aztarna

此仓库已存档，不再维护。关于机器人足迹和指纹识别的未来进展，请参阅 alurity。 aztarna 此仓库包含 Alias Robotics 的 aztarna，一款用于机器人足迹探测的工具。 Alias Robotics 支持原始机器人制造商评估其安全性并提升软件质量。我们绝不鼓励或促进对运行中机器人系统的未经授权篡改。这可能导致严重的人身伤害和物质损失。 HTML 阅读版： Aztarna, a footprinting tool for robots 针对 ROS 系统中存在的 ROS 节点列表（发布者和订阅者） 每个节点发布和订阅的话题，包括话题类型 每个节点提供的 ROS 服...

CVE-2026-66411

DEEBOT PRO M1 and DEEBOT PRO K1VAC incorrectly implement authentication algorithm in Websocket communications. An unauthenticated attacker may connect and operate the affected robot...

CVE-2026-66411

The CVE-2026-66411 entry concerns DEEBOT PRO M1 and DEEBOT PRO K1VAC, where the WebSocket authentication implementation is incorrect (CWE-303). An unauthenticated attacker may connect to and operate the affected robot. Documented impact includes potential unauthorized control of the device, with ...

CVE-2025-41108 Improper Authentication vulnerability in Ghost Robotics' Vision 60

The communication protocol implemented in Ghost Robotics Vision 60 v0.27.2 could allow an attacker to send commands to the robot from an external attack station, impersonating the control station tablet and gaining unauthorised full control of the robot. The absence of encryption and authenticati...

EUVD-2020-2727

Malware in sbrugna...

EUVD-2018-9672

Malware in sbrugna...

EUVD-2024-50576

Malicious code in bioql PyPI...

EUVD-2025-8541

Malicious code in bioql PyPI...

The Cybersecurity of a Humanoid Robot

The rapid advancement of humanoid robotics presents unprecedented cybersecurity challenges that existing theoretical frameworks fail to adequately address. This report presents a comprehensive security assessment of a production humanoid robot platform, bridging the gap between abstract security...

CVE-2025-2894 Unitree Go1 Robot Dog Backdoor Control Channel

The Go1 also known as "The World's First Intelligence Bionic Quadruped Robot Companion of Consumer Level," contains an undocumented backdoor that can enable the manufacturer, and anyone in possession of the correct API key, complete remote control over the affected robotic device using the...

Jailbreaking LLM-Controlled Robots

Surprising no one, it's easy to trick an LLM-controlled robot into ignoring its safety instructions...

Security Bulletin: IBM Sterling B2B Integrator is Vulnerable to a Robot Security Vulnerability (CVE-2017-6168)

Summary IBM Sterling B2B Integrator is vulnerable to a robot security vulnerability. This could allow an attacker to obtain encrypted data in clear text. Vulnerability Details CVEID: CVE-2017-6168 DESCRIPTION: F5 BIG-IP virtual servers configured with a Client SSL profile could allow a remote...