VARIoT latest news about IoT security

CVE-2025-59407: High-Risk Vulnerability in Flock Safety DetectionProcessing Application for Android - Cybersecurity Exploit Tracker by Ameeba Trust: 3.0 Fetched: Oct. 10, 2025, 10:17 a.m., Published: Oct. 10, 2025, 12:44 a.m.	Vulnerabilities: -

Affected products

External IDs

db:

NVD

ids:

CVE-2025-59407

CVE-2025-39958 - iommu/s390: Make attach succeed when the device was surprise removed - SecAlerts Trust: 3.0 Fetched: Oct. 10, 2025, 10:15 a.m., Published: -	Vulnerabilities: -

Affected products

External IDs

db:

NVD

ids:

CVE-2025-39958

PoC Exploit Released For Nothing Phone Code Execution Vulnerability Trust: 4.0 Fetched: Oct. 10, 2025, 10:14 a.m., Published: Oct. 9, 2025, 9:36 a.m.	Vulnerabilities: code execution

Affected products	External IDs

PoC Exploit Released For Nothing Phone Code Execution Vulnerability Trust: 4.5 Fetched: Oct. 10, 2025, 10:14 a.m., Published: Oct. 10, 2025, 9:23 a.m.	Vulnerabilities: code execution, privilege escalation, security bypass

Affected products

External IDs

vendor:

google

model:

android

CVE-2023-53365 : VLAN Device Vulnerability in Linux Kernel Affecting Network Performance Trust: 3.25 Fetched: Oct. 10, 2025, 10:12 a.m., Published: Sept. 17, 2025, 2:56 p.m.	Vulnerabilities: memory corruption

Affected products

External IDs

db:

NVD

ids:

CVE-2023-53365

Eclipse Project Release Notes 3.2 Trust: 3.5 Fetched: Oct. 10, 2025, 10:02 a.m., Published: Oct. 3, 2025, midnight	Vulnerabilities: -

Affected products

External IDs

vendor:	sun microsystems	model:	linux
vendor:	sun microsystems	model:	solaris 10 sparc
vendor:	sun microsystems	model:	java
vendor:	sun microsystems	model:	sun solaris
vendor:	sun microsystems	model:	solaris
vendor:	apple	model:	mac os
vendor:	apple	model:	macos
vendor:	apple	model:	mac os x
vendor:	apple	model:	java
vendor:	apple	model:	apple mac os x
vendor:	apple	model:	watch

Make Google your homepage - Google Search Help Trust: 3.0 Fetched: Oct. 10, 2025, 9:51 a.m., Published: Jan. 13, 2025, midnight	Vulnerabilities: -

Affected products

External IDs

vendor:

google

model:

home

I need to remove the Search-Great Hijacker from my profile - Google Chrome Community Trust: 3.0 Fetched: Oct. 10, 2025, 9:40 a.m., Published: -	Vulnerabilities: -

Affected products

External IDs

vendor:	google	model:	chrome
vendor:	google	model:	google chrome

Google Earth Trust: 3.25 Fetched: Oct. 10, 2025, 9:30 a.m., Published: Oct. 10, 2018, midnight	Vulnerabilities: -

Affected products

External IDs

vendor:

google

model:

pixel

Critical vulnerabilities in 689(!!) Brother printers: predict default password from serial number and more! 👨‍💻🌐📇🌈👻 Trust: 4.0 Fetched: Oct. 8, 2025, 9:32 a.m., Published: Sept. 29, 2025, midnight	Vulnerabilities: default password

Affected products	External IDs

CISA Orders Agencies to Mitigate Cisco Vulnerabilities Trust: 3.75 Fetched: Oct. 8, 2025, 9:32 a.m., Published: Sept. 26, 2025, 8:02 p.m.	Vulnerabilities: code execution, privilege escalation

Affected products

External IDs

vendor:

cisco

model:

firepower

Another 5 vulnerabilities added to CISA’s KEV catalogue - Cyber Daily Related entries in the VARIoT vulnerabilities database: VAR-201512-0518, VAR-201409-1156, VAR-201409-0366, VAR-201409-1154, VAR-201409-1155 Trust: 5.5 Fetched: Oct. 8, 2025, 9:31 a.m., Published: Oct. 3, 2025, 1:21 a.m.	Vulnerabilities: command injection, authentication vulnerability, command execution...

Affected products

External IDs

vendor:	samsung	model:	samsung
vendor:	samsung	model:	samsung mobile
vendor:	samsung	model:	mobile
vendor:	samsung	model:	mobile devices

db:

NVD

ids:

CVE-2025-21043, CVE-2015-7755, CVE-2014-6271, CVE-2014-6277, CVE-2017-1000353, CVE-2014-6278, CVE-2025-4008, CVE-2014-7169

Urgent Samsung Security Alert: Update Your Device Now to Patch Critical Trust: 3.5 Fetched: Oct. 8, 2025, 9:31 a.m., Published: Sept. 16, 2025, 4:16 p.m.	Vulnerabilities: -

Affected products

External IDs

vendor:	samsung	model:	samsung
vendor:	samsung	model:	galaxy
vendor:	apple	model:	iphone
vendor:	apple	model:	software update
vendor:	google	model:	android

db:

NVD

ids:

CVE-2025-21043

TOTOLINK X6000R Router Vulnerabilities Let Remote Attackers Execute Arbitrary Commands Trust: 4.5 Fetched: Oct. 8, 2025, 9:29 a.m., Published: Oct. 3, 2025, 11:38 a.m.	Vulnerabilities: command injection, injection attack, command execution...

Affected products

External IDs

vendor:	palo	model:	networks
vendor:	google	model:	home
vendor:	palo alto networks	model:	networks

Samsung Zero-Day Vulnerability Actively Exploited to Execute Remote Code Trust: 4.5 Fetched: Oct. 8, 2025, 9:27 a.m., Published: Sept. 12, 2025, 2:12 p.m.	Vulnerabilities: code execution, improper access control, memory corruption

Affected products

External IDs

vendor:	samsung	model:	samsung
vendor:	samsung	model:	galaxy
vendor:	google	model:	android
vendor:	google	model:	home

db:

NVD

ids:

CVE-2025-21043, CVE-2025-21033, CVE-2025-32100, CVE-2025-21034, CVE-2025-21032

CVE-2022-50547 - media: solo6x10: fix possible memory leak in solo_sysfs_init() - SecAlerts Trust: 4.25 Fetched: Oct. 8, 2025, 9:27 a.m., Published: -	Vulnerabilities: memory leak

Affected products

External IDs

db:

NVD

ids:

CVE-2022-50547

PoC Published for VMware Workstation Guest-to-Host Escape Trust: 3.75 Fetched: Oct. 8, 2025, 9:26 a.m., Published: Oct. 3, 2025, 7:51 a.m.	Vulnerabilities: code execution, memory corruption

Affected products

External IDs

db:

NVD

ids:

CVE-2023-20870, CVE-2023-34044, CVE-2023-20869

FileZilla Server < 0.9.6 - DoS via MS-DOS Device Names (CVE-2005-0850) - Vulnerability & Exploit Database Trust: 5.0 Fetched: Oct. 8, 2025, 9:26 a.m., Published: Oct. 7, 2025, midnight	Vulnerabilities: denial of service

Affected products

External IDs

vendor:	filezilla	model:	server
vendor:	filezilla	model:	filezilla server

db:

NVD

ids:

CVE-2005-0850

Cisco IOS XE Software CLI Argument Injection Vulnerability Trust: 3.0 Fetched: Oct. 8, 2025, 9:26 a.m., Published: Sept. 24, 2025, 4:06 p.m.	Vulnerabilities: -

Affected products

External IDs

vendor:	cisco	model:	ios xe
vendor:	cisco	model:	ios xe software
vendor:	cisco	model:	cisco ios
vendor:	cisco	model:	cisco ios xe

CISA Warns of Libraesva ESG Command Injection Vulnerability Actively Trust: 5.75 Fetched: Oct. 8, 2025, 9:24 a.m., Published: Oct. 8, 2025, midnight	Vulnerabilities: command injection, command execution

Affected products

External IDs

vendor:

snort

model:

snort

db:

NVD

ids:

CVE-2025-59689

VARIoT news about IoT security