aztarna

This repository has been archived and is not maintained any further. Refer to alurity for future progress on robot footprinting and fingerprinting. aztarna This repository contains Alias Robotics' aztarna, a footprinting tool for robots. Alias Robotics supports original robot manufacturers...

Quiksand-CVE-2023-24012

DDS Security Test ROS 2 DDS security research test environment, based on ROS 2 Foxy. Project Introduction This project demonstrates a privilege escalation vulnerability in the ROS 2 SROS2 security framework. By modifying signed permission files, an attacker can cause a node to subscribe to topics...

CVE-2012-1803

CVE-2012-1803 Critical vulnerability in Siemens RuggedCom ROS devices allowing attackers to derive a hidden factory account password from the device MAC address and gain unauthorized administrative access via TELNET, rsh, or serial interfaces. Affects ROS 3.10.x and earlier...

CVE-2026-41551

CVE-2026-41551 Reproduction Vulnerability: Siemens ROS fileserver / fileserver2 service relative path traversal CVSS v3.1: 9.1 AV:N / AC:L / PR:N / UI:N / S:U / C:H / I:H / A:N Affected versions: ros-sharp all name.substr10; // remove "package://" std::string package = address.substr0,...

Robotics-Security-Testing-Guide

OWASP Robotics Security Testing Guide RSTG The OWASP Robotics Security Testing Guide RSTG is an open-source effort to build a standardized penetration testing methodology for humanoid, industrial, and autonomous robots. Most existing security guides treat software, APIs, and AI models in digital...

ROS-20261021-73-0052

The vulnerability in the patch is related to the swapping of the zero pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...

ROS-20261021-73-0050

The vulnerability in the patch is related to executing a loop with an unavailable exit condition. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20261019-73-0054

The vulnerability is related to the unlimited distribution of resources. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

aztarna

Este repositorio ha sido archivado y ya no se mantiene. Consulte alurity para futuros avances en footprinting y fingerprinting de robots. aztarna Este repositorio contiene aztarna de Alias Robotics, una herramienta de footprinting para robots. Alias Robotics apoya a los fabricantes originales de...

ROS-20261008-73-0028

The vulnerabilities of the functions setposixaclentriesdacl and setntacldacl in the fs/smb/server/smbacl.c module are related to integer overflows. Exploiting these vulnerabilities could allow an attacker to cause a service failure...

ROS-20260930-73-0102

The vulnerability of the hwtracing/intelth/core.c component in the Linux operating system is related to improper memory release before deleting the last reference. Exploiting this vulnerability can allow an attacker to cause a service failure...

CVE-2024-42002: Improper Neutralization of Directives in Dynamically Evaluated Code

A code injection vulnerability has been discovered in the Robot Operating System 2 ROS 2 'ros2topic' command-line tool, affecting all ROS 2 distributions from Crystal Clemmys up to and including Lyrical Luth and Rolling Ridley. The vulnerability lies in the 'hz' verb, which reports the publishing...

OESA-2026-4090 poco security update

This is ROS melodic roscomm's 3rdparty poco. Security Fixes: A vulnerability was found in poco up to 1.14.1. It has been rated as problematic. Affected by this issue is the function MultipartInputStream of the file Net/src/MultipartReader.cpp. The manipulation leads to null pointer dereference. T...

ROS-20260923-73-0044

The vulnerability of the transportipc component in Linux operating systems is related to pointer arithmetic errors. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

ROS-20260921-73-0088

The vulnerability is related to insufficient verification of data authenticity. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

ROS-20260921-73-0087

The vulnerability is related to the use of an incomplete black list. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

ROS-20260921-73-0079

The vulnerability is related to the lack of integrity checks. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20260921-73-0091

The vulnerability is related to insufficient control over the amount of network messages transmitted. Exploiting this vulnerability can allow a remote attacker to trigger a service failure rdos...

ROS-20260921-73-0089

The vulnerability is related to insufficient verification of data authenticity. Exploiting this vulnerability can allow an attacker to enhance their privileges and execute arbitrary code...

ROS-20260921-73-0078

The vulnerability is related to the failure to release resources after their useful life has expired. Exploiting this vulnerability can allow a perpetrator to cause service failures...