CVE-2025-2894

Concrete details exist for CVE-2025-2894 in connected docs: Unitree Go1 family robots (Go2, G1, H1, B2) expose a BLE Wi‑Fi configuration interface with a hardcoded AES-CFB128 key and IV, enabling an authentication bypass (

Unitree Go 1 安全漏洞

Unitree Go 1 is a robotic dog from the Chinese company Unitree. Unitree Go 1 suffers from a security vulnerability that stems from an undocumented backdoor that could lead to full remote control of the device by the manufacturer or a person in possession of an API key...

PT-2025-13431

Name of the Vulnerable Software and Affected Versions UnitreeRobotics Zhexi/Oray affected versions not specified Description The issue concerns an undocumented backdoor in the robotic device. This backdoor allows the manufacturer and anyone with the correct API key to gain complete remote control...

Exploit for Improper Authentication in Google Android

h0nkbtexploit Samsung devices are vulnerable to a critical...

Malicious code in nodejs-website (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 78f634e9e89620bdae97a2ba6be1914334b29090ecd8c222adae9b81f2a0bbf1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2590 Malicious code in blackspammerbd-remot (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: oracle-using-macaron b3620d6bbda8c8e6a637f39997f1d22114756ec09e8e458eaab7287ea64ff7c3 This package is designed for remote control and data exfiltration, and could be used for malicious purposes such as spying, unauthorized access,...

MAL-2025-2593 Malicious code in blackspammerbd-tool (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: oracle-using-macaron 49490144c72d79e7bb37921a87c52011d6ce935fd7d031e2a4d3e4835e98a399 This package is designed for remote control and data exfiltration, and could be used for malicious purposes such as spying, unauthorized access,...

MAL-2025-2588 Malicious code in blackspammerbd-bsb (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: oracle-using-macaron 95b4b100eae0bd8d8b1d4a439c713c11286796c1c07beaa4cc0749305ead3307 This package performs data exfiltration and remote control of the system by generating connection codes, file uploads and downloads, and...

MAL-2025-2591 Malicious code in blackspammerbd-remot1 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: oracle-using-macaron 3618dd14b1eb36d5025d6a47cf69fbe08f06fa02c9de8338f7ca67ce5ef38fd9 This package is designed for remote control and data exfiltration, and could be used for malicious purposes such as spying, unauthorized access,...

MAL-2025-2589 Malicious code in blackspammerbd-one (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: oracle-using-macaron 3a7030f8a8cf814fe46e26049ad685cd2bae16adadb8115cd5f42a87ed87c941 This package performs data exfiltration and remote control of the system by generating connection codes, file uploads and downloads, and...

MAL-2025-2594 Malicious code in blackspammerbd-tooll (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: oracle-using-macaron d5e8e091db7011e3f7cef75872065e84b3ac54c31c4811271f7ac816301676f6 This package is designed for remote control and data exfiltration, and could be used for malicious purposes such as spying, unauthorized access,...

MAL-2025-2595 Malicious code in blackspammerbd-tools (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: oracle-using-macaron 032eea352b83029c69620b0a45a9297f18ccf6dcf76418258d428e85ca8dc304 This package is designed for remote control and data exfiltration, and could be used for malicious purposes such as spying, unauthorized access,...

Forvia Hella HELLA Driving Recorder DR 820 安全漏洞

Forvia Hella HELLA Driving Recorder DR 820 is a driving recorder from Forvia. The Forvia Hella HELLA Driving Recorder DR 820 suffers from a security vulnerability that originates from an unauthorized user being able to access sensitive user and vehicle information through the settings interface...

Malicious code in nl-wallet-web (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8bf94087c465bb67e65d34148f6aad2a5592fa4653e4705ca81533f5ac3f6091 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Researchers Link CACTUS Ransomware Tactics to Former Black Basta Affiliates

Threat actors deploying the Black Basta and CACTUS ransomware families have been found to rely on the same BackConnect BC module for maintaining persistent control over infected hosts, a sign that affiliates previously associated with Black Basta may have transitioned to CACTUS. "Once infiltrated...

Malicious code in synapse-contracts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2f22e2f65543683192030203ce08eecf0c137c3bc94f711cf9dd5c143dd1bd19 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in petstore-typescript-node-sample (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware df75428cea0bd4c85e2a5e3442fb967d4ec954a570cceb9f0d888e53b6cafd91 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2022-49650 dmaengine: qcom: bam_dma: fix runtime PM underflow

In the Linux kernel, the following vulnerability has been resolved: dmaengine: qcom: bamdma: fix runtime PM underflow Commit dbad41e7bb5f "dmaengine: qcom: bamdma: check if the runtime pm enabled" caused unbalanced pmruntimeget/put calls when the bam is controlled remotely. This commit reverts it...

PT-2025-29145 · Trend Micro · Trend Micro Worry-Free Business Security Services

Name of the Vulnerable Software and Affected Versions: Trend Micro Worry-Free Business Security Services WFBSS agent affected versions not specified Description: A missing authentication issue in the Trend Micro Worry-Free Business Security Services WFBSS agent could allow an unauthenticated...

PT-2025-6976 · Ubiquiti · Unifi Protect Cameras

Name of the Vulnerable Software and Affected Versions: UniFi Protect Cameras affected versions not specified Description: The issue is related to errors in the certificate authentication procedure of the UniFi Protect Cameras system. Exploitation of this issue may allow a remote attacker to gain...