Lucene search
+L

221 matches found

Packet Storm News
Packet Storm News
added 2025/09/11 12:00 a.m.7 views

Multi-Channel Secure Communication Framework for Wireless IoT (MCSC-WoT): Enhancing Security in Internet of Things

In modern smart systems, the convergence of the Internet of Things IoT and Wireless of Things WoT have been revolutionized by offering a broad level of wireless connectivity and communication among various devices. Hitherto, this greater interconnectivity poses important security problems,...

7AI score
SaveExploits0
Packet Storm News
Packet Storm News
added 2025/09/09 12:00 a.m.14 views

I2P 2.10.0

I2P is an anonymizing network, offering a simple layer that identity-sensitive applications can use to securely communicate. All data is wrapped with several layers of encryption, and the network is both distributed and dynamic, with no trusted parties. This is the source code release version...

7.1AI score
SaveExploits0
Packet Storm News
Packet Storm News
added 2025/09/04 12:00 a.m.10 views

SREC: Encrypted Semantic Super-Resolution Enhanced Communication

Semantic communication SemCom, as a typical paradigm of deep integration between artificial intelligence AI and communication technology, significantly improves communication efficiency and resource utilization efficiency. However, the security issues of SemCom are becoming increasingly prominent...

6.8AI score
SaveExploits0
Packet Storm News
Packet Storm News
added 2025/08/26 12:00 a.m.12 views

Addressing Weak Authentication like RFID, NFC in EVs and EVCs Using AI-Powered Adaptive Authentication

The rapid expansion of the Electric Vehicles EVs and Electric Vehicle Charging Systems EVCs has introduced new cybersecurity challenges, specifically in authentication protocols that protect vehicles, users, and energy infrastructure. Although widely adopted for convenience, traditional...

7.3AI score
SaveExploits0
CVE
CVE
added 2025/08/21 6:08 a.m.50 views

CVE-2025-7390

CVE-2025-7390 describes a bypass of the client certificate trust check in an opc.https server when the endpoint is configured to allow only secure communication. Connected sources indicate affected software/product context primarily around OPC.https servers (e.g., Softing edgeConnector) and Red H...

9.1CVSS6.6AI score0.00258EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2025/08/21 6:08 a.m.31 views

CVE-2025-7390 Bypass the client certificate trust check of an opc.https server while only secure communication is allowed

A malicious client can bypass the client certificate trust check of an opc.https server when the server endpoint is configured to allow only secure communication...

9.1CVSS0.00258EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2025/08/21 12:00 a.m.12 views

PT-2025-34191 · Unknown · Opc.Https Server

Name of the Vulnerable Software and Affected Versions: opc.https server affected versions not specified Description: A malicious client can bypass the client certificate trust check of an opc.https server when the server endpoint is configured to allow only secure communication. Recommendations: ...

9.1CVSS6.9AI score0.00258EPSS
SaveExploits0References9
Packet Storm News
Packet Storm News
added 2025/08/16 12:00 a.m.21 views

CAN Networks Security in Smart Grids Communication Technologies

The rapid evolution of smart grids requires effective communication protocols to transfer data reliably and securely. Controller Area Network CAN is one of the most recognized protocols that offer reliable data transmission in smart grids due to its robustness, real-time capabilities, and...

6.9AI score
SaveExploits0
Vulnrichment
Vulnrichment
added 2025/07/18 11:39 a.m.52 views

CVE-2025-6227 Invite token is used as part of the secure communication

Mattermost versions 10.5.x = 10.5.7, 9.11.x = 9.11.16 fail to negotiate a new token when accepting the invite which allows a user that intercepts both invite and password to send synchronization payloads to the server that originally created the invite via the REST API...

2.2CVSS7.2AI score0.00175EPSS
SaveExploits0References1
Japan Vulnerability Notes
Japan Vulnerability Notes
added 2025/07/15 6:54 a.m.11 views

Least Privilege Violation Vulnerability in the communications functions of NJ/NX series Machine Automation Controllers

Overview Least privilege violation vulnerability CWE-272 exists in the communication function between the NJ/NX-series Machine Automation Controllers and the Sysmac Studio Software provided by OMRON Corporation. - CVE-2025-1384 OMRON Corporation reported this vulnerability to JPCERT/CC to notify...

7CVSS7AI score0.00233EPSS
SaveExploits0References4
Packet Storm News
Packet Storm News
added 2025/07/02 12:00 a.m.34 views

Singularity Cipher: a Topology-Driven Cryptographic Scheme Based on Visual Paradox and Klein Bottle Illusions

This paper presents the Singularity Cipher, a novel cryptographic-steganographic framework that integrates topological transformations and visual paradoxes to achieve multidimensional security. Inspired by the non-orientable properties of the Klein bottle -- constructed from two Mobius strips --...

6.8AI score
SaveExploits0
Packet Storm News
Packet Storm News
added 2025/06/07 12:00 a.m.8 views

An Ultra-Sub-Wavelength Microwave Polarization Switch Implemented with Directed Surface Acoustic Waves in a Magnonic Crystal

The ability to switch the polarization of a transmitted electromagnetic wave from vertical to horizontal, or vice versa, is of great technological interest because of its many applications in long distance communication. Binary bits can be encoded in two orthogonal polarizations and transmitted...

6.9AI score
SaveExploits0
Github Security Blog
Github Security Blog
added 2025/05/30 6:30 a.m.23 views

Spring Cloud Gateway Server Forwards Headers from Untrusted Proxies

Spring Cloud Gateway Server forwards the X-Forwarded-For and Forwarded headers from untrusted proxies...

8.6CVSS7.1AI score0.00319EPSS
SaveExploits0References3Affected Software2
RedhatCVE
RedhatCVE
added 2025/05/23 12:28 a.m.11 views

CVE-2022-48193

Weak ciphers in Softing smartLink SW-HT before 1.30 are enabled during secure communication SSL...

7.5CVSS7AI score0.0027EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/04/23 12:00 a.m.8 views

PT-2025-17675 · Ibm · Ibm Infosphere Information Server

Name of the Vulnerable Software and Affected Versions: IBM InfoSphere Information Server version 11.7 Description: The issue concerns the transmission of sensitive information via URL or query parameters, which could be exposed to an unauthorized actor using man-in-the-middle techniques...

3.7CVSS5.7AI score0.00168EPSS
SaveExploits0References8
Tenable Nessus
Tenable Nessus
added 2025/04/14 12:00 a.m.23 views

Hitachi Energy's RTU500 series Insufficient Resource Pool (CVE-2024-12169)

A vulnerability exists in RTU500 IEC 60870-5-104 con- trolled station functionality and IEC 61850 functional- ity, that allows an attacker performing a specific attack sequence to restart the affected CMU. This vulnerabil- ity only applies, if secure communication using IEC 62351-3 TLS is enabled...

8.7CVSS5.4AI score0.0039EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2025/04/08 7:13 a.m.10 views

CVE-2025-26654 Potential information disclosure vulnerability in SAP Commerce Cloud (Public Cloud)

SAP Commerce Cloud Public Cloud does not allow to disable unencrypted HTTP port 80 entirely, but instead allows a redirect from port 80 to 443 HTTPS. As a result, Commerce normally communicates securely over HTTPS. However, the confidentiality and integrity of data sent on the first request befor...

6.8CVSS7AI score0.00166EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
added 2025/03/27 1:34 p.m.12 views

CVE-2024-12169

A vulnerability exists in RTU500 IEC 60870-5-104 controlled station functionality and IEC 61850 functionality, that allows an attacker performing a specific attack sequence to restart the affected CMU. This vulnerability only applies, if secure communication using IEC 62351-3 TLS is enabled...

8.7CVSS6.8AI score0.0039EPSS
SaveExploits0References1
NVD
NVD
added 2025/03/25 1:15 p.m.17 views

CVE-2024-12169

A vulnerability exists in RTU500 IEC 60870-5-104 controlled station functionality and IEC 61850 functionality, that allows an attacker performing a specific attack sequence to restart the affected CMU. This vulnerability only applies, if secure communication using IEC 62351-3 TLS is enabled...

8.7CVSS0.0039EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/03/25 12:36 p.m.21 views

CVE-2024-12169

A vulnerability exists in RTU500 IEC 60870-5-104 controlled station functionality and IEC 61850 functionality, that allows an attacker performing a specific attack sequence to restart the affected CMU. This vulnerability only applies, if secure communication using IEC 62351-3 TLS is enabled...

8.7CVSS0.0039EPSS
SaveExploits0References1
Rows per page
Query Builder