Sign-up

VARIoT news about IoT security

Ivanti Endpoint Manager Vulnerabilities Let Attackers Write Arbitrary Files

Trust: 4.5

Fetched: Nov. 12, 2025, 9:39 a.m., Published: Nov. 12, 2025, 12:40 p.m.
 Vulnerabilities: privilege escalation, code execution, denial of service
Affected productsExternal IDs
db: NVD ids: CVE-2025-10918

DANGER ZONE! Is Your Samsung Galaxy Data STOLEN? Critical 9.8/10 Vulnerability Targeted Middle East Users with Spyware! - Pune Times Mirror

Trust: 3.5

Fetched: Nov. 12, 2025, 9:36 a.m., Published: Nov. 11, 2025, 11:11 a.m.
 Vulnerabilities: -
Affected productsExternal IDs
vendor: samsung model: samsung
vendor: samsung model: mobile
vendor: samsung model: galaxy
vendor: samsung model: samsung galaxy
db: NVD ids: CVE-2025-21042

CVE-2025-4645 : Arbitrary Code Execution Vulnerability in Axis Devices

Trust: 6.25

Fetched: Nov. 12, 2025, 9:33 a.m., Published: Nov. 11, 2025, 6:45 a.m.
 Vulnerabilities: code execution
Affected productsExternal IDs
vendor: axis model: axis
db: NVD ids: CVE-2025-4645

Update Canonical Ubuntu Server: USN-7860-2: Linux kernel (Real-time) vulnerability

Trust: 3.25

Fetched: Nov. 12, 2025, 9:32 a.m., Published: Feb. 12, 7860, midnight
 Vulnerabilities: -
Affected productsExternal IDs
vendor: canonical model: ubuntu

Samsung Security Snafu: Galaxy Devices Hit by Zero-Day Vulnerability Exploit - The Nimble Nerd

Trust: 3.0

Fetched: Nov. 12, 2025, 9:32 a.m., Published: Nov. 11, 2025, 9:24 a.m.
 Vulnerabilities: -
Affected productsExternal IDs
vendor: samsung model: galaxy
vendor: samsung model: samsung

CVE-2025-8108 : Privilege Escalation Vulnerability in Axis Devices due to Improper ACAP Configuration

Trust: 5.25

Fetched: Nov. 12, 2025, 9:32 a.m., Published: Nov. 11, 2025, 7:10 a.m.
 Vulnerabilities: privilege escalation
Affected productsExternal IDs
vendor: axis model: axis
db: NVD ids: CVE-2025-8108

CVE-2025-5452 : Privilege Escalation Vulnerability in Axis Devices via Malicious ACAP Applications

Trust: 5.0

Fetched: Nov. 12, 2025, 9:32 a.m., Published: Nov. 11, 2025, 7 a.m.
 Vulnerabilities: privilege escalation
Affected productsExternal IDs
vendor: axis model: axis
db: NVD ids: CVE-2025-5452

CVE-2025-6779 : Command Injection Vulnerability in Axis Devices via ACAP Configuration File

Trust: 5.25

Fetched: Nov. 12, 2025, 9:31 a.m., Published: Nov. 11, 2025, 7:05 a.m.
 Vulnerabilities: command injection
Affected productsExternal IDs
vendor: axis model: axis
db: NVD ids: CVE-2025-6779

Update Canonical Ubuntu Desktop: USN-7857-1: OpenStack Keystone vulnerability

Trust: 3.0

Fetched: Nov. 12, 2025, 9:31 a.m., Published: Jan. 12, 7857, midnight
 Vulnerabilities: -
Affected productsExternal IDs
vendor: canonical model: ubuntu

Update Canonical Ubuntu Desktop: USN-7860-5: Linux kernel (HWE) vulnerability

Trust: 3.25

Fetched: Nov. 12, 2025, 9:31 a.m., Published: May 12, 7860, midnight
 Vulnerabilities: -
Affected productsExternal IDs
vendor: canonical model: ubuntu

CVE-2025-5454 : Path Traversal Vulnerability in Axis Devices - ACAP Configuration Flaw

Trust: 5.0

Fetched: Nov. 12, 2025, 9:30 a.m., Published: Nov. 11, 2025, 6:50 a.m.
 Vulnerabilities: configuration flaw, traversal attack, path traversal
Affected productsExternal IDs
vendor: axis model: axis
db: NVD ids: CVE-2025-5454

How Hackers Target Smart Home Devices - FROMDEV

Trust: 3.0

Fetched: Nov. 12, 2025, 9:28 a.m., Published: Nov. 12, 2025, 8 a.m.
 Vulnerabilities: denial of service
Affected productsExternal IDs

Cisco detects new attack variant targeting vulnerable firewalls | Cybersecurity Dive

Trust: 5.0

Fetched: Nov. 12, 2025, 9:28 a.m., Published: Nov. 10, 2025, midnight
 Vulnerabilities: denial of service
Affected productsExternal IDs
vendor: cisco model: asa software
db: NVD ids: CVE-2025-20333, CVE-2025-20362

What is the Pixnapping vulnerability, and how to protect your Android smartphone? | Kaspersky official blog

Trust: 3.5

Fetched: Nov. 12, 2025, 9:27 a.m., Published: Jan. 12, 2050, midnight
 Vulnerabilities: -
Affected productsExternal IDs
vendor: samsung model: samsung
vendor: samsung model: galaxy
vendor: samsung model: samsung galaxy
vendor: google model: pixel
vendor: google model: android
db: NVD ids: CVE-2025-48561

Update Canonical Ubuntu Server: USN-7857-1: OpenStack Keystone vulnerability

Trust: 3.0

Fetched: Nov. 12, 2025, 9:26 a.m., Published: Jan. 12, 7857, midnight
 Vulnerabilities: -
Affected productsExternal IDs
vendor: canonical model: ubuntu

Update Canonical Ubuntu Server: USN-7858-1: poppler vulnerability

Trust: 3.25

Fetched: Nov. 12, 2025, 9:26 a.m., Published: Jan. 12, 7858, midnight
 Vulnerabilities: -
Affected productsExternal IDs
vendor: canonical model: ubuntu

WatchGuard Firebox Flaw Allows Attackers to Gain Unauthorized SSH Access

Trust: 4.0

Fetched: Nov. 12, 2025, 9:26 a.m., Published: Nov. 11, 2025, 9:28 a.m.
 Vulnerabilities: -
Affected productsExternal IDs
vendor: watchguard model: firebox
db: NVD ids: CVE-2025-59396

Major Vulnerability in Microchip ASF Puts IoT Devices at Risk of Remote Code Execution - Breach Spot

Trust: 4.75

Fetched: Nov. 12, 2025, 9:25 a.m., Published: Nov. 12, 2025, 1:45 a.m.
 Vulnerabilities: code execution, buffer overflow
Affected productsExternal IDs
db: NVD ids: CVE-2024-7490, CVE-2024-20017

CISA: Patch Samsung flaw exploited to deliver spyware (CVE-2025-21042) - Help Net Security

Trust: 3.75

Fetched: Nov. 12, 2025, 9:24 a.m., Published: Nov. 11, 2025, 3:27 p.m.
 Vulnerabilities: -
Affected productsExternal IDs
vendor: palo model: networks
vendor: samsung model: samsung mobile
vendor: samsung model: mobile devices
vendor: samsung model: samsung
vendor: samsung model: mobile
vendor: samsung model: galaxy
vendor: samsung model: samsung galaxy
vendor: palo alto networks model: networks
db: NVD ids: CVE-2025-21042, CVE-2025-21043

Critical Security Vulnerability in Synology BeeStation NAS Patched Following Pwn2Own Discovery

Trust: 5.0

Fetched: Nov. 12, 2025, 9:24 a.m., Published: Nov. 12, 2025, midnight
 Vulnerabilities: buffer overflow
Affected productsExternal IDs
vendor: trend model: security
db: NVD ids: CVE-2025-12686