Sign-up

VARIoT news about IoT security

Update Canonical Ubuntu Desktop: USN-7516-1: Linux kernel vulnerabilities

Trust: 3.0

Fetched: May 28, 2025, 9:40 a.m., Published: Jan. 28, 7516, midnight
 Vulnerabilities: -
Affected productsExternal IDs
vendor: canonical model: ubuntu

CVE-2025-41649 : Buffer Overflow Vulnerability in Network Devices by CERTVDE

Trust: 4.0

Fetched: May 28, 2025, 9:34 a.m., Published: May 27, 2025, 8:37 a.m.
 Vulnerabilities: buffer overflow
Affected productsExternal IDs
db: NVD ids: CVE-2025-41649

Ivanti Endpoint Manager Mobile exploit chain exploited in the wild - Cyber Security Review

Trust: 4.75

Fetched: May 28, 2025, 9:34 a.m., Published: May 16, 2025, 7 a.m.
 Vulnerabilities: path traversal, authentication bypass, code execution...
Affected productsExternal IDs
vendor: mitel model: micollab
db: NVD ids: CVE-2024-55550, CVE-2024-11667, CVE-2025-4427, CVE-2024-41713, CVE-2025-4428, CVE-2024-48865

Update Canonical Ubuntu Desktop: USN-7520-1: PostgreSQL vulnerability

Trust: 4.25

Fetched: May 28, 2025, 9:28 a.m., Published: Jan. 28, 7520, midnight
 Vulnerabilities: denial of service
Affected productsExternal IDs
vendor: canonical model: ubuntu

Unlocking The Power Of SSH Access For IoT Devices

Trust: 4.5

Fetched: May 28, 2025, 9:28 a.m., Published: May 21, 2025, 11:42 p.m.
 Vulnerabilities: command execution
Affected productsExternal IDs
vendor: putty model: putty

Cisco Duo Self-Service Portal Command Injection Vulnerability - Cisco

Trust: 5.25

Fetched: May 28, 2025, 9:27 a.m., Published: May 21, 2025, 11:40 a.m.
 Vulnerabilities: command injection
Affected productsExternal IDs
vendor: cisco model: service portal

Urgent Windows Security Alert in India: How to Protect Your Systems from Critical Vulnerabilities | Windows Forum

Trust: 3.25

Fetched: May 28, 2025, 9:27 a.m., Published: May 28, 2025, midnight
 Vulnerabilities: code execution, privilege escalation, information disclosure...
Affected productsExternal IDs
vendor: palo alto networks model: networks
vendor: symantec model: antivirus
vendor: symantec model: endpoint protection
vendor: apple model: macos
vendor: apple model: watch
vendor: google model: home
vendor: google model: android
vendor: palo model: networks

CVE-2025-0136 PAN-OS: Unencrypted Data Transfer when using AES-128-CCM on Intel-based hardware devices

Trust: 3.75

Fetched: May 28, 2025, 9:26 a.m., Published: May 14, 2025, 4 p.m.
 Vulnerabilities: -
Affected productsExternal IDs
vendor: palo alto networks model: pan-os
vendor: palo alto networks model: networks
vendor: palo alto networks model: firewall
vendor: paloaltonetworks model: pan-os
vendor: paloaltonetworks model: networks
vendor: paloaltonetworks model: firewall
vendor: palo model: pan-os
vendor: palo model: networks
vendor: palo model: firewall
db: NVD ids: CVE-2025-0136

New Vulnerabilities Monday 26 May - CND News and Blog

Trust: 3.75

Fetched: May 28, 2025, 9:24 a.m., Published: May 26, 2025, midnight
 Vulnerabilities: memory corruption
Affected productsExternal IDs
vendor: mageia model: mageia
vendor: siemens model: sipass integrated

Cisco Secure Network Analytics Manager API Authorization Vulnerability - Cisco

Trust: 4.25

Fetched: May 28, 2025, 9:23 a.m., Published: May 21, 2025, 11:40 a.m.
 Vulnerabilities: authorization vulnerability
Affected productsExternal IDs

Cisco Secure Network Analytics Manager Privilege Escalation Vulnerability - Cisco

Trust: 4.25

Fetched: May 28, 2025, 9:22 a.m., Published: May 21, 2025, 11:40 a.m.
 Vulnerabilities: privilege escalation
Affected productsExternal IDs

How to Perform Penetration Testing on IoT Devices: Top Tools & Techniques - DEVOPS DONE RIGHT.

Trust: 4.5

Fetched: May 28, 2025, 9:22 a.m., Published: May 26, 2025, 10:55 a.m.
 Vulnerabilities: code execution, default credentials
Affected productsExternal IDs
vendor: wireshark model: wireshark

cyberne.ws -- Relevant headlines in cybersecurity. No fluff.

Trust: 4.25

Fetched: May 28, 2025, 9:20 a.m., Published: May 28, 2025, midnight
 Vulnerabilities: denial of service, header injection, privilege escalation...
Affected productsExternal IDs
vendor: d-link model: router
vendor: cisco model: meeting
vendor: cisco model: routers
vendor: cisco model: cisco webex meetings
vendor: cisco model: cisco identity services engine
vendor: cisco model: webex
vendor: cisco model: sd-wan
vendor: cisco model: vpn client
vendor: cisco model: router
vendor: cisco model: cisco webex
vendor: cisco model: webex meetings
vendor: cisco model: identity services engine
vendor: apple model: macos
vendor: google model: chrome
vendor: nissan model: leaf
vendor: nissan model: nissan leaf
vendor: sonicwall model: web application firewall
vendor: sonicwall model: email security
vendor: netgear model: router
vendor: netgear model: netgear router

CVE-2025-4338 : XML External Entity Vulnerability in Lantronix Device Installer

Trust: 3.25

Fetched: May 28, 2025, 9:20 a.m., Published: May 22, 2025, 11:15 p.m.
 Vulnerabilities: -
Affected productsExternal IDs
db: NVD ids: CVE-2025-4338

AirBorne flaws can lead to fully hijack Apple devices

Trust: 5.5

Fetched: May 28, 2025, 9:19 a.m., Published: April 30, 2025, 5:36 a.m.
 Vulnerabilities: buffer overflow, code execution
Affected productsExternal IDs
vendor: apple model: iphone
vendor: apple model: macos
vendor: apple model: ipad
db: NVD ids: CVE-2025-24206, CVE-2025-24252, CVE-2025-24132

D-Link Technical Support

Trust: 5.0

Fetched: May 28, 2025, 9:08 a.m., Published: May 28, 2610, midnight
 Vulnerabilities: command injection
Affected productsExternal IDs
vendor: d-link model: dap-2610

Are Ring Cameras Safe? A Comprehensive Examination - BlinksAndButtons

Trust: 3.75

Fetched: May 28, 2025, 9:07 a.m., Published: May 22, 2025, 6:22 p.m.
 Vulnerabilities: -

CVE-2025-31219 Race Condition Vulnerability in Apple’s XNU Kernel - TheCyberThrone

Related entries in the VARIoT vulnerabilities database: VAR-202108-1374

Trust: 5.5

Fetched: May 28, 2025, 9:05 a.m., Published: May 24, 2025, 1:01 p.m.
 Vulnerabilities: privilege escalation, code execution, memory corruption
Affected productsExternal IDs
vendor: cisco model: cisco ios
vendor: cisco model: ios xr
vendor: cisco model: cisco ios xr
vendor: apple model: macos
vendor: apple model: tvos
vendor: apple model: watchos
vendor: google model: android
db: NVD ids: CVE-2021-0920, CVE-2022-20821, CVE-2021-1048, CVE-2025-31219, CVE-2021-30869

CVE-2025-41651 - Cisco Device Remote Command Execution Vulnerability

Trust: 5.0

Fetched: May 28, 2025, 9:05 a.m., Published: May 27, 2025, 9:15 a.m.
 Vulnerabilities: command execution
Affected productsExternal IDs
db: NVD ids: CVE-2025-41651

Arm Mali GPU Vulnerability Enables Bypass of MTE and Arbitrary Kernel Code Execution

Trust: 5.25

Fetched: May 28, 2025, 9:05 a.m., Published: May 27, 2025, 10:42 a.m.
 Vulnerabilities: code execution
Affected productsExternal IDs
db: NVD ids: CVE-2025-0072