784 matches found
EUVD-2022-35579
Malicious code in bioql PyPI...
CVE-2025-56019: Insecure Inherited Permissions
An insecure permission vulnerability exists in the Agasta Easytouch+ version 9.3.97 The device allows unauthorized mobile applications to connect via Bluetooth Low Energy BLE without authentication. Once an unauthorized connection is established, legitimate applications are unable to connect,...
CVE-2025-35027
CVE-2025-35027 affects Unitree Go2, G1, H1, and B2 robotic devices sharing a common firmware (MIT Cheetah). It enables command injection by supplying a malicious string during BLE-configured WiFi setup and triggering a WiFi service restart, allowing commands to run as root via the wpa_supplicant_...
CVE-2025-60250
Unitree Go2, G1, H1, and B2 devices through 2025-09-20 decrypt BLE packet data by using the df98b715d5c6ed2b25817b6f2554124a key and the 2841ae97419c2973296a0d4bdfe19a4f IV...
CVE-2025-60250
Unitree Go2, G1, H1, and B2 devices through 2025-09-20 decrypt BLE packet data by using the df98b715d5c6ed2b25817b6f2554124a key and the 2841ae97419c2973296a0d4bdfe19a4f IV...
CVE-2025-60250
Unitree Go2, G1, H1, and B2 devices have a vulnerability (CVE-2025-60250) where BLE packet data can be decrypted using the specific key df98b715d5c6ed2b25817b6f2554124a and IV 2841ae97419c2973296a0d4bdfe19a4f. Connected sources confirm this cryptographic exposure through 2025-09-20; CVSS shows Ad...
CVE-2025-35027: Improper Neutralization of Special Elements used in an OS Command
Multiple robotic products by Unitree sharing a common firmware, including the Go2, G1, H1, and B2 devices, contain a command injection vulnerability. By setting a malicious string when configuring the on-board WiFi via a BLE module of an affected robot, then triggering a restart of the WiFi...
CVE-2025-60250: Use of Hard-coded Cryptographic Key
Unitree Go2, G1, H1, and B2 devices through 2025-09-20 decrypt BLE packet data by using the df98b715d5c6ed2b25817b6f2554124a key and the 2841ae97419c2973296a0d4bdfe19a4f IV...
CVE-2025-10457
The function responsible for handling BLE connection responses does not verify whether a response is expected—that is, whether the device has initiated a connection request. Instead, it relies solely on identifier matching...
CVE-2025-10457: Improperly Implemented Security Check for Standard
The function responsible for handling BLE connection responses does not verify whether a response is expected—that is, whether the device has initiated a connection request. Instead, it relies solely on identifier matching...
The vulnerability of the BLE Stack component of the Realtek RTL8762EKF-EVB development platform for Bluetooth Low Energy devices allows a intruder to trigger a service failure.
The vulnerability of the BLE Stack component of the Realtek RTL8762EKF-EVB Bluetooth Low Energy device development platform is related to insufficient validation of input data. Exploiting this vulnerability could allow a remote attacker to cause service failure...
Malicious code in @zalastax/nolb-ble (npm)
The package @zalastax/nolb-ble was found to contain malicious code...
Malicious code in alb-um-availa-ble-zip-mp3-file-6701-black-monk-time-a72gt-xmggfd (npm)
The package alb-um-availa-ble-zip-mp3-file-6701-black-monk-time-a72gt-xmggfd was found to contain malicious code...
Malicious code in alb-um-availa-ble-zip-mp3-file-87774-sweet-and-dandy-u8y37-xsfuaz (npm)
The package alb-um-availa-ble-zip-mp3-file-87774-sweet-and-dandy-u8y37-xsfuaz was found to contain malicious code...
Malicious code in alb-um-availa-ble-zip-mp3-file-9399-tigermilk-1am0w-pkhmun (npm)
The package alb-um-availa-ble-zip-mp3-file-9399-tigermilk-1am0w-pkhmun was found to contain malicious code...
Malicious code in alb-um-availa-ble-zip-mp3-file-central-market-ilx22-uynmjv (npm)
The package alb-um-availa-ble-zip-mp3-file-central-market-ilx22-uynmjv was found to contain malicious code...
Malicious code in alb-um-availa-ble-zip-mp3-file-470382-acts-of-god-a6hb1-jgniqs (npm)
The package alb-um-availa-ble-zip-mp3-file-470382-acts-of-god-a6hb1-jgniqs was found to contain malicious code...
MAL-2025-10796 Malicious code in @zalastax/nolb-ble (npm)
The package @zalastax/nolb-ble was found to contain malicious code...