397 matches found
CVE-2025-65396
A vulnerability in the boot process of Blurams Flare Camera version 24.1114.151.929 and earlier allows a physically proximate attacker to hijack the boot mechanism. By shorting a data pin of the IC to ground, an attacker can induce a read error from the SPI flash memory during boot to gain a boot...
Blurams Flare Camera 安全漏洞
Blurams Flare Camera is a webcam from Blurams USA. A security vulnerability exists in Blurams Flare Camera 24.1114.151.929 and earlier versions, which stems from an insecure authentication mechanism that could lead to the execution of arbitrary commands...
CVE-2025-65396
A vulnerability in the boot process of Blurams Flare Camera version 24.1114.151.929 and earlier allows a physically proximate attacker to hijack the boot mechanism and gain a bootloader shell via the UART interface. This is achieved by inducing a read error from the SPI flash memory during the...
CVE-2025-65396
A vulnerability in the boot process of Blurams Flare Camera version 24.1114.151.929 and earlier allows a physically proximate attacker to hijack the boot mechanism and gain a bootloader shell via the UART interface. This is achieved by inducing a read error from the SPI flash memory during the...
CVE-2025-65396: Improper Restriction of Operations within the Bounds of a Memory Buffer
A vulnerability in the boot process of Blurams Flare Camera version 24.1114.151.929 and earlier allows a physically proximate attacker to hijack the boot mechanism and gain a bootloader shell via the UART interface. This is achieved by inducing a read error from the SPI flash memory during the...
CVE-2025-65397
An insecure authentication mechanism in the safeexec.sh startup script of Blurams Flare Camera version 24.1114.151.929 and earlier allows an attacker with physical access to the device to execute arbitrary commands with root privileges, if file /opt/images/publickey.der is not present in the file...
Russia-Linked Hackers Use Microsoft 365 Device Code Phishing for Account Takeovers
A suspected Russia-aligned group has been attributed to a phishing campaign that employs device code authentication workflows to steal victims' Microsoft 365 credentials and conduct account takeover attacks. The activity, ongoing since September 2025, is being tracked by Proofpoint under the...
EUVD-2025-178590
Malicious code in hawkingradiation-flare-hydrogeology-quito npm...
EUVD-2025-177793
Malicious code in mocha-neptunology-flare-galaxy npm...
Malicious code in flare-commitlint-hydra-astro (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51e15093f898681067658fdbfcee562bc41426c8b5067bf87e0a42fefce8815f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-189607 Malicious code in spectron-flare-css-loader-tethys (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b6a3021cdbe1ba768aeed367daffaba3184d09ca0b1076ec3c8fe83fc378143f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-180087
Malicious code in betelgeuse-nodejs-hugo-flare npm...
EUVD-2025-180394
Malicious code in apex-titan-babel-flare npm...
EUVD-2025-178884
Malicious code in flare-sirius-parallax-cross-env npm...
EUVD-2025-178538
Malicious code in hermes-dactyl-canopus-flare npm...
EUVD-2025-175492
Malicious code in xerxes-coronalmassejection-flare-filament npm...
EUVD-2025-178395
Malicious code in inquirer-flare-sass-loader-tectonic npm...
EUVD-2025-180346
Malicious code in arcturus-flare-superagent-sedna npm...
Malicious code in ganymede-flare-aurora-membrane (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0243563bbd76210b34b5e68a36b4784afe93fd2191c332071ac47dab89494808 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...