Sign-up

VARIoT news about IoT security

Your OnePlus phone is probably at risk from a major SMS vulnerability | The Verge

Trust: 3.75

Fetched: Oct. 10, 2025, 10:22 a.m., Published: Sept. 26, 2025, 12:12 p.m.
 Vulnerabilities: -
Affected productsExternal IDs
vendor: oneplus model: oneplus
vendor: oneplus model: oxygenos
db: NVD ids: CVE-2025-10184

CISA Warns of Cisco IOS and IOS XE SNMP Vulnerabilities Exploited in

Trust: 5.5

Fetched: Oct. 10, 2025, 10:22 a.m., Published: Oct. 9, 2025, 1:10 p.m.
 Vulnerabilities: code execution, buffer overflow
Affected productsExternal IDs
vendor: cisco model: cisco ios
vendor: cisco model: ios xe
db: NVD ids: CVE-2025-20352

RondoDox Botnet Targets Over 50 Vulnerabilities to Compromise Routers, CCTV Systems, and Web Servers

Related entries in the VARIoT vulnerabilities database: VAR-202303-1268

Trust: 4.5

Fetched: Oct. 10, 2025, 10:21 a.m., Published: Oct. 10, 2025, 8:36 a.m.
 Vulnerabilities: command injection, memory corruption, authentication bypass...
Affected productsExternal IDs
vendor: tp-link model: routers
vendor: four-faith model: four-faith
vendor: trend model: security
db: NVD ids: CVE-2023-1389, CVE-2024-12856, CVE-2024-3721

AWS Client VPN for macOS Hit by Critical Privilege Escalation Vulnerability

Trust: 4.75

Fetched: Oct. 10, 2025, 10:20 a.m., Published: Oct. 8, 2025, 11:26 a.m.
 Vulnerabilities: code execution, privilege escalation
Affected productsExternal IDs
db: NVD ids: CVE-2025-11462

Connected and vulnerable: The growing urgency of IoT and mobile security in India, ETCISO

Trust: 3.5

Fetched: Oct. 10, 2025, 10:19 a.m., Published: Oct. 10, 2025, 9 a.m.
 Vulnerabilities: -
Affected productsExternal IDs
vendor: trend model: security

Access Blocked - SecNews.gr

Trust: 3.25

Fetched: Oct. 10, 2025, 10:18 a.m., Published: -
 Vulnerabilities: sql injection
Affected productsExternal IDs

Old SonicWall vulnerability resurfaces in Akira ransomware campaign, Darktrace warns - Industrial Cyber

Trust: 5.5

Fetched: Oct. 10, 2025, 10:17 a.m., Published: Oct. 9, 2025, 2:57 p.m.
 Vulnerabilities: privilege escalation
Affected productsExternal IDs
vendor: winscp model: winscp
vendor: filezilla model: server
vendor: sonicwall model: remote access
vendor: sonicwall model: ssl vpn
db: NVD ids: CVE-2024-40766

CVE-2025-59407: High-Risk Vulnerability in Flock Safety DetectionProcessing Application for Android - Cybersecurity Exploit Tracker by Ameeba

Trust: 3.0

Fetched: Oct. 10, 2025, 10:17 a.m., Published: Oct. 10, 2025, 12:44 a.m.
 Vulnerabilities: -
Affected productsExternal IDs
db: NVD ids: CVE-2025-59407

CVE-2025-39958 - iommu/s390: Make attach succeed when the device was surprise removed - SecAlerts

Trust: 3.0

Fetched: Oct. 10, 2025, 10:15 a.m., Published: -
 Vulnerabilities: -
Affected productsExternal IDs
db: NVD ids: CVE-2025-39958

PoC Exploit Released For Nothing Phone Code Execution Vulnerability

Trust: 4.0

Fetched: Oct. 10, 2025, 10:14 a.m., Published: Oct. 9, 2025, 9:36 a.m.
 Vulnerabilities: code execution
Affected productsExternal IDs

PoC Exploit Released For Nothing Phone Code Execution Vulnerability

Trust: 4.5

Fetched: Oct. 10, 2025, 10:14 a.m., Published: Oct. 10, 2025, 9:23 a.m.
 Vulnerabilities: code execution, privilege escalation, security bypass
Affected productsExternal IDs
vendor: google model: android

CVE-2023-53365 : VLAN Device Vulnerability in Linux Kernel Affecting Network Performance

Trust: 3.25

Fetched: Oct. 10, 2025, 10:12 a.m., Published: Sept. 17, 2025, 2:56 p.m.
 Vulnerabilities: memory corruption
Affected productsExternal IDs
db: NVD ids: CVE-2023-53365

Eclipse Project Release Notes 3.2

Trust: 3.5

Fetched: Oct. 10, 2025, 10:02 a.m., Published: Oct. 3, 2025, midnight
 Vulnerabilities: -
Affected productsExternal IDs
vendor: sun microsystems model: linux
vendor: sun microsystems model: solaris 10 sparc
vendor: sun microsystems model: java
vendor: sun microsystems model: sun solaris
vendor: sun microsystems model: solaris
vendor: apple model: mac os
vendor: apple model: macos
vendor: apple model: mac os x
vendor: apple model: java
vendor: apple model: apple mac os x
vendor: apple model: watch

Make Google your homepage - Google Search Help

Trust: 3.0

Fetched: Oct. 10, 2025, 9:51 a.m., Published: Jan. 13, 2025, midnight
 Vulnerabilities: -
Affected productsExternal IDs
vendor: google model: home

I need to remove the Search-Great Hijacker from my profile - Google Chrome Community

Trust: 3.0

Fetched: Oct. 10, 2025, 9:40 a.m., Published: -
 Vulnerabilities: -
Affected productsExternal IDs
vendor: google model: chrome
vendor: google model: google chrome

Google Earth

Trust: 3.25

Fetched: Oct. 10, 2025, 9:30 a.m., Published: Oct. 10, 2018, midnight
 Vulnerabilities: -
Affected productsExternal IDs
vendor: google model: pixel

Critical vulnerabilities in 689(!!) Brother printers: predict default password from serial number and more! 👨‍💻🌐📇🌈👻

Trust: 4.0

Fetched: Oct. 8, 2025, 9:32 a.m., Published: Sept. 29, 2025, midnight
 Vulnerabilities: default password
Affected productsExternal IDs

CISA Orders Agencies to Mitigate Cisco Vulnerabilities

Trust: 3.75

Fetched: Oct. 8, 2025, 9:32 a.m., Published: Sept. 26, 2025, 8:02 p.m.
 Vulnerabilities: code execution, privilege escalation
Affected productsExternal IDs
vendor: cisco model: firepower

Another 5 vulnerabilities added to CISA’s KEV catalogue - Cyber Daily

Related entries in the VARIoT vulnerabilities database: VAR-201512-0518, VAR-201409-1156, VAR-201409-0366, VAR-201409-1154, VAR-201409-1155

Trust: 5.5

Fetched: Oct. 8, 2025, 9:31 a.m., Published: Oct. 3, 2025, 1:21 a.m.
 Vulnerabilities: command injection, authentication vulnerability, command execution...
Affected productsExternal IDs
vendor: samsung model: samsung
vendor: samsung model: samsung mobile
vendor: samsung model: mobile
vendor: samsung model: mobile devices
db: NVD ids: CVE-2025-21043, CVE-2015-7755, CVE-2014-6271, CVE-2014-6277, CVE-2017-1000353, CVE-2014-6278, CVE-2025-4008, CVE-2014-7169

Urgent Samsung Security Alert: Update Your Device Now to Patch Critical

Trust: 3.5

Fetched: Oct. 8, 2025, 9:31 a.m., Published: Sept. 16, 2025, 4:16 p.m.
 Vulnerabilities: -
Affected productsExternal IDs
vendor: samsung model: samsung
vendor: samsung model: galaxy
vendor: apple model: iphone
vendor: apple model: software update
vendor: google model: android
db: NVD ids: CVE-2025-21043