ROS-20260923-73-0044

The vulnerability of the transportipc component in Linux operating systems is related to pointer arithmetic errors. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

CVE-2012-1803

CVE-2012-1803 Critical vulnerability in Siemens RuggedCom ROS devices allowing attackers to derive a hidden factory account password from the device MAC address and gain unauthorized administrative access via TELNET, rsh, or serial interfaces. Affects ROS 3.10.x and earlier...

ROS-20260921-73-0087

The vulnerability is related to the use of an incomplete black list. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

ROS-20260921-73-0088

The vulnerability is related to insufficient verification of data authenticity. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

ROS-20260921-73-0079

The vulnerability is related to the lack of integrity checks. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20260921-73-0083

The vulnerability is related to insecure resource initialization. Exploiting this vulnerability can allow a remote attacker to gain increased privileges...

ROS-20260921-73-0078

The vulnerability is related to the failure to release resources after their useful life has expired. Exploiting this vulnerability can allow a perpetrator to cause service failures...

ROS-20260921-73-0091

The vulnerability is related to insufficient control over the amount of network messages transmitted. Exploiting this vulnerability can allow a remote attacker to trigger a service failure rdos...

ROS-20260921-73-0089

The vulnerability is related to insufficient verification of data authenticity. Exploiting this vulnerability can allow an attacker to enhance their privileges and execute arbitrary code...

OESA-2026-3965 poco security update

This is ROS melodic roscomm's 3rdparty poco. Security Fixes: UTF32Encoding.cpp in POCO has a Poco::UTF32Encoding integer overflow and resultant stack buffer overflow because Poco::UTF32Encoding::convert and Poco::UTF32::queryConvert may return a negative integer if a UTF-32 byte sequence evaluate...

OESA-2026-3963 poco security update

This is ROS melodic roscomm's 3rdparty poco. Security Fixes: UTF32Encoding.cpp in POCO has a Poco::UTF32Encoding integer overflow and resultant stack buffer overflow because Poco::UTF32Encoding::convert and Poco::UTF32::queryConvert may return a negative integer if a UTF-32 byte sequence evaluate...

Quiksand-CVE-2023-24012

DDS Security Test ROS 2 DDS security research test environment, based on ROS 2 Foxy. Project Introduction This project demonstrates a privilege escalation vulnerability in the ROS 2 SROS2 security framework. By modifying signed permission files, an attacker can cause a node to subscribe to topics...

aztarna

此仓库已存档，不再维护。关于机器人足迹和指纹识别的未来进展，请参阅 alurity。 aztarna 此仓库包含 Alias Robotics 的 aztarna，一款用于机器人足迹探测的工具。 Alias Robotics 支持原始机器人制造商评估其安全性并提升软件质量。我们绝不鼓励或促进对运行中机器人系统的未经授权篡改。这可能导致严重的人身伤害和物质损失。 HTML 阅读版： Aztarna, a footprinting tool for robots 针对 ROS 系统中存在的 ROS 节点列表（发布者和订阅者） 每个节点发布和订阅的话题，包括话题类型 每个节点提供的 ROS 服...

aztarna

This repository has been archived and is not maintained any further. Refer to alurity for future progress on robot footprinting and fingerprinting. aztarna This repository contains Alias Robotics' aztarna, a footprinting tool for robots. Alias Robotics supports original robot manufacturers...

CVE-2026-41551

CVE-2026-41551 Reproduction Vulnerability: Siemens ROS fileserver / fileserver2 service relative path traversal CVSS v3.1: 9.1 AV:N / AC:L / PR:N / UI:N / S:U / C:H / I:H / A:N Affected versions: ros-sharp all name.substr10; // remove "package://" std::string package = address.substr0,...

ROS-20260908-73-0002

The vulnerability in Java-11-openjdk is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to enhance their privileges...

The vulnerability of open libraries and tools written in C# ROS# relates to errors in the mechanism for handling relative pathnames to directories. This allows attackers to gain access to read, modify, or delete data.

The vulnerability of open libraries and tools written in C for ROS is related to errors in the mechanism for handling relative pathnames to directories. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain access to read, modify, or delete data...

EUVD-2026-58621

Authorization Bypass Through User-Controlled Key in the payroll module in Roskus Prospero Flow CRM before 5.15.10 allows authenticated users holding the read payroll permission to view the salary and banking details of employees of any other company in the instance, and users holding the create...

CVE-2026-38891

An improper input validation in the gazeborosdiffdrive.cpp component of gazeboplugins v3.9.0 allows attackers to cause a Denial of Service DoS via supplying a crafted geometrymsgs::Twist message...

CVE-2026-41551

A vulnerability has been identified in ROS All versions V2.2.2. Affected versions contain a path traversal vulnerability because user input is not properly sanitized. This could allow a remote attacker to access arbitrary files on the device...