CVE-2025-62843

An improper restriction of communication channel to intended endpoints vulnerability has been reported to affect QHora. If an attacker gains physical access, they can then exploit the vulnerability to gain the privileges that were intended for the original endpoint. We have already fixed the...

CVE-2025-36751 Missing encryption on Local Configuration Interface or Cloud Endpoint Communication - Growatt MIC3300TL-X and ShineLan-X

Encryption is missing on the configuration interface for Growatt ShineLan-X and MIC 3300TL-X. This allows an attacker with access to the network to intercept and potentially manipulate communication requests between the inverter and its cloud endpoint...

NVIDIA RunAI Privilege Escalation

The vulnerability of NVIDIA RunAI software is related to an improper restriction on the communication channels for the intended endpoints. Exploiting this vulnerability can allow a remote attacker to enhance their privileges...

Juniper Networks Junos OS Evolved Information Disclosure

The vulnerability of the Juniper Networks Junos OS Evolved operating system is related to insufficient restrictions on communication channels for specified endpoints. Exploiting this vulnerability can allow a malicious actor to gain unauthorized access to protected information and cause service...

Persistence – AMSI

AMSI Antimalware Scan Interface is a vendor agnostic interface which can communicate with the endpoint in order to prevent execution of malware. The scan performed… Continue reading - Persistence - AMSI...