6177 matches found
CVE-2025-57808 ESP-IDF web_server basic auth bypass using empty or incomplete Authorization header
ESPHome is a system to control microcontrollers remotely through Home Automation systems. In version 2025.8.0 in the ESP-IDF platform, ESPHome's webserver authentication check can pass incorrectly when the client-supplied base64-encoded Authorization value is empty or is a substring of the correc...
PT-2025-35518
Name of the Vulnerable Software and Affected Versions ESPHome versions 2025.8.0 Description ESPHome's web server authentication check can incorrectly pass when the client-supplied base64-encoded Authorization value is empty or is a substring of the correct value. This allows access to web server...
Linux Distros Unpatched Vulnerability : CVE-2022-24695
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Bluetooth Classic in Bluetooth Core Specification through 5.3 does not properly conceal device information for Bluetooth transceivers in Non-Discoverable mode. ...
New Sni5Gect Attack Crashes Phones and Downgrades 5G to 4G without Rogue Base Station
A team of academics has devised a novel attack that can be used to downgrade a 5G connection to a lower generation without relying on a rogue base station gNB. The attack, per the ASSET Automated Systems SEcuriTy Research Group at the Singapore University of Technology and Design SUTD, relies on ...
Important: Red Hat Security Advisory: Insights proxy Container Image
Initial GA Release of Red Hat Insights proxy The Insights proxy Container is used by the Insights proxy product RPM and serves as an intermediary between cystomer systems in disconnected networks, air-gapped systems or systems with no outside connections and Insights. The Insights proxy routes al...
DSLRoot, Proxies, and the Threat of ‘Legal Botnets’
The cybersecurity community on Reddit responded in disbelief this month when a self-described Air National Guard member with top secret security clearance began questioning the arrangement they'd made with company called DSLRoot , which was paying $250 a month to plug a pair of laptops into the...
CISA Releases Three Industrial Control Systems Advisories
CISA released three Industrial Control Systems ICS advisories on August 21, 2025. These advisories provide timely information about current security issues, vulnerabilities, and exploits surrounding ICS. ICSA-25-233-01 Mitsubishi Electric Corporation MELSEC iQ-F Series CPU Module ICSA-25-177-01...
Malicious code in dyna-travel-ui-select-air-trip (npm)
The package dyna-travel-ui-select-air-trip was found to contain malicious code...
Malicious code in air-cron-moon-compress-hash (npm)
The package air-cron-moon-compress-hash was found to contain malicious code...
Malicious code in hot-air-thread-minify-assert (npm)
The package hot-air-thread-minify-assert was found to contain malicious code...
Malicious code in slow-moon-air-scale-interpret (npm)
The package slow-moon-air-scale-interpret was found to contain malicious code...
MAL-2025-14183 Malicious code in air-deploy-air-stub-bash (npm)
The package air-deploy-air-stub-bash was found to contain malicious code...
Malicious code in route-air-private-static-bash (npm)
The package route-air-private-static-bash was found to contain malicious code...
Malicious code in byte-fast-boolean-dog-air (npm)
The package byte-fast-boolean-dog-air was found to contain malicious code...
Malicious code in air-deploy-air-stub-bash (npm)
The package air-deploy-air-stub-bash was found to contain malicious code...
MAL-2025-14181 Malicious code in air-container-await-mock-final (npm)
The package air-container-await-mock-final was found to contain malicious code...
MAL-2025-32475 Malicious code in route-air-private-static-bash (npm)
The package route-air-private-static-bash was found to contain malicious code...
Malicious code in validate-air-cron-zero-moon (npm)
The package validate-air-cron-zero-moon was found to contain malicious code...