Sign-up

VARIoT news about IoT security

MyTF1 "Un problème technique est survenu"

Trust: 3.0

Fetched: Aug. 12, 2025, 9:12 a.m., Published: -
 Vulnerabilities: -
Affected productsExternal IDs
vendor: google model: chrome
vendor: google model: google chrome

Impossible de regarder My TF1 replay [Résolu]

Trust: 3.0

Fetched: Aug. 12, 2025, 9:11 a.m., Published: -
 Vulnerabilities: -
Affected productsExternal IDs
vendor: google model: google chrome
vendor: google model: chrome

CVE-2025-8635 - (0Day) Kenwood DMX958XR Firmware Update Command Injection Vulnerability - SecAlerts

Trust: 3.25

Fetched: Aug. 10, 2025, 10:49 a.m., Published: -
 Vulnerabilities: command injection
Affected productsExternal IDs
db: NVD ids: CVE-2025-8635

Critical RCE Vulnerability Discovered in SonicWall SMA 100 Series Devices - Critical Path Security

Related entries in the VARIoT vulnerabilities database: VAR-202505-1415

Trust: 4.75

Fetched: Aug. 10, 2025, 10:49 a.m., Published: July 24, 2025, 1:05 p.m.
 Vulnerabilities: code execution, cross-site scripting
Affected productsExternal IDs
vendor: sonicwall model: sma 100
db: NVD ids: CVE-2025-32819, CVE-2025-40599

7 Top Vulnerable Websites For Mastering Web Security [2025]

Related entries in the VARIoT vulnerabilities database: VAR-201703-0755

Trust: 5.25

Fetched: Aug. 10, 2025, 10:46 a.m., Published: July 24, 2025, 12:40 a.m.
 Vulnerabilities: privilege escalation, code execution, session hijacking...
Affected productsExternal IDs
vendor: google model: android
vendor: wireshark model: wireshark
vendor: notion model: bridge
db: NVD ids: CVE-2017-5638

Packet Power EMX and EG | CISA

Trust: 3.0

Fetched: Aug. 10, 2025, 10:45 a.m., Published: Aug. 1, 2025, midnight
 Vulnerabilities: -
Affected productsExternal IDs
db: NVD ids: CVE-2025-8284

Top 10 Internet of Things (IoT) Security Best Practices - GeeksforGeeks

Trust: 3.5

Fetched: Aug. 10, 2025, 10:45 a.m., Published: April 30, 2024, 4:13 p.m.
 Vulnerabilities: -
Affected productsExternal IDs
vendor: checkpoint model: endpoint security

About the security content of macOS Sequoia 15.6 - Apple Support

Trust: 5.25

Fetched: Aug. 10, 2025, 10:44 a.m., Published: Aug. 15, 2025, midnight
 Vulnerabilities: heap corruption, integer overflow, authorization issue...
Affected productsExternal IDs
vendor: apple model: macos
vendor: apple model: icloud
vendor: apple model: safari
vendor: trend micro model: security
vendor: trend model: security
db: NVD ids: CVE-2025-43257, CVE-2025-43246, CVE-2025-43215, CVE-2025-43232, CVE-2025-43202, CVE-2025-43221, CVE-2025-43219, CVE-2025-43216, CVE-2025-31243, CVE-2025-43198, CVE-2025-43218, CVE-2025-7424, CVE-2025-43275, CVE-2025-43189, CVE-2025-43220, CVE-2025-43273, CVE-2025-43267, CVE-2025-43252, CVE-2025-43213, CVE-2025-43270, CVE-2025-43251, CVE-2025-43188, CVE-2025-43241, CVE-2025-43254, CVE-2025-43236, CVE-2025-43227, CVE-2025-43276, CVE-2025-31279, CVE-2025-43260, CVE-2025-31280, CVE-2025-43277, CVE-2025-43224, CVE-2025-43268, CVE-2025-43233, CVE-2025-43239, CVE-2025-43186, CVE-2025-6558, CVE-2025-43250, CVE-2025-43193, CVE-2025-43195, CVE-2025-43199, CVE-2025-43225, CVE-2025-43230, CVE-2025-43256, CVE-2025-43249, CVE-2025-31275, CVE-2025-43234, CVE-2025-43243, CVE-2025-43244, CVE-2025-43191, CVE-2025-43247, CVE-2025-43222, CVE-2025-43187, CVE-2025-43238, CVE-2025-43266, CVE-2025-43253, CVE-2025-43196, CVE-2025-31281, CVE-2025-43255, CVE-2025-43274, CVE-2025-43223, CVE-2025-31278, CVE-2025-43194, CVE-2025-43264, CVE-2025-43185, CVE-2025-43235, CVE-2025-43209, CVE-2025-24188, CVE-2025-43210, CVE-2025-43206, CVE-2025-43214, CVE-2025-31273, CVE-2025-43237, CVE-2025-43245, CVE-2025-43211, CVE-2025-43240, CVE-2025-43248, CVE-2025-7425, CVE-2025-43229, CVE-2025-43259, CVE-2025-43226, CVE-2025-43192, CVE-2025-43212, CVE-2025-43261, CVE-2025-43265, CVE-2025-31277, CVE-2025-43197

4 Types of Attack Surface in Cybersecurity

Trust: 4.25

Fetched: Aug. 10, 2025, 10:43 a.m., Published: July 25, 2025, 5:24 a.m.
 Vulnerabilities: code injection, sql injection, code execution...
Affected productsExternal IDs
vendor: palo model: networks
vendor: essential model: phone
vendor: palo alto networks model: networks
db: NVD ids: CVE-2024-47575

CVE-2025-8654 : Command Injection Vulnerability in Kenwood DMX958XR Devices

Related entries in the VARIoT vulnerabilities database: VAR-202508-0188

Trust: 3.25

Fetched: Aug. 10, 2025, 10:43 a.m., Published: Aug. 6, 2025, 1:18 a.m.
 Vulnerabilities: command injection
Affected productsExternal IDs
db: NVD ids: CVE-2025-8654

New macOS Vulnerability Allows Attackers to Steal Private Files by Bypassing TCC

Trust: 3.5

Fetched: Aug. 10, 2025, 10:21 a.m., Published: July 29, 2025, 8:59 a.m.
 Vulnerabilities: -
Affected productsExternal IDs
vendor: apple model: icloud
vendor: apple model: macos
db: NVD ids: CVE-2025-31199

CVE-2025-20331 - Vulnerability Details - OpenCVE

Trust: 4.75

Fetched: Aug. 10, 2025, 10:20 a.m., Published: Aug. 4, 2025, midnight
 Vulnerabilities: cross-site scripting
Affected productsExternal IDs
vendor: cisco model: cisco identity services engine software
vendor: cisco model: identity services engine software
vendor: cisco model: identity services engine
vendor: cisco model: cisco identity services engine
db: NVD ids: CVE-2025-20331

CVE-2025-8475 : Buffer Overflow Vulnerability in Alpine iLX-507 Bluetooth Devices

Trust: 4.0

Fetched: Aug. 10, 2025, 10:19 a.m., Published: Aug. 1, 2025, 5:38 p.m.
 Vulnerabilities: buffer overflow
Affected productsExternal IDs
db: NVD ids: CVE-2025-8475

CVE-2025-8656 - (0Day) (Pwn2Own) Kenwood DMX958XR Protection Mechanism Failure Software Downgrade Vulnerability - SecAlerts

Related entries in the VARIoT vulnerabilities database: VAR-202508-0109

Trust: 3.25

Fetched: Aug. 10, 2025, 10:19 a.m., Published: -
 Vulnerabilities: -
Affected productsExternal IDs
db: NVD ids: CVE-2025-8656

Vulnerability Management Services: An Easy Guide 101 | SentinelOne

Trust: 3.75

Fetched: Aug. 10, 2025, 10:18 a.m., Published: Aug. 6, 2025, 11:19 a.m.
 Vulnerabilities: code insertion
Affected productsExternal IDs
vendor: delegate model: delegate

10 common cybersecurity threats and attacks: 2025 update | ConnectWise

Trust: 4.5

Fetched: Aug. 10, 2025, 10:17 a.m., Published: Aug. 10, 2025, midnight
 Vulnerabilities: denial of service
Affected productsExternal IDs
vendor: trend model: security
vendor: essential model: phone

What is Cyber Security? - GeeksforGeeks

Trust: 5.25

Fetched: Aug. 10, 2025, 10:16 a.m., Published: March 1, 2021, 5:54 p.m.
 Vulnerabilities: sql injection, privilege escalation, denial of service...
Affected productsExternal IDs
vendor: google model: home
vendor: google model: android
vendor: rising model: antivirus
vendor: apple model: watch

192 Cybersecurity Statistics for 2025 | Indusface Blog

Related entries in the VARIoT vulnerabilities database: VAR-202504-3437

Trust: 4.25

Fetched: Aug. 10, 2025, 10:14 a.m., Published: July 25, 2025, 5:24 a.m.
 Vulnerabilities: privilege escalation, service disruption, weak password...
Affected productsExternal IDs
vendor: apple model: macos
vendor: apple model: cups
vendor: apple model: java
vendor: trend model: security
vendor: google model: android
vendor: cisco model: service management
vendor: cisco model: leap
vendor: cisco model: meeting
vendor: sophos model: mobile
vendor: cups model: cups
db: NVD ids: CVE-2024-9264, CVE-2024-5217, CVE-2024-4577, CVE-2024-4879, CVE-2024-38094, CVE-2024-5806, CVE-2024-47076, CVE-2024-8190, CVE-2024-38856, CVE-2025-31324, CVE-2023-51467, CVE-2024-47176, CVE-2025-53770, CVE-2024-26169, CVE-2024-0204, CVE-2023-49070

Lantronix Provisioning Manager | CISA

Trust: 4.5

Fetched: Aug. 10, 2025, 10:14 a.m., Published: Aug. 1, 2025, midnight
 Vulnerabilities: code execution, cross-site scripting
Affected productsExternal IDs
db: NVD ids: CVE-2025-7766

CVE-2025-8069 - AWS Client VPN Windows Client Local Privilege Escalation

Trust: 4.25

Fetched: Aug. 10, 2025, 10:14 a.m., Published: Aug. 8, 2025, 9:23 p.m.
 Vulnerabilities: privilege escalation
Affected productsExternal IDs
db: NVD ids: CVE-2025-8069