Lucene search
+L

3174 matches found

Packet Storm News
Packet Storm News
added 2025/09/11 12:00 a.m.9 views

Multi-Channel Secure Communication Framework for Wireless IoT (MCSC-WoT): Enhancing Security in Internet of Things

In modern smart systems, the convergence of the Internet of Things IoT and Wireless of Things WoT have been revolutionized by offering a broad level of wireless connectivity and communication among various devices. Hitherto, this greater interconnectivity poses important security problems,...

7AI score
SaveExploits0
The Hacker News
The Hacker News
added 2025/09/10 8:00 a.m.11 views

Watch Out for Salty2FA: New Phishing Kit Targeting US and EU Enterprises

Phishing-as-a-Service PhaaS platforms keep evolving, giving attackers faster and cheaper ways to break into corporate accounts. Now, researchers at ANY.RUN has uncovered a new entrant: Salty2FA , a phishing kit designed to bypass multiple two-factor authentication methods and slip past traditiona...

7.5AI score
SaveExploits0
The Hacker News
The Hacker News
added 2025/09/06 3:13 p.m.13 views

Noisy Bear Campaign Targeting Kazakhstan Energy Sector Outed as a Planned Phishing Test

A threat actor possibly of Russian origin has been attributed to a new set of attacks targeting the energy sector in Kazakhstan. The activity, codenamed Operation BarrelFire, is tied to a new threat group tracked by Seqrite Labs as Noisy Bear. The threat actor has been active since at least April...

6.7AI score
SaveExploits0
Gitee
Gitee
added 2025/09/06 12:44 p.m.251 views

internalblue

This is an offensive tool for Bluetooth experimentation. It is a Bluetooth experimentation framework for Broadcom and Cypress chips, which enables various features that would otherwise only be possible with a full-stack software-defined radio implementation, such as injecting and monitoring packe...

7AI score
SaveExploits0
Gitee
Gitee
added 2025/09/06 11:51 a.m.99 views

Exploit for Improper Restriction of Operations within the Bounds of a Memory Buffer in Google Android

This repository contains a PoC Proof of Concept code for the BlueBorne vulnerabilities. The BlueBorne vulnerabilities are a set of vulnerabilities in the Bluetooth Low Energy BLE protocol that allow an attacker to remotely execute code on a device. The vulnerabilities were discovered in 2017 and...

8.8CVSS7.4AI score0.2285EPSS
SaveExploits19
RedhatCVE
RedhatCVE
added 2025/09/04 5:30 p.m.11 views

CVE-2025-9696

The SunPower PVS6's BluetoothLE interface is vulnerable due to its use of hardcoded encryption parameters and publicly accessible protocol details. An attacker within Bluetooth range could exploit this vulnerability to gain full access to the device's servicing interface. This access allows the...

9.4CVSS7.1AI score0.00164EPSS
SaveExploits0References1
Microsoft CVE
Microsoft CVE
added 2025/09/04 9:17 a.m.8 views

net: dsa: b53: do not enable EEE on bcm63xx

...

5.5CVSS7AI score0.00164EPSS
SaveExploits0
Vulnrichment
Vulnrichment
added 2025/09/02 4:34 p.m.6 views

CVE-2025-9696 Use of Hard-coded Credentials in SunPower PVS6

The SunPower PVS6's BluetoothLE interface is vulnerable due to its use of hardcoded encryption parameters and publicly accessible protocol details. An attacker within Bluetooth range could exploit this vulnerability to gain full access to the device's servicing interface. This access allows the...

9.4CVSS6.5AI score0.00164EPSS
SaveExploits0References1
CVE
CVE
added 2025/09/02 4:34 p.m.29 views

CVE-2025-9696

CVE-2025-9696 concerns SunPower PVS6 BluetoothLE security. The vulnerability arises from the device’s Bluetooth Low Energy interface using hardcoded encryption parameters and publicly accessible protocol details, enabling an attacker in Bluetooth range to gain full access to the servicing interfa...

9.4CVSS6.6AI score0.00164EPSS
SaveExploits0References1
ICS
ICS
added 2025/08/26 9:52 a.m.11 views

Remote Code Execution Vulnerability in Hitachi Energy Service Suite Product

SUMMARY Hitachi Energy is aware of a remote code execution vulnerability that affects the Oracle WebLogic component in the Service Suite product versions listed in this document. An attacker successfully exploiting these vulnerabilities can cause confidentiality, integrity and availability...

9.8CVSS8AI score0.94928EPSS
SaveExploits11References9
ICS
ICS
added 2025/08/26 9:22 a.m.19 views

Multiple Open-Source Software Vulnerabilities in Hitachi Energy Asset Suite Product

SUMMARY Hitachi Energy is aware of multiple reported vulnerabilities that affect the Asset Suite product versions mentioned in this document below. If exploited these vulnerabilities can potentially impact on confidentiality, integrity and availability of the product. Please refer to the...

7.4AI score
SaveExploits0References9
CNVD
CNVD
added 2025/08/26 12:00 a.m.11 views

Delta Electronics DIAEnergie Cross-Site Scripting Vulnerability (CNVD-2025-22953)

Delta Electronics DIAEnergie is an industrial energy management system from Delta Electronics China for monitoring and analyzing energy consumption in real time, calculating energy consumption and load characteristics, optimizing equipment performance, improving production processes and maximizin...

7CVSS6.3AI score0.00184EPSS
SaveExploits0References1
CNVD
CNVD
added 2025/08/22 12:00 a.m.10 views

Delta Electronics DIAEnergie Cross-Site Scripting Vulnerability (CNVD-2025-22954)

Delta Electronics DIAEnergie is an industrial energy management system from Delta Electronics China for monitoring and analyzing energy consumption in real time, calculating energy consumption and load characteristics, optimizing equipment performance, improving production processes and maximizin...

6.1CVSS6.3AI score0.0016EPSS
SaveExploits0References1
CNVD
CNVD
added 2025/08/22 12:00 a.m.16 views

Delta Electronics DIAEnergie Cross-Site Scripting Vulnerability (CNVD-2025-22956)

Delta Electronics DIAEnergie is an industrial energy management system from Delta Electronics China for monitoring and analyzing energy consumption in real time, calculating energy consumption and load characteristics, optimizing equipment performance, improving production processes and maximizin...

6.1CVSS6.3AI score0.0016EPSS
SaveExploits0References1
Packet Storm News
Packet Storm News
added 2025/08/19 12:00 a.m.17 views

On the Security and Privacy of Federated Learning: a Survey with Attacks, Defenses, Frameworks, Applications, and Future Directions

Federated Learning FL is an emerging distributed machine learning paradigm enabling multiple clients to train a global model collaboratively without sharing their raw data. While FL enhances data privacy by design, it remains vulnerable to various security and privacy threats. This survey provide...

6.9AI score
SaveExploits0
CNVD
CNVD
added 2025/08/18 12:00 a.m.8 views

Tigo Energy Cloud Connect Advanced Command Injection Vulnerability

The Tigo Energy Cloud Connect Advanced is a compact data logger from Tigo Energy USA. Tigo Energy Cloud Connect Advanced suffers from a command injection vulnerability due to a flaw in the /cgi-bin/mobileapi endpoint when the DEVICEPING command is invoked. An attacker could exploit the...

8.7CVSS7.8AI score0.17253EPSS
SaveExploits2References1
CNNVD
CNNVD
added 2025/08/18 12:00 a.m.9 views

Delta Electronics DIAEnergie 安全漏洞

Delta Electronics DIAEnergie is an industrial energy management system from Delta Electronics China for monitoring and analyzing energy consumption in real time, calculating energy consumption and load characteristics, optimizing equipment performance, improving production processes and maximizin...

7CVSS6.2AI score0.00184EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2025/08/18 12:00 a.m.10 views

Delta Electronics DIAEnergie 安全漏洞

Delta Electronics DIAEnergie is an industrial energy management system from Delta Electronics China for monitoring and analyzing energy consumption in real time, calculating energy consumption and load characteristics, optimizing equipment performance, improving production processes and maximizin...

6.1CVSS6.2AI score0.0016EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2025/08/18 12:00 a.m.10 views

Delta Electronics DIAEnergie 安全漏洞

Delta Electronics DIAEnergie is an industrial energy management system from Delta Electronics China for monitoring and analyzing energy consumption in real time, calculating energy consumption and load characteristics, optimizing equipment performance, improving production processes and maximizin...

6.1CVSS6.2AI score0.0016EPSS
SaveExploits0References2
OSSF Malicious Packages
OSSF Malicious Packages
added 2025/08/14 6:52 p.m.2 views

Malicious code in family-island-unlimited-energy362 (npm)

The package family-island-unlimited-energy362 was found to contain malicious code...

7AI score
SaveExploits0
Rows per page
Query Builder