Sign-up

VARIoT news about IoT security

Eclipse Project Release Notes 3.2

Trust: 3.5

Fetched: Oct. 10, 2025, 10:02 a.m., Published: Oct. 3, 2025, midnight
 Vulnerabilities: -
Affected productsExternal IDs
vendor: sun microsystems model: linux
vendor: sun microsystems model: solaris 10 sparc
vendor: sun microsystems model: java
vendor: sun microsystems model: sun solaris
vendor: sun microsystems model: solaris
vendor: apple model: mac os
vendor: apple model: macos
vendor: apple model: mac os x
vendor: apple model: java
vendor: apple model: apple mac os x
vendor: apple model: watch

Make Google your homepage - Google Search Help

Trust: 3.0

Fetched: Oct. 10, 2025, 9:51 a.m., Published: Jan. 13, 2025, midnight
 Vulnerabilities: -
Affected productsExternal IDs
vendor: google model: home

I need to remove the Search-Great Hijacker from my profile - Google Chrome Community

Trust: 3.0

Fetched: Oct. 10, 2025, 9:40 a.m., Published: -
 Vulnerabilities: -
Affected productsExternal IDs
vendor: google model: chrome
vendor: google model: google chrome

Google Earth

Trust: 3.25

Fetched: Oct. 10, 2025, 9:30 a.m., Published: Oct. 10, 2018, midnight
 Vulnerabilities: -
Affected productsExternal IDs
vendor: google model: pixel

Critical vulnerabilities in 689(!!) Brother printers: predict default password from serial number and more! 👨‍💻🌐📇🌈👻

Trust: 4.0

Fetched: Oct. 8, 2025, 9:32 a.m., Published: Sept. 29, 2025, midnight
 Vulnerabilities: default password
Affected productsExternal IDs

CISA Orders Agencies to Mitigate Cisco Vulnerabilities

Trust: 3.75

Fetched: Oct. 8, 2025, 9:32 a.m., Published: Sept. 26, 2025, 8:02 p.m.
 Vulnerabilities: code execution, privilege escalation
Affected productsExternal IDs
vendor: cisco model: firepower

Another 5 vulnerabilities added to CISA’s KEV catalogue - Cyber Daily

Related entries in the VARIoT vulnerabilities database: VAR-201512-0518, VAR-201409-1156, VAR-201409-0366, VAR-201409-1154, VAR-201409-1155

Trust: 5.5

Fetched: Oct. 8, 2025, 9:31 a.m., Published: Oct. 3, 2025, 1:21 a.m.
 Vulnerabilities: command injection, authentication vulnerability, command execution...
Affected productsExternal IDs
vendor: samsung model: samsung
vendor: samsung model: samsung mobile
vendor: samsung model: mobile
vendor: samsung model: mobile devices
db: NVD ids: CVE-2025-21043, CVE-2015-7755, CVE-2014-6271, CVE-2014-6277, CVE-2017-1000353, CVE-2014-6278, CVE-2025-4008, CVE-2014-7169

Urgent Samsung Security Alert: Update Your Device Now to Patch Critical

Trust: 3.5

Fetched: Oct. 8, 2025, 9:31 a.m., Published: Sept. 16, 2025, 4:16 p.m.
 Vulnerabilities: -
Affected productsExternal IDs
vendor: samsung model: samsung
vendor: samsung model: galaxy
vendor: apple model: iphone
vendor: apple model: software update
vendor: google model: android
db: NVD ids: CVE-2025-21043

TOTOLINK X6000R Router Vulnerabilities Let Remote Attackers Execute Arbitrary Commands

Trust: 4.5

Fetched: Oct. 8, 2025, 9:29 a.m., Published: Oct. 3, 2025, 11:38 a.m.
 Vulnerabilities: command injection, injection attack, command execution...
Affected productsExternal IDs
vendor: palo model: networks
vendor: google model: home
vendor: palo alto networks model: networks

Samsung Zero-Day Vulnerability Actively Exploited to Execute Remote Code

Trust: 4.5

Fetched: Oct. 8, 2025, 9:27 a.m., Published: Sept. 12, 2025, 2:12 p.m.
 Vulnerabilities: code execution, improper access control, memory corruption
Affected productsExternal IDs
vendor: samsung model: samsung
vendor: samsung model: galaxy
vendor: google model: android
vendor: google model: home
db: NVD ids: CVE-2025-21043, CVE-2025-21033, CVE-2025-32100, CVE-2025-21034, CVE-2025-21032

CVE-2022-50547 - media: solo6x10: fix possible memory leak in solo_sysfs_init() - SecAlerts

Trust: 4.25

Fetched: Oct. 8, 2025, 9:27 a.m., Published: -
 Vulnerabilities: memory leak
Affected productsExternal IDs
db: NVD ids: CVE-2022-50547

PoC Published for VMware Workstation Guest-to-Host Escape

Trust: 3.75

Fetched: Oct. 8, 2025, 9:26 a.m., Published: Oct. 3, 2025, 7:51 a.m.
 Vulnerabilities: code execution, memory corruption
Affected productsExternal IDs
db: NVD ids: CVE-2023-20870, CVE-2023-34044, CVE-2023-20869

FileZilla Server < 0.9.6 - DoS via MS-DOS Device Names (CVE-2005-0850) - Vulnerability & Exploit Database

Trust: 5.0

Fetched: Oct. 8, 2025, 9:26 a.m., Published: Oct. 7, 2025, midnight
 Vulnerabilities: denial of service
Affected productsExternal IDs
vendor: filezilla model: server
vendor: filezilla model: filezilla server
db: NVD ids: CVE-2005-0850

Cisco IOS XE Software CLI Argument Injection Vulnerability

Trust: 3.0

Fetched: Oct. 8, 2025, 9:26 a.m., Published: Sept. 24, 2025, 4:06 p.m.
 Vulnerabilities: -
Affected productsExternal IDs
vendor: cisco model: ios xe
vendor: cisco model: ios xe software
vendor: cisco model: cisco ios
vendor: cisco model: cisco ios xe

CISA Warns of Libraesva ESG Command Injection Vulnerability Actively

Trust: 5.75

Fetched: Oct. 8, 2025, 9:24 a.m., Published: Oct. 8, 2025, midnight
 Vulnerabilities: command injection, command execution
Affected productsExternal IDs
vendor: snort model: snort
db: NVD ids: CVE-2025-59689

WAGO Device Sphere and Solution Builder Vulnerability Expose Database and User Credentials - Advisories

Trust: 5.0

Fetched: Oct. 8, 2025, 9:24 a.m., Published: Oct. 9, 2025, midnight
 Vulnerabilities: privilege escalation
Affected productsExternal IDs
vendor: wago model: wago
db: NVD ids: CVE-2025-41715, CVE-2025-41716

Urgent: China-Linked Hackers Exploit New VMware Zero-Day Since October 2024

Trust: 5.5

Fetched: Oct. 8, 2025, 9:23 a.m., Published: Sept. 30, 2025, 10:57 a.m.
 Vulnerabilities: code execution, privilege escalation
Affected productsExternal IDs
vendor: broadcom model: linux
db: NVD ids: CVE-2025-41244

Surface Pro 7 September 2025 update is now available to install via Windows Update

Trust: 5.0

Fetched: Oct. 8, 2025, 9:22 a.m., Published: Sept. 30, 2025, 4 a.m.
 Vulnerabilities: information disclosure
Affected productsExternal IDs
db: NVD ids: CVE-2022-29871

The CVE-2025-59489 vulnerability in Unity, and how to fix it in games | Kaspersky official blog

Trust: 3.0

Fetched: Oct. 8, 2025, 9:19 a.m., Published: Oct. 8, 2025, midnight
 Vulnerabilities: -
Affected productsExternal IDs
db: NVD ids: CVE-2025-59489

Cisco IOS XE Software Simple Network Management Protocol Denial of Service Vulnerability

Trust: 5.0

Fetched: Oct. 8, 2025, 9:16 a.m., Published: Sept. 24, 2025, 4:06 p.m.
 Vulnerabilities: denial of service
Affected productsExternal IDs
vendor: cisco model: nx-os
vendor: cisco model: ios xr
vendor: cisco model: ios software
vendor: cisco model: cisco ios xe
vendor: cisco model: nx-os software
vendor: cisco model: ios xr software
vendor: cisco model: cisco ios
vendor: cisco model: ios xe
vendor: cisco model: ios xe software