PT-2025-16332

The anti-theft protection mechanism can be bypassed by attackers due to weak response generation algorithms for the head unit. It is possible to reveal all 32 corresponding responses by sniffing CAN traffic or by pre-calculating the values, which allow to bypass the protection. First identified o...

PT-2025-15637

Name of the Vulnerable Software and Affected Versions Nissan Leaf versions manufactured in 2020 affected versions not specified Description A flaw exists within the Bluetooth stack developed by Alps Alpine of the Infotainment ECU manufactured by Bosch. The issue is due to insufficient boundary...

CVE-2025-2894

The Go1 also known as "The World's First Intelligence Bionic Quadruped Robot Companion of Consumer Level," contains an undocumented backdoor that can enable the manufacturer, and anyone in possession of the correct API key, complete remote control over the affected robotic device using the...

New Android Trojan Crocodilus Abuses Accessibility to Steal Banking and Crypto Credentials

Cybersecurity researchers have discovered a new Android banking malware called Crocodilus that's primarily designed to target users in Spain and Turkey. "Crocodilus enters the scene not as a simple clone, but as a fully-fledged threat from the outset, equipped with modern techniques such as remot...

CVE-2025-2894

The Go1 also known as "The World's First Intelligence Bionic Quadruped Robot Companion of Consumer Level," contains an undocumented backdoor that can enable the manufacturer, and anyone in possession of the correct API key, complete remote control over the affected robotic device using the...

CVE-2025-2894 Unitree Go1 Robot Dog Backdoor Control Channel

The Go1 also known as "The World's First Intelligence Bionic Quadruped Robot Companion of Consumer Level," contains an undocumented backdoor that can enable the manufacturer, and anyone in possession of the correct API key, complete remote control over the affected robotic device using the...

CVE-2025-2894 Unitree Go1 Robot Dog Backdoor Control Channel

The Go1 also known as "The World's First Intelligence Bionic Quadruped Robot Companion of Consumer Level," contains an undocumented backdoor that can enable the manufacturer, and anyone in possession of the correct API key, complete remote control over the affected robotic device using the...

CVE-2025-2894

Concrete details exist for CVE-2025-2894 in connected docs: Unitree Go1 family robots (Go2, G1, H1, B2) expose a BLE Wi‑Fi configuration interface with a hardcoded AES-CFB128 key and IV, enabling an authentication bypass (

Unitree Go 1 安全漏洞

Unitree Go 1 is a robotic dog from the Chinese company Unitree. Unitree Go 1 suffers from a security vulnerability that stems from an undocumented backdoor that could lead to full remote control of the device by the manufacturer or a person in possession of an API key...

PT-2025-13431

Name of the Vulnerable Software and Affected Versions UnitreeRobotics Zhexi/Oray affected versions not specified Description The issue concerns an undocumented backdoor in the robotic device. This backdoor allows the manufacturer and anyone with the correct API key to gain complete remote control...

Exploit for Improper Authentication in Google Android

h0nkbtexploit Samsung devices are vulnerable to a critical...

Malicious code in nodejs-website (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 78f634e9e89620bdae97a2ba6be1914334b29090ecd8c222adae9b81f2a0bbf1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2593 Malicious code in blackspammerbd-tool (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: oracle-using-macaron 49490144c72d79e7bb37921a87c52011d6ce935fd7d031e2a4d3e4835e98a399 This package is designed for remote control and data exfiltration, and could be used for malicious purposes such as spying, unauthorized access,...

MAL-2025-2589 Malicious code in blackspammerbd-one (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: oracle-using-macaron 3a7030f8a8cf814fe46e26049ad685cd2bae16adadb8115cd5f42a87ed87c941 This package performs data exfiltration and remote control of the system by generating connection codes, file uploads and downloads, and...

MAL-2025-2590 Malicious code in blackspammerbd-remot (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: oracle-using-macaron b3620d6bbda8c8e6a637f39997f1d22114756ec09e8e458eaab7287ea64ff7c3 This package is designed for remote control and data exfiltration, and could be used for malicious purposes such as spying, unauthorized access,...

MAL-2025-2588 Malicious code in blackspammerbd-bsb (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: oracle-using-macaron 95b4b100eae0bd8d8b1d4a439c713c11286796c1c07beaa4cc0749305ead3307 This package performs data exfiltration and remote control of the system by generating connection codes, file uploads and downloads, and...

MAL-2025-2591 Malicious code in blackspammerbd-remot1 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: oracle-using-macaron 3618dd14b1eb36d5025d6a47cf69fbe08f06fa02c9de8338f7ca67ce5ef38fd9 This package is designed for remote control and data exfiltration, and could be used for malicious purposes such as spying, unauthorized access,...

MAL-2025-2594 Malicious code in blackspammerbd-tooll (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: oracle-using-macaron d5e8e091db7011e3f7cef75872065e84b3ac54c31c4811271f7ac816301676f6 This package is designed for remote control and data exfiltration, and could be used for malicious purposes such as spying, unauthorized access,...

MAL-2025-2595 Malicious code in blackspammerbd-tools (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: oracle-using-macaron 032eea352b83029c69620b0a45a9297f18ccf6dcf76418258d428e85ca8dc304 This package is designed for remote control and data exfiltration, and could be used for malicious purposes such as spying, unauthorized access,...

Forvia Hella HELLA Driving Recorder DR 820 安全漏洞

Forvia Hella HELLA Driving Recorder DR 820 is a driving recorder from Forvia. The Forvia Hella HELLA Driving Recorder DR 820 suffers from a security vulnerability that originates from an unauthorized user being able to access sensitive user and vehicle information through the settings interface...