195 matches found
CVE-2026-15319
The CVE-2026-15319 entry concerns Sipeed PicoClaw up to version 0.2.9, where the IPAllowlist function in web/backend/middleware/access_control.go within the Launcher component can be manipulated, leading to improper access controls. This vulnerability is exploitable remotely, and public disclosur...
CVE-2026-15317
A security flaw has been discovered in Sipeed PicoClaw up to 0.2.9. Affected by this vulnerability is the function WebFetchTool.Execute of the file pkg/tools/integration/web.go of the component Guarded Web Fetch Flow. The manipulation results in server-side request forgery. The attack can be...
CVE-2026-15320: Missing Authorization
A vulnerability was detected in Sipeed PicoClaw up to 0.2.9. This vulnerability affects the function rt.ReloadConfig of the file pkg/channels/pico/pico.go. Performing a manipulation of the argument message.send results in missing authorization. It is possible to initiate the attack remotely. The...
PT-2026-57047
A vulnerability was detected in Sipeed PicoClaw up to 0.2.9. This vulnerability affects the function rt.ReloadConfig of the file pkg/channels/pico/pico.go. Performing a manipulation of the argument message.send results in missing authorization. It is possible to initiate the attack remotely. The...
EUVD-2026-28149
A vulnerability was detected in PicoTronica e-Clinic Healthcare System ECHS 5.7. The affected element is an unknown function of the file /cdemos/echs/api/v2/patient-records of the component API Endpoint. The manipulation results in missing authentication. The attack can be executed remotely. The...
Benchmarking Post-Quantum Cryptography on Resource-Constrained IoT Devices: ML-KEM and ML-DSA on ARM Cortex-M0+
The migration to post-quantum cryptography is urgent for Internet of Things devices with 10-20 year lifespans, yet no systematic benchmarks exist for the finalised NIST standards on the most constrained 32-bit processor class. This paper presents the first isolated algorithm-level benchmarks of...
CVE-2005-1626
Multiple buffer overflows in handlers.c for Pico Server pServ before 3.3 may allow attackers to execute arbitrary code...
CVE-2025-49348
Missing Authorization vulnerability in Hype Hype pico allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Hype: from n/a through = 1.0.5...
EUVD-2025-202043
Missing Authorization vulnerability in Hype Hype pico allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Hype: from n/a through = 1.0.5...
CVE-2025-49348
Missing Authorization vulnerability in Hype Hype pico allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Hype: from n/a through = 1.0.5...
CVE-2025-49348: Missing Authorization
Missing Authorization vulnerability in Hype Hype pico allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Hype: from n/a through = 1.0.5...
WordPress plugin Hype pico has a security vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security...
PT-2025-49984
Missing Authorization vulnerability in Hype Hype pico allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Hype: from n/a through = 1.0.5...
MAL-2025-190986 Malicious code in pico-uid (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea7b37b73a502fca8e0834485805f85161a0b6324f046227c52eaf62f81cbe61 The package pico-uid was found to contain malicious code. Source: ghsa-malware 7dfd9eb3d97c6b6064779eb385892814fd6b36cc5292943e4cd81e254668ee79 Any...
EUVD-2025-199057
Malicious code in pico-uid npm...
Malicious code in pico-uid (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea7b37b73a502fca8e0834485805f85161a0b6324f046227c52eaf62f81cbe61 The package pico-uid was found to contain malicious code. Source: ghsa-malware 7dfd9eb3d97c6b6064779eb385892814fd6b36cc5292943e4cd81e254668ee79 Any...
EUVD-2005-1955
Malware in sbrugna...
EUVD-2005-1629
Malware in sbrugna...