EUVD-2024-18605

Malicious code in bioql PyPI...

EUVD-2024-30457

Malicious code in bioql PyPI...

EUVD-2021-7564

Malicious code in bioql PyPI...

EUVD-2024-21385

Malicious code in bioql PyPI...

EUVD-2024-46255

Malicious code in bioql PyPI...

EUVD-2023-37546

Malicious code in bioql PyPI...

EUVD-2022-35577

Malicious code in bioql PyPI...

EUVD-2023-55786

Malicious code in bioql PyPI...

EUVD-2022-35579

Malicious code in bioql PyPI...

EUVD-2022-48100

Malicious code in bioql PyPI...

EUVD-2023-25591

Malicious code in bioql PyPI...

EUVD-2023-31831

Malicious code in bioql PyPI...

CVE-2025-56019: Insecure Inherited Permissions

An insecure permission vulnerability exists in the Agasta Easytouch+ version 9.3.97 The device allows unauthorized mobile applications to connect via Bluetooth Low Energy BLE without authentication. Once an unauthorized connection is established, legitimate applications are unable to connect,...

CVE-2025-35027

CVE-2025-35027 affects Unitree Go2, G1, H1, and B2 robotic devices sharing a common firmware (MIT Cheetah). It enables command injection by supplying a malicious string during BLE-configured WiFi setup and triggering a WiFi service restart, allowing commands to run as root via the wpa_supplicant_...

CVE-2025-60250

Unitree Go2, G1, H1, and B2 devices through 2025-09-20 decrypt BLE packet data by using the df98b715d5c6ed2b25817b6f2554124a key and the 2841ae97419c2973296a0d4bdfe19a4f IV...

CVE-2025-60250: Use of Hard-coded Cryptographic Key

Unitree Go2, G1, H1, and B2 devices through 2025-09-20 decrypt BLE packet data by using the df98b715d5c6ed2b25817b6f2554124a key and the 2841ae97419c2973296a0d4bdfe19a4f IV...

CVE-2025-60250

Unitree Go2, G1, H1, and B2 devices have a vulnerability (CVE-2025-60250) where BLE packet data can be decrypted using the specific key df98b715d5c6ed2b25817b6f2554124a and IV 2841ae97419c2973296a0d4bdfe19a4f. Connected sources confirm this cryptographic exposure through 2025-09-20; CVSS shows Ad...

CVE-2025-35027: Improper Neutralization of Special Elements used in an OS Command

Multiple robotic products by Unitree sharing a common firmware, including the Go2, G1, H1, and B2 devices, contain a command injection vulnerability. By setting a malicious string when configuring the on-board WiFi via a BLE module of an affected robot, then triggering a restart of the WiFi...

CVE-2025-60250

Unitree Go2, G1, H1, and B2 devices through 2025-09-20 decrypt BLE packet data by using the df98b715d5c6ed2b25817b6f2554124a key and the 2841ae97419c2973296a0d4bdfe19a4f IV...

CVE-2025-10457: Improperly Implemented Security Check for Standard

The function responsible for handling BLE connection responses does not verify whether a response is expected—that is, whether the device has initiated a connection request. Instead, it relies solely on identifier matching...