "hacking: security in practice\nAlternative for flipper zero for Honda cve-2022-27254 hack?\n\nI'm trying to put out a content to make people aware of the cve-2022-27254 vulnerability, but I don't want to spend $400 on a HackerRf or $300 on a flipper zero (they're out of stock). Any alternatives for me to test this hack and make it work without having to spend an eye?\n\nsubmitted by /u/The_SuperTeacher \n[link] [comments]\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-01T20:01:20.917215Z"}, {"uuid": "1b4583ec-6328-4cca-a39d-b677e2912b4e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-27254", "type": "seen", "source": "https://t.me/hacking_Attack/54031", "content": "Kali Linux Tutorials\nCVE-2022-27254 : PoC For Vulnerability In Honda\u2019s Remote Keyless System\n\nCVE-2022-27254 is a PoC for vulnerability in Honda\u2019s Remote Keyless System(CVE-2022-27254).\n\nSummary\n\nThis is a proof of concept for\u00a0CVE-2022-27254, wherein the remote keyless system on various Honda vehicles send the same, unencrypted RF signal for each door-open, door-close, boot-open and remote start(if applicable). This allows for an attacker to eavesdrop on the request and conduct a replay attack.\n\nVehicles Affected\n\n\u2022 2016-2020 Honda Civic(LX, EX, EX-L, Touring, Si, Type R)\n\nImportant Notes\n\n\u2022Key fob FCC ID: KR5V2X\n\u2022Key fob frequency: 433.215MHz\n\u2022Key fob modulation: FSK\n\nTools used\n\n\u2022FCCID.io\n\u2022HackRF One\n\u2022Gqrx\n\u2022GNURadio\n\nPrevention\n\n* Manufacturers:\n* Manufacturers must implement Rolling Codes, otherwise known as hopping code. It is a security technology commonly used to provide a fresh code for each authentication of a remote keyless entry (RKE) or passive keyless entry (PKE) system.\n\n* Consumers:\n* Utilize a Faraday Pouch for the key fob.\n* Use the PKE as opposed to the RKE, this would make it significantly harder for an attacker to clone/read the signal due to the proximity they would need to be at to do so.\nThe precautions mentioned above ARE NOT foolproof \n\nIf you believe that you are a victim of this attack, the only current mitigation is to reset your key fob at the dealership.\nDownload\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-01T20:01:38.339411Z"}, {"uuid": "4fbf142a-e94b-4519-91e0-cef2ad5ccdf1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-27254", "type": "seen", "source": "https://t.me/hacking_Attack/48219", "content": "KitPloit - PenTest Tools!\nCVE-2022-27254 - PoC For Vulnerability In Honda's Remote Keyless System\n\nhttps://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiCXFYec5Q2ebxFWm-Yo494Ag7n0XJZz-7pV-6hdgf5Lm8KWzhB1kWvT7sp9_fJyPgyaG-6B-JufZnkf3NThbM37mILf3YJB5nJCyPE3RD7tOf7OS-u7BRzhMrn2IaZVV_wSqjIz4INlgJ9w-kEIVBTFsq6sCMoWa0dxIaI0EiZ_hdZrHrDz4FlhFjw/w400-h320/CVE-2022-27254.png PoC for vulnerability in Honda's Remote Keyless System(CVE-2022-27254) Disclaimer:For educational purposes only.  Kindly note that the discoverers for this vulnerability are Ayyappan Rajesh, a student at UMass Dartmouth  and HackingIntoYourHeart.\n\nOthers mentioned in this repository are credited for the support that they have provided but have played no active role in any research conducted related to this finding.  If looking to publish these findings elsewhere, please refrain from associating this with any other persons, companies or institutions without any explicit approval. Summary:This is a proof of concept for CVE-2022-27254, wherein the remote keyless system on various Honda vehicles send the same, unencrypted RF signal for each door-open, door-close, boot-open and remote start(if applicable). This allows for an attacker to eavesdrop on the request and conduct a replay attack. POC videosVehicles Affected:\u2022 2016-2020 Honda Civic(LX, EX, EX-L, Touring, Si, Type R) Important Notes:\u2022Key fob FCC ID: KR5V2X\n\n\u2022Key fob frequency: 433.215MHz\n\n\u2022Key fob modulation: FSK Tools used:\u2022FCCID.io\n\u2022HackRF One\n\u2022Gqrx\n\u2022GNURadio Prevention:* \nManufacturers:\n\n1. Manufacturers must implement Rolling Codes, otherwise known as hopping code. It is a security technology commonly used to provide a fresh code for each authentication of a remote keyless entry (RKE) or passive keyless entry (PKE) system.\n\n* \nConsumers:\n\n1. Utilize a Faraday Pouch for the key fob.\n2. Use the PKE as opposed to the RKE, this would make it significantly harder for an attacker to clone/read the signal due to the proximity they would need to be at to do so.\nThe precautions mentioned above ARE NOT foolproof\n\nIf you believe that you are a victim of this attack, the only current mitigation is to reset your key fob at the dealership. Credits:\u2022Ayyappan Rajesh(nonamecoder)\n\n\u2022HackingIntoYourHeart Special thanks to:\u2022 My professor :Prof. Hong Liu\n\n\u2022 My mentor:Sam Curry\n\n\u2022My professor :Prof. Ruolin Zhou References:\u2022https://www.youtube.com/watch?v=1RipwqJG50c\n\n\u2022https://attack.mitre.org/techniques/T1040/ Download CVE-2022-27254\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-01T20:01:49.382785Z"}, {"uuid": "044242aa-9493-414c-a9e4-3bd3243c1022", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-27254", "type": "seen", "source": "https://t.me/hacking_Attack/48211", "content": "CVE-2022-27254 - PoC For Vulnerability In Honda's Remote Keyless System\nhttp://www.kitploit.com/2022/03/cve-2022-27254-poc-for-vulnerability-in.html\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-01T20:01:49.482230Z"}, {"uuid": "b053ae8f-d5b5-4477-b70a-da65d189731e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-27254", "type": "seen", "source": "https://t.me/hacking_Attack/48213", "content": "PoC for vulnerability (https://www.kitploit.com/search/label/Vulnerability) in Honda's Remote Keyless System(CVE-2022-27254)  Disclaimer:  For educational purposes only.  Kindly note that the discoverers for this vulnerability are Ayyappan Rajesh (https://www.linkedin.com/in/ayyappan-rajesh/), a student at UMass Dartmouth  and HackingIntoYourHeart (https://github.com/HackingIntoYourHeart/).  Others mentioned in this repository are credited for the support that they have provided but have played no active role in any   research (https://www.kitploit.com/search/label/Research) conducted related to this finding.  If looking to publish these findings elsewhere, please refrain from associating this with any other persons, companies or institutions without any explicit approval.  Summary:  This is a proof of concept (https://www.kitploit.com/search/label/Proof%20Of%20Concept) for CVE-2022-27254 (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27254), wherein the remote keyless system on various Honda vehicles send the same, unencrypted RF signal for each door-open, door-close, boot-open and remote start(if applicable). This allows for an attacker to eavesdrop (https://www.kitploit.com/search/label/Eavesdrop) on the request and conduct a replay attack.\nPOC videos (https://github.com/nonamecoder/CVE-2022-27254#poc-videos)  Vehicles Affected:  \u2022 2016-2020 Honda Civic(LX, EX, EX-L, Touring, Si, Type R)  Important Notes:   \u2022Key fob FCC ID: KR5V2X\n\n \u2022Key fob frequency: 433.215MHz\n\n \u2022Key fob modulation: FSK\n  Tools used:         \u2022FCCID.io\n       \u2022HackRF One\n       \u2022Gqrx\n       \u2022GNURadio\n  Prevention:      Manufacturers:    Manufacturers must implement Rolling Codes, otherwise known as hopping code. It is a security technology commonly used to provide a fresh code for each authentication (https://www.kitploit.com/search/label/Authentication) of a remote keyless entry (RKE) or passive keyless entry (PKE) system.        Consumers:    Utilize a Faraday Pouch for the key fob.  Use the PKE as opposed to the RKE, this would make it significantly harder for an attacker to clone/read the signal due to the proximity they would need to be at to do so.        The precautions mentioned above ARE NOT foolproofIf you believe that you are a victim of this attack, the only current mitigation is to reset your key fob at the dealership.  Credits:  \u2022Ayyappan Rajesh(nonamecoder) (https://www.linkedin.com/in/ayyappan-rajesh/)  \u2022HackingIntoYourHeart (https://github.com/HackingIntoYourHeart/)  Special thanks to:  \u2022 My professor :Prof. Hong Liu (https://www.umassd.edu/directory/hliu/)  \u2022 My mentor:Sam Curry (https://www.linkedin.com/in/currysam)  \u2022My professor :Prof. Ruolin Zhou (https://www.umassd.edu/directory/rzhou1/)  References:  \u2022https://www.youtube.com/watch?v=1RipwqJG50c  \u2022https://attack.mitre.org/techniques/T1040/  \n\nDownload CVE-2022-27254 (https://github.com/nonamecoder/CVE-2022-27254)\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-01T20:01:49.525250Z"}, {"uuid": "df2abf0d-f91b-4956-82e7-525ed3d239ed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-27255", "type": "exploited", "source": "https://t.me/DNSPODT/317", "content": "Realtek\u82af\u7247\u5b58\u5728\u6f0f\u6d1e,\u5141\u8bb8\u8fdc\u7a0bUDP\u5305\u6267\u884c\u4efb\u610f\u6307\u4ee4\uff0c\u5373\u5c06\u51fa\u73b0\u5728\u91ce\u5229\u7528\n\n\u6f0f\u6d1eID:CVE-2022-27255\n\n\u7248\u672c\uff1a\nrtl819x-eCos-v0.x \u7cfb\u5217rtl819x-eCos-v1.x \u7cfb\u5217\nRealtek AP-Router SDK\n\n\u5a01\u80c1\u5206\u6570:9.8\n\n\u6f0f\u6d1e\u7531\u963f\u6839\u5ef7\u7f51\u7edc\u5b89\u5168\u516c\u53f8 Faraday Security \u7684\u7814\u7a76\u4eba\u5458\u5728 Realtek \u7684\u5f00\u6e90 eCos \u64cd\u4f5c\u7cfb\u7edf SDK \u4e2d\u53d1\u73b0\n\n\u8be5\u6f0f\u6d1e\u5141\u8bb8\u91cd\u5199 SDP \u6570\u636e\u7684 SIP ALG \u51fd\u6570\u5b58\u5728\u57fa\u4e8e\u5806\u6808\u7684\u7f13\u51b2\u533a\u6ea2\u51fa,\u4e25\u91cd\u5206\u6570\u4e3a9.8\n\n\u8fdc\u7a0b\u653b\u51fb\u8005\u53ef\u4ee5\u4f7f\u7528\u5e26\u6709\u6076\u610f SDP \u6570\u636e\u7684\u7279\u5236 SIP \u6570\u636e\u5305\u4efb\u610f\u6267\u884c\u4ee3\u7801\uff0c\u8fd9\u4e2a\u8fc7\u7a0b\u5b8c\u5168\u65e0\u9700\u8eab\u4efd\u9a8c\u8bc1\u3002\u6b64\u5916\uff0c\u653b\u51fb\u8005\u8fd8\u53ef\u4ee5\u901a\u8fc7 WAN \u63a5\u53e3\u5229\u7528\u6f0f\u6d1e [\u5305\u62ec\u5f00\u542f\u62d2\u7edd\u5916\u90e8\u8bbf\u95ee]\n\n\u653b\u51fb\u8005\u53ea\u9700\u6709\u6f0f\u6d1e\u8bbe\u5907\u7684\u5916\u90e8 IP \u5730\u5740\uff0c\u5c31\u53ef\u4ee5 \u5229\u7528CVE-2022-27255 \u6f0f\u6d1e\uff0c\u4e0d\u9700\u8981\u4e0e\u7528\u6237\u4ea4\u4e92\n\u653b\u51fb\u8005\u53ef\u4ee5\u4f7f\u7528\u5355\u4e2a UDP \u6570\u636e\u5305\u5230\u4efb\u610f\u7aef\u53e3\u6765\u5229\u7528\u8be5\u6f0f\u6d1e\uff1b\n\n\u6b64\u6f0f\u6d1e\u53ef\u80fd\u5bf9\u8def\u7531\u5668\u5f71\u54cd\u6700\u5927\uff0c\u4f46\u4e00\u4e9b\u57fa\u4e8e Realtek SDK \u7684\u7269\u8054\u7f51\u8bbe\u5907\u4e5f\u53ef\u80fd\u53d7\u5230\u5f71\u54cd [\u5305\u62ec\u8f6f\u8def\u7531]\n\n\u8be5\u6f0f\u6d1e\u5141\u8bb8\u653b\u51fb\u8005\u6267\u884c\u4ee5\u4e0b\u64cd\u4f5c:\n\u5bfc\u81f4\u8bbe\u5907\u5d29\u6e83\uff0c\u6267\u884c\u4efb\u610f\u4ee3\u7801\uff0c\u5efa\u7acb\u6301\u4e45\u6027\u7684\u540e\u95e8\uff0c\u6539\u53d8\u7f51\u7edc\u6d41\u91cf\u7684\u8def\u7ebf\uff0c\u62e6\u622a\u7f51\u7edc\u6d41\u91cf", "creation_timestamp": "2026-09-01T22:00:05.080642Z"}, {"uuid": "9dfa5c0c-4849-4311-84e1-7a88dd55efbb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-27255", "type": "exploited", "source": "https://t.me/DNSPODT/317", "content": "Realtek\u82af\u7247\u5b58\u5728\u6f0f\u6d1e,\u5141\u8bb8\u8fdc\u7a0bUDP\u5305\u6267\u884c\u4efb\u610f\u6307\u4ee4\uff0c\u5373\u5c06\u51fa\u73b0\u5728\u91ce\u5229\u7528\n\n\u6f0f\u6d1eID:CVE-2022-27255\n\n\u7248\u672c\uff1a\nrtl819x-eCos-v0.x \u7cfb\u5217rtl819x-eCos-v1.x \u7cfb\u5217\nRealtek AP-Router SDK\n\n\u5a01\u80c1\u5206\u6570:9.8\n\n\u6f0f\u6d1e\u7531\u963f\u6839\u5ef7\u7f51\u7edc\u5b89\u5168\u516c\u53f8 Faraday Security \u7684\u7814\u7a76\u4eba\u5458\u5728 Realtek \u7684\u5f00\u6e90 eCos \u64cd\u4f5c\u7cfb\u7edf SDK \u4e2d\u53d1\u73b0\n\n\u8be5\u6f0f\u6d1e\u5141\u8bb8\u91cd\u5199 SDP \u6570\u636e\u7684 SIP ALG \u51fd\u6570\u5b58\u5728\u57fa\u4e8e\u5806\u6808\u7684\u7f13\u51b2\u533a\u6ea2\u51fa,\u4e25\u91cd\u5206\u6570\u4e3a9.8\n\n\u8fdc\u7a0b\u653b\u51fb\u8005\u53ef\u4ee5\u4f7f\u7528\u5e26\u6709\u6076\u610f SDP \u6570\u636e\u7684\u7279\u5236 SIP \u6570\u636e\u5305\u4efb\u610f\u6267\u884c\u4ee3\u7801\uff0c\u8fd9\u4e2a\u8fc7\u7a0b\u5b8c\u5168\u65e0\u9700\u8eab\u4efd\u9a8c\u8bc1\u3002\u6b64\u5916\uff0c\u653b\u51fb\u8005\u8fd8\u53ef\u4ee5\u901a\u8fc7 WAN \u63a5\u53e3\u5229\u7528\u6f0f\u6d1e [\u5305\u62ec\u5f00\u542f\u62d2\u7edd\u5916\u90e8\u8bbf\u95ee]\n\n\u653b\u51fb\u8005\u53ea\u9700\u6709\u6f0f\u6d1e\u8bbe\u5907\u7684\u5916\u90e8 IP \u5730\u5740\uff0c\u5c31\u53ef\u4ee5 \u5229\u7528CVE-2022-27255 \u6f0f\u6d1e\uff0c\u4e0d\u9700\u8981\u4e0e\u7528\u6237\u4ea4\u4e92\n\u653b\u51fb\u8005\u53ef\u4ee5\u4f7f\u7528\u5355\u4e2a UDP \u6570\u636e\u5305\u5230\u4efb\u610f\u7aef\u53e3\u6765\u5229\u7528\u8be5\u6f0f\u6d1e\uff1b\n\n\u6b64\u6f0f\u6d1e\u53ef\u80fd\u5bf9\u8def\u7531\u5668\u5f71\u54cd\u6700\u5927\uff0c\u4f46\u4e00\u4e9b\u57fa\u4e8e Realtek SDK \u7684\u7269\u8054\u7f51\u8bbe\u5907\u4e5f\u53ef\u80fd\u53d7\u5230\u5f71\u54cd [\u5305\u62ec\u8f6f\u8def\u7531]\n\n\u8be5\u6f0f\u6d1e\u5141\u8bb8\u653b\u51fb\u8005\u6267\u884c\u4ee5\u4e0b\u64cd\u4f5c:\n\u5bfc\u81f4\u8bbe\u5907\u5d29\u6e83\uff0c\u6267\u884c\u4efb\u610f\u4ee3\u7801\uff0c\u5efa\u7acb\u6301\u4e45\u6027\u7684\u540e\u95e8\uff0c\u6539\u53d8\u7f51\u7edc\u6d41\u91cf\u7684\u8def\u7ebf\uff0c\u62e6\u622a\u7f51\u7edc\u6d41\u91cf", "creation_timestamp": "2026-09-02T01:00:24.824578Z"}, {"uuid": "caaf04b6-9626-4a3d-8fd6-ec568b8b1047", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-27254", "type": "seen", "source": "https://t.me/hacking_Attack/71855", "content": "hacking: security in practice\nAlternative for flipper zero for Honda cve-2022-27254 hack?\n\nI'm trying to put out a content to make people aware of the cve-2022-27254 vulnerability, but I don't want to spend $400 on a HackerRf or $300 on a flipper zero (they're out of stock). Any alternatives for me to test this hack and make it work without having to spend an eye?\n\nsubmitted by /u/The_SuperTeacher \n[link] [comments]\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-02T01:01:36.437814Z"}, {"uuid": "71e5d20f-aa5d-434e-aa0b-f0cf52c2865b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-27254", "type": "seen", "source": "https://t.me/hacking_Attack/54031", "content": "Kali Linux Tutorials\nCVE-2022-27254 : PoC For Vulnerability In Honda\u2019s Remote Keyless System\n\nCVE-2022-27254 is a PoC for vulnerability in Honda\u2019s Remote Keyless System(CVE-2022-27254).\n\nSummary\n\nThis is a proof of concept for\u00a0CVE-2022-27254, wherein the remote keyless system on various Honda vehicles send the same, unencrypted RF signal for each door-open, door-close, boot-open and remote start(if applicable). This allows for an attacker to eavesdrop on the request and conduct a replay attack.\n\nVehicles Affected\n\n\u2022 2016-2020 Honda Civic(LX, EX, EX-L, Touring, Si, Type R)\n\nImportant Notes\n\n\u2022Key fob FCC ID: KR5V2X\n\u2022Key fob frequency: 433.215MHz\n\u2022Key fob modulation: FSK\n\nTools used\n\n\u2022FCCID.io\n\u2022HackRF One\n\u2022Gqrx\n\u2022GNURadio\n\nPrevention\n\n* Manufacturers:\n* Manufacturers must implement Rolling Codes, otherwise known as hopping code. It is a security technology commonly used to provide a fresh code for each authentication of a remote keyless entry (RKE) or passive keyless entry (PKE) system.\n\n* Consumers:\n* Utilize a Faraday Pouch for the key fob.\n* Use the PKE as opposed to the RKE, this would make it significantly harder for an attacker to clone/read the signal due to the proximity they would need to be at to do so.\nThe precautions mentioned above ARE NOT foolproof \n\nIf you believe that you are a victim of this attack, the only current mitigation is to reset your key fob at the dealership.\nDownload\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-02T01:01:48.813730Z"}, {"uuid": "12784ec7-ae8b-4c4a-9f82-29e3d087ed93", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-27254", "type": "seen", "source": "https://t.me/hacking_Attack/48219", "content": "KitPloit - PenTest Tools!\nCVE-2022-27254 - PoC For Vulnerability In Honda's Remote Keyless System\n\nhttps://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiCXFYec5Q2ebxFWm-Yo494Ag7n0XJZz-7pV-6hdgf5Lm8KWzhB1kWvT7sp9_fJyPgyaG-6B-JufZnkf3NThbM37mILf3YJB5nJCyPE3RD7tOf7OS-u7BRzhMrn2IaZVV_wSqjIz4INlgJ9w-kEIVBTFsq6sCMoWa0dxIaI0EiZ_hdZrHrDz4FlhFjw/w400-h320/CVE-2022-27254.png PoC for vulnerability in Honda's Remote Keyless System(CVE-2022-27254) Disclaimer:For educational purposes only.  Kindly note that the discoverers for this vulnerability are Ayyappan Rajesh, a student at UMass Dartmouth  and HackingIntoYourHeart.\n\nOthers mentioned in this repository are credited for the support that they have provided but have played no active role in any research conducted related to this finding.  If looking to publish these findings elsewhere, please refrain from associating this with any other persons, companies or institutions without any explicit approval. Summary:This is a proof of concept for CVE-2022-27254, wherein the remote keyless system on various Honda vehicles send the same, unencrypted RF signal for each door-open, door-close, boot-open and remote start(if applicable). This allows for an attacker to eavesdrop on the request and conduct a replay attack. POC videosVehicles Affected:\u2022 2016-2020 Honda Civic(LX, EX, EX-L, Touring, Si, Type R) Important Notes:\u2022Key fob FCC ID: KR5V2X\n\n\u2022Key fob frequency: 433.215MHz\n\n\u2022Key fob modulation: FSK Tools used:\u2022FCCID.io\n\u2022HackRF One\n\u2022Gqrx\n\u2022GNURadio Prevention:* \nManufacturers:\n\n1. Manufacturers must implement Rolling Codes, otherwise known as hopping code. It is a security technology commonly used to provide a fresh code for each authentication of a remote keyless entry (RKE) or passive keyless entry (PKE) system.\n\n* \nConsumers:\n\n1. Utilize a Faraday Pouch for the key fob.\n2. Use the PKE as opposed to the RKE, this would make it significantly harder for an attacker to clone/read the signal due to the proximity they would need to be at to do so.\nThe precautions mentioned above ARE NOT foolproof\n\nIf you believe that you are a victim of this attack, the only current mitigation is to reset your key fob at the dealership. Credits:\u2022Ayyappan Rajesh(nonamecoder)\n\n\u2022HackingIntoYourHeart Special thanks to:\u2022 My professor :Prof. Hong Liu\n\n\u2022 My mentor:Sam Curry\n\n\u2022My professor :Prof. Ruolin Zhou References:\u2022https://www.youtube.com/watch?v=1RipwqJG50c\n\n\u2022https://attack.mitre.org/techniques/T1040/ Download CVE-2022-27254\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-02T01:02:02.760387Z"}, {"uuid": "76c9a4ab-1b64-475a-90b0-8217cda3bd69", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-27254", "type": "seen", "source": "https://t.me/hacking_Attack/48211", "content": "CVE-2022-27254 - PoC For Vulnerability In Honda's Remote Keyless System\nhttp://www.kitploit.com/2022/03/cve-2022-27254-poc-for-vulnerability-in.html\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-02T01:02:02.853818Z"}, {"uuid": "cc6bf18e-a3af-4db9-bf61-2cf15aafa3f2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-27254", "type": "seen", "source": "https://t.me/hacking_Attack/48213", "content": "PoC for vulnerability (https://www.kitploit.com/search/label/Vulnerability) in Honda's Remote Keyless System(CVE-2022-27254)  Disclaimer:  For educational purposes only.  Kindly note that the discoverers for this vulnerability are Ayyappan Rajesh (https://www.linkedin.com/in/ayyappan-rajesh/), a student at UMass Dartmouth  and HackingIntoYourHeart (https://github.com/HackingIntoYourHeart/).  Others mentioned in this repository are credited for the support that they have provided but have played no active role in any   research (https://www.kitploit.com/search/label/Research) conducted related to this finding.  If looking to publish these findings elsewhere, please refrain from associating this with any other persons, companies or institutions without any explicit approval.  Summary:  This is a proof of concept (https://www.kitploit.com/search/label/Proof%20Of%20Concept) for CVE-2022-27254 (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27254), wherein the remote keyless system on various Honda vehicles send the same, unencrypted RF signal for each door-open, door-close, boot-open and remote start(if applicable). This allows for an attacker to eavesdrop (https://www.kitploit.com/search/label/Eavesdrop) on the request and conduct a replay attack.\nPOC videos (https://github.com/nonamecoder/CVE-2022-27254#poc-videos)  Vehicles Affected:  \u2022 2016-2020 Honda Civic(LX, EX, EX-L, Touring, Si, Type R)  Important Notes:   \u2022Key fob FCC ID: KR5V2X\n\n \u2022Key fob frequency: 433.215MHz\n\n \u2022Key fob modulation: FSK\n  Tools used:         \u2022FCCID.io\n       \u2022HackRF One\n       \u2022Gqrx\n       \u2022GNURadio\n  Prevention:      Manufacturers:    Manufacturers must implement Rolling Codes, otherwise known as hopping code. It is a security technology commonly used to provide a fresh code for each authentication (https://www.kitploit.com/search/label/Authentication) of a remote keyless entry (RKE) or passive keyless entry (PKE) system.        Consumers:    Utilize a Faraday Pouch for the key fob.  Use the PKE as opposed to the RKE, this would make it significantly harder for an attacker to clone/read the signal due to the proximity they would need to be at to do so.        The precautions mentioned above ARE NOT foolproofIf you believe that you are a victim of this attack, the only current mitigation is to reset your key fob at the dealership.  Credits:  \u2022Ayyappan Rajesh(nonamecoder) (https://www.linkedin.com/in/ayyappan-rajesh/)  \u2022HackingIntoYourHeart (https://github.com/HackingIntoYourHeart/)  Special thanks to:  \u2022 My professor :Prof. Hong Liu (https://www.umassd.edu/directory/hliu/)  \u2022 My mentor:Sam Curry (https://www.linkedin.com/in/currysam)  \u2022My professor :Prof. Ruolin Zhou (https://www.umassd.edu/directory/rzhou1/)  References:  \u2022https://www.youtube.com/watch?v=1RipwqJG50c  \u2022https://attack.mitre.org/techniques/T1040/  \n\nDownload CVE-2022-27254 (https://github.com/nonamecoder/CVE-2022-27254)\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-02T01:02:02.900572Z"}, {"uuid": "9dc1af1f-35c2-4051-bf49-fab136368fc7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-27254", "type": "seen", "source": "https://t.me/cissp/5722", "content": "Analytics\nTop 10 Most Used Vulns of the Month\n\nCVE-2022-1096 - Type Confusion in V8\nhttps://github.com/Maverick-cmd/Chrome-and-Edge-Version-Dumper\n\nCVE-2022-0847 - Dirty Pipe Vuln\n\nCVE-2022-0778 - OpenSSL Illegal x.509 certificate construction\n\nCVE-2022-0492 - Privilege escalation vuln causing container escape\nhttps://sysdig.com/blog/detecting-mitigating-cve-2022-0492-sysdig\n\nCVE-2022-22947 - Spring Cloud Gateway RCE\n\nCVE-2022-22963 - Spring Core RCE\n\nCVE-2022-25636 - net/netfilter/nf_dup_netdev.c in the Linux kernel <5.6.10 allows local users to gain privileges because of a heap out-of-bounds write\n\nCVE-2022-27254 - Vuln in Honda's Remote Keyless System\nhttps://github.com/nonamecoder/CVE-2022-27254\n\nCVE-2022-0609 - https://blog.google/threat-analysis-group/countering-threats-north-korea", "creation_timestamp": "2026-09-02T01:04:13.421500Z"}, {"uuid": "2a38ca39-c9cb-4522-9ee4-5695ce4b0860", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-27254", "type": "seen", "source": "https://t.me/hacking_Attack/71855", "content": "hacking: security in practice\nAlternative for flipper zero for Honda cve-2022-27254 hack?\n\nI'm trying to put out a content to make people aware of the cve-2022-27254 vulnerability, but I don't want to spend $400 on a HackerRf or $300 on a flipper zero (they're out of stock). Any alternatives for me to test this hack and make it work without having to spend an eye?\n\nsubmitted by /u/The_SuperTeacher \n[link] [comments]\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-05T06:00:05.214944Z"}, {"uuid": "8b4cda56-b8fa-4458-9141-6f7282fc2d5a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-27254", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/54031", "content": "Kali Linux Tutorials\nCVE-2022-27254 : PoC For Vulnerability In Honda\u2019s Remote Keyless System\n\nCVE-2022-27254 is a PoC for vulnerability in Honda\u2019s Remote Keyless System(CVE-2022-27254).\n\nSummary\n\nThis is a proof of concept for\u00a0CVE-2022-27254, wherein the remote keyless system on various Honda vehicles send the same, unencrypted RF signal for each door-open, door-close, boot-open and remote start(if applicable). This allows for an attacker to eavesdrop on the request and conduct a replay attack.\n\nVehicles Affected\n\n\u2022 2016-2020 Honda Civic(LX, EX, EX-L, Touring, Si, Type R)\n\nImportant Notes\n\n\u2022Key fob FCC ID: KR5V2X\n\u2022Key fob frequency: 433.215MHz\n\u2022Key fob modulation: FSK\n\nTools used\n\n\u2022FCCID.io\n\u2022HackRF One\n\u2022Gqrx\n\u2022GNURadio\n\nPrevention\n\n* Manufacturers:\n* Manufacturers must implement Rolling Codes, otherwise known as hopping code. It is a security technology commonly used to provide a fresh code for each authentication of a remote keyless entry (RKE) or passive keyless entry (PKE) system.\n\n* Consumers:\n* Utilize a Faraday Pouch for the key fob.\n* Use the PKE as opposed to the RKE, this would make it significantly harder for an attacker to clone/read the signal due to the proximity they would need to be at to do so.\nThe precautions mentioned above ARE NOT foolproof \n\nIf you believe that you are a victim of this attack, the only current mitigation is to reset your key fob at the dealership.\nDownload\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-05T20:00:05.915803Z"}, {"uuid": "5ca37308-ecaf-47c8-ae48-aecd1f3f0ddd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-27254", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/54031", "content": "Kali Linux Tutorials\nCVE-2022-27254 : PoC For Vulnerability In Honda\u2019s Remote Keyless System\n\nCVE-2022-27254 is a PoC for vulnerability in Honda\u2019s Remote Keyless System(CVE-2022-27254).\n\nSummary\n\nThis is a proof of concept for\u00a0CVE-2022-27254, wherein the remote keyless system on various Honda vehicles send the same, unencrypted RF signal for each door-open, door-close, boot-open and remote start(if applicable). This allows for an attacker to eavesdrop on the request and conduct a replay attack.\n\nVehicles Affected\n\n\u2022 2016-2020 Honda Civic(LX, EX, EX-L, Touring, Si, Type R)\n\nImportant Notes\n\n\u2022Key fob FCC ID: KR5V2X\n\u2022Key fob frequency: 433.215MHz\n\u2022Key fob modulation: FSK\n\nTools used\n\n\u2022FCCID.io\n\u2022HackRF One\n\u2022Gqrx\n\u2022GNURadio\n\nPrevention\n\n* Manufacturers:\n* Manufacturers must implement Rolling Codes, otherwise known as hopping code. It is a security technology commonly used to provide a fresh code for each authentication of a remote keyless entry (RKE) or passive keyless entry (PKE) system.\n\n* Consumers:\n* Utilize a Faraday Pouch for the key fob.\n* Use the PKE as opposed to the RKE, this would make it significantly harder for an attacker to clone/read the signal due to the proximity they would need to be at to do so.\nThe precautions mentioned above ARE NOT foolproof \n\nIf you believe that you are a victim of this attack, the only current mitigation is to reset your key fob at the dealership.\nDownload\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-06T00:00:37.422541Z"}, {"uuid": "33a2e5f5-04d0-4332-9ede-23c4c2587afa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-27254", "type": "seen", "source": "https://t.me/hacking_Attack/71855", "content": "hacking: security in practice\nAlternative for flipper zero for Honda cve-2022-27254 hack?\n\nI'm trying to put out a content to make people aware of the cve-2022-27254 vulnerability, but I don't want to spend $400 on a HackerRf or $300 on a flipper zero (they're out of stock). Any alternatives for me to test this hack and make it work without having to spend an eye?\n\nsubmitted by /u/The_SuperTeacher \n[link] [comments]\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-06T00:00:55.481853Z"}, {"uuid": "c9292d6f-d766-4257-803f-f3c57255a53c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-27254", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/48211", "content": "CVE-2022-27254 - PoC For Vulnerability In Honda's Remote Keyless System\nhttp://www.kitploit.com/2022/03/cve-2022-27254-poc-for-vulnerability-in.html\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-06T04:00:04.873634Z"}, {"uuid": "bc09a8ea-7466-45e3-ab26-390445b2b504", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-27254", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/48213", "content": "PoC for vulnerability (https://www.kitploit.com/search/label/Vulnerability) in Honda's Remote Keyless System(CVE-2022-27254)  Disclaimer:  For educational purposes only.  Kindly note that the discoverers for this vulnerability are Ayyappan Rajesh (https://www.linkedin.com/in/ayyappan-rajesh/), a student at UMass Dartmouth  and HackingIntoYourHeart (https://github.com/HackingIntoYourHeart/).  Others mentioned in this repository are credited for the support that they have provided but have played no active role in any   research (https://www.kitploit.com/search/label/Research) conducted related to this finding.  If looking to publish these findings elsewhere, please refrain from associating this with any other persons, companies or institutions without any explicit approval.  Summary:  This is a proof of concept (https://www.kitploit.com/search/label/Proof%20Of%20Concept) for CVE-2022-27254 (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27254), wherein the remote keyless system on various Honda vehicles send the same, unencrypted RF signal for each door-open, door-close, boot-open and remote start(if applicable). This allows for an attacker to eavesdrop (https://www.kitploit.com/search/label/Eavesdrop) on the request and conduct a replay attack.\nPOC videos (https://github.com/nonamecoder/CVE-2022-27254#poc-videos)  Vehicles Affected:  \u2022 2016-2020 Honda Civic(LX, EX, EX-L, Touring, Si, Type R)  Important Notes:   \u2022Key fob FCC ID: KR5V2X\n\n \u2022Key fob frequency: 433.215MHz\n\n \u2022Key fob modulation: FSK\n  Tools used:         \u2022FCCID.io\n       \u2022HackRF One\n       \u2022Gqrx\n       \u2022GNURadio\n  Prevention:      Manufacturers:    Manufacturers must implement Rolling Codes, otherwise known as hopping code. It is a security technology commonly used to provide a fresh code for each authentication (https://www.kitploit.com/search/label/Authentication) of a remote keyless entry (RKE) or passive keyless entry (PKE) system.        Consumers:    Utilize a Faraday Pouch for the key fob.  Use the PKE as opposed to the RKE, this would make it significantly harder for an attacker to clone/read the signal due to the proximity they would need to be at to do so.        The precautions mentioned above ARE NOT foolproofIf you believe that you are a victim of this attack, the only current mitigation is to reset your key fob at the dealership.  Credits:  \u2022Ayyappan Rajesh(nonamecoder) (https://www.linkedin.com/in/ayyappan-rajesh/)  \u2022HackingIntoYourHeart (https://github.com/HackingIntoYourHeart/)  Special thanks to:  \u2022 My professor :Prof. Hong Liu (https://www.umassd.edu/directory/hliu/)  \u2022 My mentor:Sam Curry (https://www.linkedin.com/in/currysam)  \u2022My professor :Prof. Ruolin Zhou (https://www.umassd.edu/directory/rzhou1/)  References:  \u2022https://www.youtube.com/watch?v=1RipwqJG50c  \u2022https://attack.mitre.org/techniques/T1040/  \n\nDownload CVE-2022-27254 (https://github.com/nonamecoder/CVE-2022-27254)\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-06T04:00:04.918271Z"}, {"uuid": "61cdbebe-bb0e-4fcf-b078-d26569062f2e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-27254", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/48219", "content": "KitPloit - PenTest Tools!\nCVE-2022-27254 - PoC For Vulnerability In Honda's Remote Keyless System\n\nhttps://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiCXFYec5Q2ebxFWm-Yo494Ag7n0XJZz-7pV-6hdgf5Lm8KWzhB1kWvT7sp9_fJyPgyaG-6B-JufZnkf3NThbM37mILf3YJB5nJCyPE3RD7tOf7OS-u7BRzhMrn2IaZVV_wSqjIz4INlgJ9w-kEIVBTFsq6sCMoWa0dxIaI0EiZ_hdZrHrDz4FlhFjw/w400-h320/CVE-2022-27254.png PoC for vulnerability in Honda's Remote Keyless System(CVE-2022-27254) Disclaimer:For educational purposes only.  Kindly note that the discoverers for this vulnerability are Ayyappan Rajesh, a student at UMass Dartmouth  and HackingIntoYourHeart.\n\nOthers mentioned in this repository are credited for the support that they have provided but have played no active role in any research conducted related to this finding.  If looking to publish these findings elsewhere, please refrain from associating this with any other persons, companies or institutions without any explicit approval. Summary:This is a proof of concept for CVE-2022-27254, wherein the remote keyless system on various Honda vehicles send the same, unencrypted RF signal for each door-open, door-close, boot-open and remote start(if applicable). This allows for an attacker to eavesdrop on the request and conduct a replay attack. POC videosVehicles Affected:\u2022 2016-2020 Honda Civic(LX, EX, EX-L, Touring, Si, Type R) Important Notes:\u2022Key fob FCC ID: KR5V2X\n\n\u2022Key fob frequency: 433.215MHz\n\n\u2022Key fob modulation: FSK Tools used:\u2022FCCID.io\n\u2022HackRF One\n\u2022Gqrx\n\u2022GNURadio Prevention:* \nManufacturers:\n\n1. Manufacturers must implement Rolling Codes, otherwise known as hopping code. It is a security technology commonly used to provide a fresh code for each authentication of a remote keyless entry (RKE) or passive keyless entry (PKE) system.\n\n* \nConsumers:\n\n1. Utilize a Faraday Pouch for the key fob.\n2. Use the PKE as opposed to the RKE, this would make it significantly harder for an attacker to clone/read the signal due to the proximity they would need to be at to do so.\nThe precautions mentioned above ARE NOT foolproof\n\nIf you believe that you are a victim of this attack, the only current mitigation is to reset your key fob at the dealership. Credits:\u2022Ayyappan Rajesh(nonamecoder)\n\n\u2022HackingIntoYourHeart Special thanks to:\u2022 My professor :Prof. Hong Liu\n\n\u2022 My mentor:Sam Curry\n\n\u2022My professor :Prof. Ruolin Zhou References:\u2022https://www.youtube.com/watch?v=1RipwqJG50c\n\n\u2022https://attack.mitre.org/techniques/T1040/ Download CVE-2022-27254\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-06T04:00:05.009978Z"}, {"uuid": "2237eed4-875f-47ff-aa4c-765876ba6d27", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-27254", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/48213", "content": "PoC for vulnerability (https://www.kitploit.com/search/label/Vulnerability) in Honda's Remote Keyless System(CVE-2022-27254)  Disclaimer:  For educational purposes only.  Kindly note that the discoverers for this vulnerability are Ayyappan Rajesh (https://www.linkedin.com/in/ayyappan-rajesh/), a student at UMass Dartmouth  and HackingIntoYourHeart (https://github.com/HackingIntoYourHeart/).  Others mentioned in this repository are credited for the support that they have provided but have played no active role in any   research (https://www.kitploit.com/search/label/Research) conducted related to this finding.  If looking to publish these findings elsewhere, please refrain from associating this with any other persons, companies or institutions without any explicit approval.  Summary:  This is a proof of concept (https://www.kitploit.com/search/label/Proof%20Of%20Concept) for CVE-2022-27254 (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27254), wherein the remote keyless system on various Honda vehicles send the same, unencrypted RF signal for each door-open, door-close, boot-open and remote start(if applicable). This allows for an attacker to eavesdrop (https://www.kitploit.com/search/label/Eavesdrop) on the request and conduct a replay attack.\nPOC videos (https://github.com/nonamecoder/CVE-2022-27254#poc-videos)  Vehicles Affected:  \u2022 2016-2020 Honda Civic(LX, EX, EX-L, Touring, Si, Type R)  Important Notes:   \u2022Key fob FCC ID: KR5V2X\n\n \u2022Key fob frequency: 433.215MHz\n\n \u2022Key fob modulation: FSK\n  Tools used:         \u2022FCCID.io\n       \u2022HackRF One\n       \u2022Gqrx\n       \u2022GNURadio\n  Prevention:      Manufacturers:    Manufacturers must implement Rolling Codes, otherwise known as hopping code. It is a security technology commonly used to provide a fresh code for each authentication (https://www.kitploit.com/search/label/Authentication) of a remote keyless entry (RKE) or passive keyless entry (PKE) system.        Consumers:    Utilize a Faraday Pouch for the key fob.  Use the PKE as opposed to the RKE, this would make it significantly harder for an attacker to clone/read the signal due to the proximity they would need to be at to do so.        The precautions mentioned above ARE NOT foolproofIf you believe that you are a victim of this attack, the only current mitigation is to reset your key fob at the dealership.  Credits:  \u2022Ayyappan Rajesh(nonamecoder) (https://www.linkedin.com/in/ayyappan-rajesh/)  \u2022HackingIntoYourHeart (https://github.com/HackingIntoYourHeart/)  Special thanks to:  \u2022 My professor :Prof. Hong Liu (https://www.umassd.edu/directory/hliu/)  \u2022 My mentor:Sam Curry (https://www.linkedin.com/in/currysam)  \u2022My professor :Prof. Ruolin Zhou (https://www.umassd.edu/directory/rzhou1/)  References:  \u2022https://www.youtube.com/watch?v=1RipwqJG50c  \u2022https://attack.mitre.org/techniques/T1040/  \n\nDownload CVE-2022-27254 (https://github.com/nonamecoder/CVE-2022-27254)\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-07T01:00:35.526508Z"}, {"uuid": "c8451954-1c7a-4dc7-886f-edfb374f9066", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-27254", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/48211", "content": "CVE-2022-27254 - PoC For Vulnerability In Honda's Remote Keyless System\nhttp://www.kitploit.com/2022/03/cve-2022-27254-poc-for-vulnerability-in.html\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-07T01:00:35.475191Z"}, {"uuid": "5382fa80-c9b8-466f-9aa2-82f3e28da602", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-27254", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/48219", "content": "KitPloit - PenTest Tools!\nCVE-2022-27254 - PoC For Vulnerability In Honda's Remote Keyless System\n\nhttps://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiCXFYec5Q2ebxFWm-Yo494Ag7n0XJZz-7pV-6hdgf5Lm8KWzhB1kWvT7sp9_fJyPgyaG-6B-JufZnkf3NThbM37mILf3YJB5nJCyPE3RD7tOf7OS-u7BRzhMrn2IaZVV_wSqjIz4INlgJ9w-kEIVBTFsq6sCMoWa0dxIaI0EiZ_hdZrHrDz4FlhFjw/w400-h320/CVE-2022-27254.png PoC for vulnerability in Honda's Remote Keyless System(CVE-2022-27254) Disclaimer:For educational purposes only.  Kindly note that the discoverers for this vulnerability are Ayyappan Rajesh, a student at UMass Dartmouth  and HackingIntoYourHeart.\n\nOthers mentioned in this repository are credited for the support that they have provided but have played no active role in any research conducted related to this finding.  If looking to publish these findings elsewhere, please refrain from associating this with any other persons, companies or institutions without any explicit approval. Summary:This is a proof of concept for CVE-2022-27254, wherein the remote keyless system on various Honda vehicles send the same, unencrypted RF signal for each door-open, door-close, boot-open and remote start(if applicable). This allows for an attacker to eavesdrop on the request and conduct a replay attack. POC videosVehicles Affected:\u2022 2016-2020 Honda Civic(LX, EX, EX-L, Touring, Si, Type R) Important Notes:\u2022Key fob FCC ID: KR5V2X\n\n\u2022Key fob frequency: 433.215MHz\n\n\u2022Key fob modulation: FSK Tools used:\u2022FCCID.io\n\u2022HackRF One\n\u2022Gqrx\n\u2022GNURadio Prevention:* \nManufacturers:\n\n1. Manufacturers must implement Rolling Codes, otherwise known as hopping code. It is a security technology commonly used to provide a fresh code for each authentication of a remote keyless entry (RKE) or passive keyless entry (PKE) system.\n\n* \nConsumers:\n\n1. Utilize a Faraday Pouch for the key fob.\n2. Use the PKE as opposed to the RKE, this would make it significantly harder for an attacker to clone/read the signal due to the proximity they would need to be at to do so.\nThe precautions mentioned above ARE NOT foolproof\n\nIf you believe that you are a victim of this attack, the only current mitigation is to reset your key fob at the dealership. Credits:\u2022Ayyappan Rajesh(nonamecoder)\n\n\u2022HackingIntoYourHeart Special thanks to:\u2022 My professor :Prof. Hong Liu\n\n\u2022 My mentor:Sam Curry\n\n\u2022My professor :Prof. Ruolin Zhou References:\u2022https://www.youtube.com/watch?v=1RipwqJG50c\n\n\u2022https://attack.mitre.org/techniques/T1040/ Download CVE-2022-27254\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-07T01:00:35.632129Z"}, {"uuid": "e2e01136-dc50-4ba3-978d-12648e7d5364", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-27254", "type": "seen", "source": "https://t.me/cissp/5722", "content": "Analytics\nTop 10 Most Used Vulns of the Month\n\nCVE-2022-1096 - Type Confusion in V8\nhttps://github.com/Maverick-cmd/Chrome-and-Edge-Version-Dumper\n\nCVE-2022-0847 - Dirty Pipe Vuln\n\nCVE-2022-0778 - OpenSSL Illegal x.509 certificate construction\n\nCVE-2022-0492 - Privilege escalation vuln causing container escape\nhttps://sysdig.com/blog/detecting-mitigating-cve-2022-0492-sysdig\n\nCVE-2022-22947 - Spring Cloud Gateway RCE\n\nCVE-2022-22963 - Spring Core RCE\n\nCVE-2022-25636 - net/netfilter/nf_dup_netdev.c in the Linux kernel <5.6.10 allows local users to gain privileges because of a heap out-of-bounds write\n\nCVE-2022-27254 - Vuln in Honda's Remote Keyless System\nhttps://github.com/nonamecoder/CVE-2022-27254\n\nCVE-2022-0609 - https://blog.google/threat-analysis-group/countering-threats-north-korea", "creation_timestamp": "2026-09-10T10:00:05.343182Z"}, {"uuid": "ed53e8e9-50ae-4384-961c-7090f216f78d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-27254", "type": "seen", "source": "https://t.me/cissp/5722", "content": "Analytics\nTop 10 Most Used Vulns of the Month\n\nCVE-2022-1096 - Type Confusion in V8\nhttps://github.com/Maverick-cmd/Chrome-and-Edge-Version-Dumper\n\nCVE-2022-0847 - Dirty Pipe Vuln\n\nCVE-2022-0778 - OpenSSL Illegal x.509 certificate construction\n\nCVE-2022-0492 - Privilege escalation vuln causing container escape\nhttps://sysdig.com/blog/detecting-mitigating-cve-2022-0492-sysdig\n\nCVE-2022-22947 - Spring Cloud Gateway RCE\n\nCVE-2022-22963 - Spring Core RCE\n\nCVE-2022-25636 - net/netfilter/nf_dup_netdev.c in the Linux kernel <5.6.10 allows local users to gain privileges because of a heap out-of-bounds write\n\nCVE-2022-27254 - Vuln in Honda's Remote Keyless System\nhttps://github.com/nonamecoder/CVE-2022-27254\n\nCVE-2022-0609 - https://blog.google/threat-analysis-group/countering-threats-north-korea", "creation_timestamp": "2026-09-11T00:00:43.448432Z"}]}