CVE-2025-33184

NVIDIA Isaac-GR00T for all platforms contains a vulnerability in a Python component, where an attacker could cause a code injection issue. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure, and data tampering...

CVE-2025-33184

CVE-2025-33184 affects NVIDIA Isaac-GR00T on all platforms. A vulnerability in a Python component could allow an attacker to perform code injection, with potential outcomes including code execution, privilege escalation, information disclosure, and data tampering. The CVE has a high impact rating...

CVE-2025-33183

CVE-2025-33183 affects NVIDIA Isaac-GR00T across platforms via a Python-component code injection vulnerability. The issue stems from TorchSerializer deserialization of untrusted data, enabling potential code execution, privilege escalation, information disclosure, and data tampering. Connected so...

CVE-2025-33183

NVIDIA Isaac-GR00T for all platforms contains a vulnerability in a Python component, where an attacker could cause a code injection issue. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure, and data tampering...

EUVD-2025-198024

NVIDIA Isaac-GR00T for all platforms contains a vulnerability in a Python component, where an attacker could cause a code injection issue. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure, and data tampering...

CVE-2025-60022

Improper certificate validation vulnerability exists in 'デジラアプリ' App for iOS prior to ver.80.10.00. If this vulnerability is exploited, a man-in-the-middle attack may allow an attacker to eavesdrop on and/or tamper with an encrypted communication...

PT-2025-47349

Name of the Vulnerable Software and Affected Versions NVIDIA Isaac-GR00T for all platforms affected versions not specified Description A flaw exists in a Python component of NVIDIA Isaac-GR00T that could allow an attacker to inject code. Exploitation of this issue may result in code execution,...

PT-2025-47348

Name of the Vulnerable Software and Affected Versions NVIDIA Isaac-GR00T affected versions not specified Description The NVIDIA Isaac-GR00T robotics platform contains a flaw related to improper code generation management. Exploitation of this issue could allow a remote attacker to execute arbitra...

NVIDIA Isaac-GR00T 代码注入漏洞

NVIDIA Isaac-GR00T is an open base modeling platform from NVIDIA. NVIDIA Isaac-GR00T suffers from a code injection vulnerability that stems from a code injection issue in the Python component that could lead to code execution, elevation of privilege, information disclosure, and data tampering...

NVIDIA Isaac-GR00T 代码注入漏洞

NVIDIA Isaac-GR00T is an open base modeling platform from NVIDIA. NVIDIA Isaac-GR00T suffers from a code injection vulnerability that stems from a code injection issue in the Python component that could lead to code execution, elevation of privilege, information disclosure, and data tampering...

GO-2025-4099 IDOR Vulnerabilities in ZITADEL's Organization API allows Cross-Tenant Data Tempering in github.com/zitadel/zitadel

IDOR Vulnerabilities in ZITADEL's Organization API allows Cross-Tenant Data Tempering in github.com/zitadel/zitadel. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. If this is causing false-positive...

Intel CIP Code Issue Vulnerability

Intel CIP is an optional program from Intel designed to improve products by collecting performance data from users' computers. Intel CIP has a code issue vulnerability that stems from an unrestricted upload of dangerous types of files, which can be exploited by attackers to cause data tampering...

MAL-2025-186806 Malicious code in eridanus-darkenergy-blackhole-selenium (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5faf542de599bd45bf39586c3db03f9967f089712019cfa42b18511a1522949 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

CVE-2025-23361

NVIDIA NeMo Framework for all platforms contains a vulnerability in a script, where malicious input created by an attacker may cause improper control of code generation. A successful exploit of this vulnerability may lead to code execution, escalation of privileges, information disclosure, and da...

CVE-2025-33178

NVIDIA NeMo Framework for all platforms contains a vulnerability in the bert services component where malicious data created by an attacker may cause a code injection. A successful exploit of this vulnerability may lead to Code execution, Escalation of privileges, Information disclosure, and Data...

CVE-2025-33186

NVIDIA AIStore contains a vulnerability in AuthN. A successful exploit of this vulnerability might lead to escalation of privileges, information disclosure, and data tampering...

Malicious code in teate-thy-sonic-amahaz (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c43bf4513929e6bdb60d784facda033dac81db453091dd427e7dbbd96993208c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178221 Malicious code in rindaman-poke57 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb982df2248236641487c4d5683d6f526c9f3ff7b7a744aeae9afd8c7744cbc5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-nalikoli139 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f6516c96575879f9ff0dadefa9a335cbce6f555a2a9e58fbecbc9781d94d661 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/mrra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 595fb9d0e41a0071a160d157cdca1a0a065c0e862f977eaa48aec646dc040979 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...