178 matches found
CVE-2025-70994
Yadea T5 Electric Bicycles models manufactured in/after 2024 have a weak authentication mechanism in their keyless entry system. The system utilizes the EV1527 fixed-code RF protocol without implementing rolling codes or cryptographic challenge-response mechanisms. This is vulnerable to signal...
Yadea T5 Electric Bicycles 安全漏洞
Yadea T5 Electric Bicycles is a lightweight electric bicycle designed for urban commuting by Yadea Company. The Yadea T5 Electric Bicycles have a security vulnerability, which stems from a weak authentication mechanism in the keyless entry system. By using the fixed code RF protocol, local...
CVE-2025-70994
Yadea T5 Electric Bicycles models manufactured in/after 2024 have a weak authentication mechanism in their keyless entry system. The system utilizes the EV1527 fixed-code RF protocol without implementing rolling codes or cryptographic challenge-response mechanisms. This is vulnerable to signal...
On the Possible Detectability of Image-In-Image Steganography
This paper investigates the detectability of popular imagein-image steganography schemes 1, 2, 3, 4, 5. In this paradigm, the payload is usually an image of the same size as the Cover image, leading to very high embedding rates. We first show that the embedding yields a mixing process that is...
CVE-2022-37418
The Remote Keyless Entry RKE receiving unit on certain Nissan, Kia, and Hyundai vehicles through 2017 allows remote attackers to perform unlock operations and force a resynchronization after capturing two consecutive valid key fob signals over the radio, aka a RollBack attack. The attacker retain...
CVE-2019-20626
The remote keyless system on Honda HR-V 2017 vehicles sends the same RF signal for each door-open request, which might allow a replay attack...
CVE-2022-27254
The remote keyless system on Honda Civic 2018 vehicles sends the same RF signal for each door-open request, which allows for a replay attack, a related issue to CVE-2019-20626...
EUVD-2019-11166
Malware in sbrugna...
EUVD-2018-8606
Malware in sbrugna...
EUVD-2014-5243
Malware in sbrugna...
EUVD-2024-3224
Malicious code in bioql PyPI...
EUVD-2022-31763
Malicious code in bioql PyPI...
EUVD-2022-39602
Malicious code in bioql PyPI...
EUVD-2022-40051
Malicious code in bioql PyPI...
EUVD-2022-41329
Malicious code in bioql PyPI...
EUVD-2023-3067
Malicious code in bioql PyPI...
EUVD-2025-18276
Malicious code in bioql PyPI...
EUVD-2022-39941
Malicious code in bioql PyPI...
BIT-KYVERNO-2025-29778 Kyverno ignores subjectRegExp and IssuerRegExp
Kyverno is a policy engine designed for cloud native platform engineering teams. Prior to version 1.14.0, Kyverno ignores subjectRegExp and IssuerRegExp while verifying artifact's sign with keyless mode. It allows the attacker to deploy kubernetes resources with the artifacts that were signed by...
Linux Distros Unpatched Vulnerability : CVE-2023-23934
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Werkzeug is a comprehensive WSGI web application library. Browsers may allow nameless cookies that look like =value instead of key=value. A vulnerable browser m...