13824 matches found
Security Risks Introduced by Weak Authentication in Smart Home IoT Systems
Smart home IoT systems rely on authentication mechanisms to ensure that only authorized entities can control devices and access sensitive functionality. In practice, these mechanisms must balance security with usability, often favoring persistent connectivity and minimal user interaction. This...
Malicious code in smart-parser (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 077a3aaa416c1f13b15911f6c7b8569859f046edbaeb64242bc8ecd5e32c75bb The package smart-parser was found to contain malicious code...
MAL-2025-192863 Malicious code in smart-parser (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 077a3aaa416c1f13b15911f6c7b8569859f046edbaeb64242bc8ecd5e32c75bb The package smart-parser was found to contain malicious code...
CVE-2025-65817
LSC Smart Connect Indoor IP Camera 1.4.13 contains a RCE vulnerability in startapp.sh...
CVE-2025-65817
LSC Smart Connect Indoor IP Camera 1.4.13 contains a RCE vulnerability in startapp.sh...
PT-2025-52682
Name of the Vulnerable Software and Affected Versions LSC Smart Connect Indoor IP Camera version 1.4.13 Description The LSC Smart Connect Indoor IP Camera version 1.4.13 contains a remote code execution issue in the start app.sh script. Recommendations At the moment, there is no information about...
LSC Smart Connect Indoor IP Camera 安全漏洞
LSC Smart Connect Indoor IP Camera is an indoor IP camera driver from LSC Smart Connect. A security vulnerability exists in LSC Smart Connect Indoor IP Camera version 1.4.13, which stems from a remote code execution vulnerability in startapp.sh...
CVE-2025-65817
CVE-2025-65817 : The LSC Smart Connect Indoor IP Camera (v1.4.13) exposes a remote code execution vulnerability in the start_app.sh script. CVSS v3.1 base score 8.8 (High) with adjacent attack vector, no privileges required, no user interaction, and impacts on confidentiality, integrity, and avai...
CVE-2025-60059
Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in axiomthemes smart SEO smartSEO allows PHP Local File Inclusion.This issue affects smart SEO: from n/a through = 2.12...
Social Engineering Attacks: A Systemisation of Knowledge on People against Humans
Our systematisation of knowledge on Social Engineering Attacks SEAs, identifies the human, organisational, and adversarial dimensions of cyber threats. It addresses the growing risks posed by SEAs, highly relevant in the context physical cyber places, such as travellers at airports and residents ...
Lazarus Group Embed New BeaverTail Variant in Developer Tools
North Korea’s Lazarus Group deploys a new BeaverTail variant to steal credentials and crypto using fake job lures, dev tools, and smart contracts...
CVE-2025-60059
Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in axiomthemes smart SEO smartSEO allows PHP Local File Inclusion.This issue affects smart SEO: from n/a through = 2.12...
CVE-2025-60059 WordPress smart SEO theme <= 2.12 - Local File Inclusion vulnerability
Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in axiomthemes smart SEO smartSEO allows PHP Local File Inclusion.This issue affects smart SEO: from n/a through = 2.12...
CVE-2025-60059
CVE-2025-60059 affects the WordPress plugin/theme “smart SEO” (WordPress smart SEO theme) <= version 2.12. The issue is an improper control of filenames for Include/Require statements, i.e., a Local File Inclusion (LFI) vulnerability that enables PHP Local File Inclusion. Root cause is insecur...
WordPress plugin smart SEO 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation, a blogging platform developed in the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security vulnerability exists in...
Malicious code in smart-utils-alice (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2de5b916487c66ac49dea93a8859097db125ab6c1b8ea18a72bd3f72cdcfaff6 The package smart-utils-alice was found to contain malicious code. Source: ghsa-malware...
EUVD-2025-203514
Malicious code in smart-utils-alice npm...
Malicious Package
Overview smart-utils-alice is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...
MAL-2025-192595 Malicious code in smart-utils-alice (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2de5b916487c66ac49dea93a8859097db125ab6c1b8ea18a72bd3f72cdcfaff6 The package smart-utils-alice was found to contain malicious code. Source: ghsa-malware...