169 matches found
EUVD-2022-51468
Malicious code in bioql PyPI...
EUVD-2020-17896
Malicious code in bioql PyPI...
EUVD-2024-50811
Malicious code in bioql PyPI...
EUVD-2025-24000
Malicious code in bioql PyPI...
EUVD-2025-19036
Malicious code in bioql PyPI...
EUVD-2025-27775
Malicious code in bioql PyPI...
EUVD-2022-51686
Malicious code in bioql PyPI...
New Android Trojan "Datzbro" Tricking Elderly with AI-Generated Facebook Travel Events
Cybersecurity researchers have flagged a previously undocumented Android banking trojan called Datzbro that can conduct device takeover DTO attacks and perform fraudulent transactions by preying on the elderly. Dutch mobile security company ThreatFabric said it discovered the campaign in August...
CVE-2025-36756 Device Takeover vulnerability in SolaX Cloud
A problem with missing authorization on SolaX Cloud platform allows taking over any SolaX solarpanel inverter of which the serial number is known...
CVE-2025-36756
The CVE-2025-36756 entry describes a missing-authorization vulnerability in the SolaX Cloud platform that could allow takeover of a known-serial-number SolaX solar inverter. Affected component is the SolaX Cloud platform beneath the inverter management flow; root cause is insufficient access cont...
CVE-2025-56752
A vulnerability in the Ruijie RG-ES series switch firmware ESW1.01B1P39 enables remote attackers to fully bypass authentication mechanisms, providing them with unrestricted access to alter administrative settings and potentially seize control of affected devices via crafted HTTP POST request to...
Flaw in Older Version of Android Rooting Tool KernelSU Allows Full Device Takeover
Zimperium's zLabs team uncovers a critical security flaw in the popular Android rooting tool, KernelSU v0.5.7. Learn how…...
CVE-2025-5095
Burk Technology ARC Solo's password change mechanism can be utilized without proper authentication procedures, allowing an attacker to take over the device. A password change request can be sent directly to the device's HTTP endpoint without providing valid credentials. The system does not enforc...
CVE-2025-5095 Burk Technology ARC Solo Missing Authentication for Critical Function
Burk Technology ARC Solo's password change mechanism can be utilized without proper authentication procedures, allowing an attacker to take over the device. A password change request can be sent directly to the device's HTTP endpoint without providing valid credentials. The system does not enforc...
CVE-2025-5095: Missing Authentication for Critical Function
Burk Technology ARC Solo's password change mechanism can be utilized without proper authentication procedures, allowing an attacker to take over the device. A password change request can be sent directly to the device's HTTP endpoint without providing valid credentials. The system does not enforc...
Burk Technology ARC Solo Access Control Vulnerability
Burk Technology ARC Solo is an IP-based remote monitoring and control system from Burk USA. An access control error vulnerability exists in Burk Technology ARC Solo that stems from a password change mechanism that does not properly validate authentication, potentially leading to device takeover...
Exploit for CVE-2025-29628
Summary In February 2025 I conducted security research on a...
Anatsa Android Banking Trojan Hits 90,000 Users with Fake PDF App on Google Play
Cybersecurity researchers have discovered an Android banking malware campaign that has leveraged a trojan named Anatsa to target users in North America using malicious apps published on Google's official app marketplace. The malware, disguised as a "PDF Update" to a document viewer app, has been...
Exploit for CVE-2025-29628
Summary In February 2025 I conducted security research on a...
CVE-2025-30131
An issue was discovered on IROAD Dashcam FX2 devices. An unauthenticated file upload endpoint can be leveraged to execute arbitrary commands by uploading a CGI-based webshell. Once a file is uploaded, the attacker can execute commands with root privileges, gaining full control over the dashcam...