Sign-up

VARIoT news about IoT security

Android Security Bulletin-July 2025 | Android Open Source Project

Trust: 3.5

Fetched: July 22, 2025, 9:38 a.m., Published: July 22, 2025, midnight
 Vulnerabilities: code execution, information disclosure, denial of service
Affected productsExternal IDs
vendor: motorola model: motorola
vendor: motorola model: android
vendor: huawei model: huawei
vendor: samsung model: mobile
vendor: samsung model: samsung
vendor: samsung model: notes
vendor: google model: pixel
vendor: google model: android

Hackers exploit recently discovered vulnerability on Microsoft SharePoint servers | AP News

Trust: 3.5

Fetched: July 22, 2025, 9:37 a.m., Published: July 21, 2025, 1:03 p.m.
 Vulnerabilities: -
Affected productsExternal IDs
vendor: palo alto networks model: networks
vendor: palo model: networks
db: NVD ids: CVE-2025-49706

Cisco Identity Services Engine Authenticated Remote Code Execution and Authorization Bypass Vulnerabilities

Trust: 4.75

Fetched: July 22, 2025, 9:37 a.m., Published: July 16, 2025, 3:57 p.m.
 Vulnerabilities: code execution
Affected productsExternal IDs
vendor: cisco model: cisco identity services engine
vendor: cisco model: identity services engine
db: NVD ids: CVE-2025-20284, CVE-2025-20283, CVE-2025-20285

Hard-Coded Credentials Found in HPE Instant On Devices Allow Admin Access

Trust: 4.5

Fetched: July 22, 2025, 9:36 a.m., Published: July 21, 2025, midnight
 Vulnerabilities: denial of service
Affected productsExternal IDs
vendor: hewlett-packard model: integrity
vendor: hewlett-packard enterprise model: integrity
db: NVD ids: CVE-2025-37103

Ubiquiti UniFi Vulnerability Lets Hackers Inject Malicious Commands

Trust: 5.25

Fetched: July 22, 2025, 9:35 a.m., Published: July 18, 2025, 12:18 p.m.
 Vulnerabilities: command injection
Affected productsExternal IDs
vendor: ubiquiti model: unifi
db: NVD ids: CVE-2025-27212

Cisco Unified Intelligence Center Arbitrary File Upload Vulnerability

Trust: 3.75

Fetched: July 22, 2025, 9:35 a.m., Published: July 16, 2025, 3:57 p.m.
 Vulnerabilities: file upload vulnerability
Affected productsExternal IDs
vendor: cisco model: unified intelligence center
vendor: cisco model: cisco unified intelligence center

How Do I Conduct a Security Audit of My Home Office Devices? - Improve Workspace

Trust: 3.5

Fetched: July 22, 2025, 9:34 a.m., Published: July 20, 2025, 7:47 p.m.
 Vulnerabilities: -
Affected productsExternal IDs
vendor: wireshark model: wireshark

Ubiquiti UniFi Devices Vulnerability Allows Attackers to Inject Malicious Commands - HEAL Security Inc. - Cyber Threat Intelligence for the Healthcare Sector

Trust: 4.75

Fetched: July 22, 2025, 9:17 a.m., Published: July 18, 2025, 12:42 p.m.
 Vulnerabilities: command injection
Affected productsExternal IDs
vendor: ubiquiti model: unifi
db: NVD ids: CVE-2025-27212

Node.js - Tuesday, July 15, 2025 Security Releases

Trust: 3.75

Fetched: July 22, 2025, 9:16 a.m., Published: July 15, 2025, midnight
 Vulnerabilities: -
Affected productsExternal IDs
vendor: nodejs model: node.js
vendor: node.js model: node.js
db: NVD ids: CVE-2025-23084

Ubiquiti UniFi Devices Vulnerability Allows Attackers to Inject Malicious

Trust: 4.5

Fetched: July 22, 2025, 9:16 a.m., Published: July 20, 2025, 8 p.m.
 Vulnerabilities: service disruption, command injection, command execution
Affected productsExternal IDs
vendor: ubiquiti model: unifi
db: NVD ids: CVE-2025-27212

A Critical Flaw Found In Popular HPE Aruba Wi-Fi Devices - Dataconomy

Trust: 5.75

Fetched: July 22, 2025, 9:15 a.m., Published: July 21, 2025, 9:07 a.m.
 Vulnerabilities: command injection
Affected productsExternal IDs
vendor: aruba model: aruba instant
vendor: aruba model: instant
db: NVD ids: CVE-2025-37102, CVE-2025-37103

Node.js Path Traversal on Windows: CVE-2025-27210 Exploited with Device Names (PoC Inside) - ZeroPath Blog | ZeroPath

Trust: 5.5

Fetched: July 22, 2025, 9:15 a.m., Published: July 18, 2025, midnight
 Vulnerabilities: privilege escalation, directory traversal, path traversal
Affected productsExternal IDs
vendor: node.js model: node.js
db: NVD ids: CVE-2025-27210, CVE-2025-23084, CVE-2025-27209

HPE Warns of Aruba Hardcoded Credentials Allowing Attackers to Bypass Device Authentication

Trust: 5.5

Fetched: July 22, 2025, 9:14 a.m., Published: July 21, 2025, 9:01 a.m.
 Vulnerabilities: code execution, authentication bypass, restriction bypass
Affected productsExternal IDs
vendor: hewlett packard model: switches
vendor: hewlett packard enterprise model: switches
vendor: aruba model: instant access point
vendor: aruba model: instant
db: NVD ids: CVE-2025-37103

Ubiquiti UniFi Devices Vulnerability Allows Attackers to Inject Malicious Commands

Trust: 5.75

Fetched: July 22, 2025, 9:09 a.m., Published: July 18, 2025, 12:42 p.m.
 Vulnerabilities: command injection
Affected productsExternal IDs
vendor: ubiquiti model: unifi
db: NVD ids: CVE-2025-27212

Download and install Google Chrome - Computer - Google Chrome Help

Trust: 3.0

Fetched: July 22, 2025, 9:08 a.m., Published: July 10, 2025, midnight
 Vulnerabilities: -
Affected productsExternal IDs
vendor: google model: google chrome
vendor: google model: chrome

SGH-D600 | Samsung Supporto IT

Trust: 3.25

Fetched: July 20, 2025, 10:18 a.m., Published: Oct. 7, 2020, midnight
 Vulnerabilities: -
Affected productsExternal IDs
vendor: samsung model: samsung

Utilizar Gmail para acceder a tu cuenta de Google - Ayuda de Cuenta de Google

Trust: 3.0

Fetched: July 20, 2025, 10:04 a.m., Published: -
 Vulnerabilities: -
Affected productsExternal IDs
vendor: google model: chrome

Can work see my location when using outlook, sharepoint, teams? - Microsoft Community

Trust: 3.0

Fetched: July 20, 2025, 9:54 a.m., Published: July 8, 2025, 4:35 p.m.
 Vulnerabilities: -
Affected productsExternal IDs
vendor: apple model: ipod touch
vendor: apple model: iphone
vendor: apple model: ipad

Understand & manage your location when you search on Google - Android - Google Search Help

Trust: 3.5

Fetched: July 20, 2025, 9:54 a.m., Published: July 6, 2025, midnight
 Vulnerabilities: -
Affected productsExternal IDs
vendor: google model: android
vendor: google model: chrome
vendor: google model: home
vendor: google model: google home

Let Google Earth access your location - Android - Google Earth Help

Trust: 3.0

Fetched: July 20, 2025, 9:53 a.m., Published: Jan. 6, 2025, midnight
 Vulnerabilities: -
Affected productsExternal IDs
vendor: google model: android