Sign-up

VARIoT news about IoT security

Vulnerability and Patch Management Standard | Enterprise Technology & Services

Trust: 3.5

Fetched: April 29, 2025, 9:20 a.m., Published: Feb. 12, 2024, 4:38 p.m.
 Vulnerabilities: code execution, denial of service
Affected productsExternal IDs
vendor: delegate model: delegate

CVE-2025-23016: Critical FastCGI Heap Overflow Threatens Embedded Devices, PoC Releases

Trust: 4.0

Fetched: April 29, 2025, 9:19 a.m., Published: April 28, 2025, 12:26 a.m.
 Vulnerabilities: code execution, memory overwrite, integer overflow
Affected productsExternal IDs
db: NVD ids: CVE-2025-23016

What is Endpoint Vulnerability Management?

Trust: 3.75

Fetched: April 29, 2025, 9:16 a.m., Published: April 7, 2025, 6:32 a.m.
 Vulnerabilities: code execution
Affected productsExternal IDs

Zero-Day Attack Vectors: A Complete Guide | SentinelOne

Trust: 3.25

Fetched: April 29, 2025, 9:15 a.m., Published: April 22, 2025, 10:59 a.m.
 Vulnerabilities: sql injection, privilege escalation, code injection...
Affected productsExternal IDs
vendor: cisco model: ios xe
vendor: cisco model: access points
vendor: cisco model: ios xe software
vendor: cisco model: series

iOS Vulnerability Lets Apps Disable Devices - CyberMaterial

Trust: 3.0

Fetched: April 29, 2025, 9:15 a.m., Published: April 28, 2025, 1:38 p.m.
 Vulnerabilities: -
Affected productsExternal IDs
db: NVD ids: CVE-2025-24091

OuttaTune: Bypassing Conditional Access in Microsoft Intune | CirriusTech | Serious About Tech

Trust: 3.5

Fetched: April 29, 2025, 9:14 a.m., Published: April 28, 2025, 8 p.m.
 Vulnerabilities: code execution, privilege escalation
Affected productsExternal IDs

Critical ASUS Router Vulnerability Let Attackers Malicious Code Remotely

Related entries in the VARIoT vulnerabilities database: VAR-202504-1580

Trust: 6.0

Fetched: April 29, 2025, 9:13 a.m., Published: April 21, 2025, 8:52 a.m.
 Vulnerabilities: code execution
Affected productsExternal IDs
vendor: asus model: asus
vendor: asus model: routers
vendor: asus model: router
db: NVD ids: CVE-2025-2492

Apple Backports Fixes for Three Zero-day Vulnerabilities (CVE-2025-24200, CVE-2025-24201, & CVE-2025-24085) - Qualys ThreatPROTECT

Related entries in the VARIoT vulnerabilities database: VAR-202501-3666

Trust: 5.75

Fetched: April 29, 2025, 9:13 a.m., Published: -
 Vulnerabilities: authorization flaw, use after free
Affected productsExternal IDs
vendor: apple model: webkit
vendor: apple model: ipad
vendor: apple model: macos
db: NVD ids: CVE-2025-24200, CVE-2025-24201, CVE-2025-24085

Cellebrite Android Zero-Day Exploit PoC Released: CVE-2024-53104

Trust: 4.5

Fetched: April 29, 2025, 9:12 a.m., Published: April 21, 2025, 12:50 a.m.
 Vulnerabilities: code execution, privilege escalation
Affected productsExternal IDs
vendor: google model: android
vendor: alsa model: alsa
db: NVD ids: CVE-2024-53197, CVE-2024-53104, CVE-2024-50302

How to Secure IoT Devices: 12 Effective Strategies to Implement

Trust: 3.75

Fetched: April 29, 2025, 9:11 a.m., Published: April 12, 2025, midnight
 Vulnerabilities: default credentials
Affected productsExternal IDs

CISA Warns of ESURGE Malware Exploiting Ivanti RCE Vulnerability

Trust: 4.25

Fetched: April 29, 2025, 9:09 a.m., Published: March 29, 2025, 4:07 p.m.
 Vulnerabilities: command execution
Affected productsExternal IDs
db: NVD ids: CVE-2025-0282

7 New Vulnerabilities Threaten Supply Chain, Medical Device Security | TechTarget

Trust: 4.5

Fetched: April 29, 2025, 9:05 a.m., Published: March 8, 2022, midnight
 Vulnerabilities: code execution, information disclosure
Affected productsExternal IDs
db: NVD ids: CVE-2022-25247, CVE-2022-25246

9 Top Kali Linux Alternatives To Unleash Your Inner Hacker

Related entries in the VARIoT vulnerabilities database: VAR-202112-0566, VAR-202110-1691

Trust: 4.25

Fetched: April 27, 2025, 9:15 a.m., Published: April 21, 2025, 2:04 a.m.
 Vulnerabilities: sql injection, privilege escalation
Affected productsExternal IDs
vendor: google model: home
vendor: node.js model: node.js
vendor: wireshark model: wireshark
vendor: dell model: bios
vendor: snort model: snort
vendor: aircrack-ng model: aircrack-ng
vendor: trend model: antivirus
vendor: trend model: security
db: NVD ids: CVE-2023-45678, CVE-2017-0147, CVE-2021-44228, CVE-2023-12345, CVE-2021-41773

Types of Vulnerabilities

Trust: 4.5

Fetched: April 27, 2025, 9:14 a.m., Published: April 27, 2000, midnight
 Vulnerabilities: session hijacking, cross-site scripting, improper session management...
Affected productsExternal IDs
vendor: apple model: iphone

BOSCH-SA-640452 | Bosch PSIRT

Trust: 3.75

Fetched: April 27, 2025, 9:13 a.m., Published: April 3, 2025, midnight
 Vulnerabilities: default password
Affected productsExternal IDs
db: NVD ids: CVE-2025-24345, CVE-2025-24347, CVE-2025-24349, CVE-2025-24338, CVE-2025-24340, CVE-2025-24346, CVE-2025-24350, CVE-2025-27352, CVE-2025-24342, CVE-2025-24351, CVE-2025-24344, CVE-2025-24339, CVE-2025-24343, CVE-2025-24341, CVE-2025-27532, CVE-2025-24348

Fatal Vulnerabilities Compromising DJI Control Devices | DARKNAVY

Trust: 4.75

Fetched: April 27, 2025, 9:12 a.m., Published: April 27, 2025, 2:01 a.m.
 Vulnerabilities: code execution
Affected productsExternal IDs
vendor: google model: android
db: NVD ids: CVE-2023-20963

The TechCrunch Cyber Glossary | TechCrunch

Trust: 4.5

Fetched: April 27, 2025, 9:10 a.m., Published: April 25, 2025, 6:35 p.m.
 Vulnerabilities: code execution, denial of service
Affected productsExternal IDs
vendor: sony model: camera

Microsoft rolled out new firmware updates (April 23, 2025) for Surface Laptop Studio 2

Trust: 3.0

Fetched: April 27, 2025, 9:09 a.m., Published: April 23, 2025, midnight
 Vulnerabilities: -
Affected productsExternal IDs
db: NVD ids: CVE-2024-21864, CVE-2024-44074

Over 16,000 Fortinet Devices Compromised with Stealth Symlink Backdoor | Black Hat Ethical Hacking

Trust: 3.0

Fetched: April 27, 2025, 9:08 a.m., Published: April 17, 2025, 9:27 a.m.
 Vulnerabilities: -
Affected productsExternal IDs
vendor: fortigate model: fortios

Multiple Vulnerabilities in Barco ClickShare | WithSecure™ Labs

Trust: 3.25

Fetched: April 27, 2025, 9:08 a.m., Published: Oct. 9, 2019, midnight
 Vulnerabilities: -
Affected productsExternal IDs
vendor: barco model: clickshare