Kenwood DMX958XR 安全漏洞

The Kenwood DMX958XR is an in-car infotainment system from Kenwood. A security vulnerability exists in the Kenwood DMX958XR, which can be exploited by attackers to cause a software downgrade...

(0Day) (Pwn2Own) Kenwood DMX958XR Protection Mechanism Failure Software Downgrade Vulnerability

This vulnerability allows physically present attackers to downgrade software on affected installations of Kenwood DMX958XR devices. Authentication is not required to exploit this vulnerability. The specific flaw exists within the libSystemLib library. The issue results from the lack of proper...

PT-2025-32065 · Kenwood · Kenwood Dmx958Xr

Name of the Vulnerable Software and Affected Versions: Kenwood DMX958XR affected versions not specified Description: A flaw exists within the libSystemLib library that allows physically present attackers to downgrade the software on affected Kenwood DMX958XR devices without authentication. This i...

CVE-2025-8321

Tesla Wall Connector Firmware Downgrade Vulnerability. This vulnerability allows physically present attackers to execute arbitrary code on affected installations of Tesla Wall Connector devices. Authentication is not required to exploit this vulnerability. The specific flaw exists within the...

CVE-2025-43185

A downgrade issue was addressed with additional code-signing restrictions. This issue is fixed in macOS Sequoia 15.6. An app may be able to access protected user data...

CVE-2025-8321

Tesla Wall Connector Firmware Downgrade Vulnerability. This vulnerability allows physically present attackers to execute arbitrary code on affected installations of Tesla Wall Connector devices. Authentication is not required to exploit this vulnerability. The specific flaw exists within the...

CVE-2025-8321

Tesla Wall Connector Firmware Downgrade Vulnerability. This vulnerability allows physically present attackers to execute arbitrary code on affected installations of Tesla Wall Connector devices. Authentication is not required to exploit this vulnerability. The specific flaw exists within the...

CVE-2025-8321 Tesla Wall Connector Firmware Downgrade Vulnerability

Tesla Wall Connector Firmware Downgrade Vulnerability. This vulnerability allows physically present attackers to execute arbitrary code on affected installations of Tesla Wall Connector devices. Authentication is not required to exploit this vulnerability. The specific flaw exists within the...

CVE-2025-8321 Tesla Wall Connector Firmware Downgrade Vulnerability

Tesla Wall Connector Firmware Downgrade Vulnerability. This vulnerability allows physically present attackers to execute arbitrary code on affected installations of Tesla Wall Connector devices. Authentication is not required to exploit this vulnerability. The specific flaw exists within the...

CVE-2025-8321

The CVE-2025-8321 issue affects Tesla Wall Connector firmware, arising from the upgrade feature lacking an anti-downgrade control. The vulnerability allows physically present attackers, with no authentication, to run arbitrary code in the device context by exploiting the firmware upgrade mechanis...

CVE-2025-43245

A downgrade issue was addressed with additional code-signing restrictions. This issue is fixed in macOS Sequoia 15.6, macOS Sonoma 14.7.7, macOS Ventura 13.7.7. An app may be able to access protected user data...

CVE-2025-43185

A downgrade issue was addressed with additional code-signing restrictions. This issue is fixed in macOS Sequoia 15.6. An app may be able to access protected user data...

CVE-2025-43185

A downgrade issue was addressed with additional code-signing restrictions. This issue is fixed in macOS Sequoia 15.6. An app may be able to access protected user data...

CVE-2025-43245

CVE-2025-43245 describes a downgrade issue mitigated by added code-signing restrictions in macOS. The vulnerability affects macOS Sequoia 15.6, macOS Sonoma 14.7.7, and macOS Ventura 13.7.7, where an app may be able to access protected user data. The NVD entry specifies a high/critical risk profi...

CVE-2025-43185

CVE-2025-43185 relates to a downgrade issue in macOS Sequoia that could allow an app to access protected user data. The fixed version is macOS Sequoia 15.6, which implements additional code-signing restrictions to mitigate the issue. The public records describe the vulnerability as a downgrade/pa...

PT-2025-31373 · Tesla · Tesla Wall Connector

Name of the Vulnerable Software and Affected Versions: Tesla Wall Connector affected versions not specified Description: This vulnerability allows physically present attackers to execute arbitrary code on affected installations of Tesla Wall Connector devices. Authentication is not required to...

(Pwn2Own) Tesla Wall Connector Firmware Downgrade Vulnerability

This vulnerability allows physically present attackers to execute arbitrary code on affected installations of Tesla Wall Connector devices. Authentication is not required to exploit this vulnerability. The specific flaw exists within the firmware upgrade feature. The issue results from the lack o...

CVE-2025-54596

CVE-2025-54596 affects Abnormal Security API: the endpoint /v1.0/rbac/users_v2/{USER_ID}/ (pre-2025-02-19) allows downgrading the privileges of other user accounts. CVSS v3.1 base score 4.3 (Medium) with Network attack vector, Low privileges required, No user interaction. Remediation cited: updat...

NewStart CGSL MAIN 7.02 : libssh Vulnerability (NS-SA-2025-0184)

The remote NewStart CGSL host, running version MAIN 7.02, has libssh packages installed that are affected by a vulnerability: - The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9.6 and other products, allows remote attackers to bypass integrity checks such that...

CVE-2025-53840

Icinga DB Web provides a graphical interface for Icinga monitoring. Starting in version 1.2.0 and prior to version 1.2.2, users with access to Icinga Dependency Views, are allowed to see hosts and services that they weren't meant to on the dependency map. However, the name of an object will not b...