Sign-up

VARIoT news about IoT security

Protecting Windows Users: Unsecured Webcam Cyberattacks Exploited | Windows Forum

Trust: 4.5

Fetched: March 21, 2025, 9:40 a.m., Published: May 21, 2025, midnight
 Vulnerabilities: default credentials
Affected productsExternal IDs
vendor: trend model: security
vendor: trend model: antivirus

CISA Identifies New Cyber Vulnerabilities: Action Required for Windows Users | Windows Forum

Trust: 5.25

Fetched: March 21, 2025, 9:39 a.m., Published: May 21, 2025, midnight
 Vulnerabilities: sql injection, file execution, file upload issue...
Affected productsExternal IDs
vendor: trend model: security
vendor: parallels model: tools
db: NVD ids: CVE-2024-13160, CVE-2024-13159, CVE-2024-13161, CVE-2024-57968, CVE-2025-25181

Malicious GitHub repositories linked to nearly 1M infections • The Register

Related entries in the VARIoT vulnerabilities database: VAR-202304-1067

Trust: 3.5

Fetched: March 21, 2025, 9:38 a.m., Published: -
 Vulnerabilities: -
Affected productsExternal IDs
vendor: hitachi model: vantara pentaho
vendor: hitachi vantara model: pentaho
vendor: hitachi vantara model: pentaho business analytics
vendor: cisco model: routers
vendor: cisco model: small business
vendor: google model: android
vendor: google model: home
db: NVD ids: CVE-2024-4885, CVE-2022-43939, CVE-2023-20118, CVE-2022-43769

Update Canonical Ubuntu Desktop: USN-7356-1: uriparser vulnerabilities

Trust: 5.0

Fetched: March 21, 2025, 9:36 a.m., Published: Jan. 21, 7356, midnight
 Vulnerabilities: integer overflow, denial of service
Affected productsExternal IDs
vendor: canonical model: ubuntu
db: NVD ids: CVE-2024-34402, CVE-2024-34403

Ballista Botnet Exploits Unpatched TP-Link Vulnerability, Targets Over 6,000 Devices - Infotech Matters

Related entries in the VARIoT vulnerabilities database: VAR-202303-1268

Trust: 5.75

Fetched: March 21, 2025, 9:33 a.m., Published: March 12, 2025, 6:01 p.m.
 Vulnerabilities: command injection, code execution
Affected productsExternal IDs
vendor: tp-link model: routers
db: NVD ids: CVE-2023-1389

Update Canonical Ubuntu Server: USN-7354-1: djoser vulnerability

Trust: 3.0

Fetched: March 21, 2025, 9:33 a.m., Published: Jan. 21, 7354, midnight
 Vulnerabilities: -
Affected productsExternal IDs
vendor: canonical model: ubuntu

A vulnerability was found in ESAFENET CDG 5.6.3.154.205.... · CVE-2025-1840 · GitHub Advisory Database · GitHub

Trust: 4.0

Fetched: March 21, 2025, 9:32 a.m., Published: March 3, 2025, midnight
 Vulnerabilities: sql injection
Affected productsExternal IDs
db: NVD ids: CVE-2025-1840

System BIOS komputerów Dell Precision 3590/3591 i Latitude 5550 | Szczegóły sterownika | Dell Polska

Trust: 3.0

Fetched: March 21, 2025, 9:32 a.m., Published: March 21, 5550, midnight
 Vulnerabilities: -
Affected productsExternal IDs
vendor: dell model: bios
vendor: dell model: latitude
vendor: dell model: latitude 5550

The Evolving Landscape of Medical Device Cybersecurity: Threats, Vulnerabilities, and Mitigation Strategies - MedTechNews

Trust: 3.25

Fetched: March 21, 2025, 9:31 a.m., Published: Feb. 28, 2025, 9:47 a.m.
 Vulnerabilities: default credentials, sql injection
Affected productsExternal IDs

Cisco Nexus 3000 and 9000 Series Switches Command Injection Vulnerability

Trust: 5.0

Fetched: March 21, 2025, 9:30 a.m., Published: Feb. 26, 2025, 3:52 p.m.
 Vulnerabilities: command injection
Affected productsExternal IDs
vendor: cisco model: nexus
vendor: cisco model: nexus 7000
vendor: cisco model: nexus 9000 series
vendor: cisco model: nx-os software
vendor: cisco model: nx-os
vendor: cisco model: nexus 9000
vendor: cisco model: series
vendor: cisco model: series switches
vendor: cisco model: cisco nx-os
vendor: cisco model: nexus 3000

CVE-2025-20636: Addressing Out-of-Bounds Write Vulnerability in MediaTek Devices

Trust: 4.25

Fetched: March 21, 2025, 9:29 a.m., Published: -
 Vulnerabilities: privilege elevation
Affected productsExternal IDs
db: NVD ids: CVE-2025-20636

Update Canonical Ubuntu Desktop: USN-7355-1: RestrictedPython vulnerabilities

Trust: 4.0

Fetched: March 21, 2025, 9:27 a.m., Published: Jan. 21, 7355, midnight
 Vulnerabilities: -
Affected productsExternal IDs
vendor: canonical model: ubuntu
db: NVD ids: CVE-2024-47532, CVE-2025-22153, CVE-2023-41039, CVE-2023-37271

Update Canonical Ubuntu Desktop: USN-7279-1: WebKitGTK vulnerabilities

Trust: 5.0

Fetched: March 21, 2025, 9:26 a.m., Published: Jan. 21, 7279, midnight
 Vulnerabilities: code execution, denial of service, cross-site scripting
Affected productsExternal IDs
vendor: canonical model: ubuntu

Zyxel security advisory for post-authentication command injection vulnerabilities in certain DSL/Ethernet CPE, fiber ONT, and WiFi extender devices | Zyxel Networks

Trust: 3.75

Fetched: March 21, 2025, 9:25 a.m., Published: March 7, 2025, midnight
 Vulnerabilities: command injection
Affected productsExternal IDs
db: NVD ids: CVE-2024-12009, CVE-2024-12010, CVE-2024-11253

mySCADA myPRO RCE Vulnerabilities Expose ICS Devices to Remote Control

Related entries in the VARIoT vulnerabilities database: VAR-202501-3604, VAR-202501-3603

Trust: 4.5

Fetched: March 21, 2025, 9:25 a.m., Published: March 19, 2025, 1:20 p.m.
 Vulnerabilities: command injection, os command injection, command execution
Affected productsExternal IDs
vendor: myscada model: mypro
vendor: rapid model: scada
db: NVD ids: CVE-2025-200619, CVE-2025-20061, CVE-2025-200149, CVE-2025-20014

Guide to Android Penetration Testing | BrowserStack

Trust: 3.5

Fetched: March 21, 2025, 9:23 a.m., Published: March 11, 2025, 12:50 p.m.
 Vulnerabilities: code execution, code injection, privilege escalation...
Affected productsExternal IDs
vendor: essential model: phone

Ingram : A Network Camera Vulnerability Scanning Tool

Trust: 3.75

Fetched: March 21, 2025, 9:21 a.m., Published: March 20, 2025, 11:26 a.m.
 Vulnerabilities: -
Affected productsExternal IDs
vendor: dahua model: network camera
vendor: dahua model: camera
vendor: hikvision model: hikvision
db: NVD ids: CVE-2021-36260

What mobile devices are supported by the vulnerability assessment of LanGuard? ( ONLY) - GFI Support

Trust: 3.0

Fetched: March 21, 2025, 9:21 a.m., Published: March 18, 2025, 5:36 p.m.
 Vulnerabilities: -
Affected productsExternal IDs
vendor: google model: android

Update Canonical Ubuntu Server: USN-7287-1: libcap2 vulnerability

Trust: 3.25

Fetched: March 21, 2025, 9:20 a.m., Published: Jan. 21, 7287, midnight
 Vulnerabilities: -
Affected productsExternal IDs
vendor: canonical model: ubuntu

Multiple critical vulnerabilities in SICK DL100-2xxxxxxx Products

Trust: 4.0

Fetched: March 21, 2025, 9:19 a.m., Published: -
 Vulnerabilities: code execution
Affected productsExternal IDs
db: NVD ids: CVE-2025-27595, CVE-2025-27593, CVE-2025-27594