Espressif IoT Development Framework 安全漏洞

Espressif IoT Development Framework is an open source IoT development framework from Espressif Systems. A security vulnerability exists in the Espressif IoT Development Framework that stems from a memory overflow that could lead to issues with Wi-Fi credential handling and Diffie-Hellman key...

CVE-2025-52351

CVE-2025-52351 affects Aikaan IoT management platform v3.25.0325-5-g2e9c59796. The vulnerability arises from sending a newly generated password to users in plaintext via email and including the same password as a query parameter in the account activation URL (e.g., https://domain.com/activate=xyz...

Schneider Electric EcoStruxure Power Monitoring Expert和Schneider Electric EcoStruxure Power Operation 路径遍历漏洞

Schneider Electric EcoStruxure Power Monitoring Expert and Schneider Electric EcoStruxure Power Operation Schneider Electric EPO are both products of the French company Schneider Electric Schneider Electric EcoStruxure Power Monitoring Expert is an appliance for power distribution monitoring in I...

August 19, 2025—KB5066188 (OS Builds 19044.6218 and 19045.6218) Out-of-band

None None...

Malicious code in node-red-azure-iot-hub (npm)

The package node-red-azure-iot-hub was found to contain malicious code...

MAL-2025-23324 Malicious code in iot-gateway-plugin-rtls (npm)

The package iot-gateway-plugin-rtls was found to contain malicious code...

MAL-2025-27640 Malicious code in node-red-azure-iot-hub (npm)

The package node-red-azure-iot-hub was found to contain malicious code...

MAL-2025-19832 Malicious code in eslint-config-iot-app-kit (npm)

The package eslint-config-iot-app-kit was found to contain malicious code...

Malicious code in node-red-contrib-storfly-iot-vtview (npm)

The package node-red-contrib-storfly-iot-vtview was found to contain malicious code...

Malicious code in node-red-contrib-storfly-iot-hp (npm)

The package node-red-contrib-storfly-iot-hp was found to contain malicious code...

MAL-2025-27646 Malicious code in node-red-contrib-storfly-iot-hp (npm)

The package node-red-contrib-storfly-iot-hp was found to contain malicious code...

Malicious code in eslint-config-iot-app-kit (npm)

The package eslint-config-iot-app-kit was found to contain malicious code...

Optimizing IoT Threat Detection with Kolmogorov-Arnold Networks (KANs)

The exponential growth of the Internet of Things IoT has led to the emergence of substantial security concerns, with IoT networks becoming the primary target for cyberattacks. This study examines the potential of Kolmogorov-Arnold Networks KANs as an alternative to conventional machine learning...

Reputation-Based Partition Scheme for IoT Security

With the popularity of smart terminals, such as the Internet of Things, crowdsensing is an emerging data aggregation paradigm, which plays a pivotal role in data-driven applications. There are some key issues in the development of crowdsensing such as platform security and privacy protection. As...

Introducing DataTrap: A Smarter, More Adaptive Honeypot Framework

Today, we're excited to release DataTrap, a powerful, extensible honeypot system built to simulate realistic web applications, IoT devices, and database behavior across HTTP, HTTPS, SSH, and database protocols e.g., MySQL. What sets DataTrap apart? It goes beyond static honeypots by combining...

Analyzing the Mirai IoT Botnet and Its Recent Variants: Satori, Mukashi, Moobot, and Sonic

Mirai is undoubtedly one of the most significant Internet of Things IoT botnet attacks in history. In terms of its detrimental effects, seamless spread, and low detection rate, it surpassed its predecessors. Its developers released the source code, which triggered the development of several...

PT-2025-30982 · Qualcomm · 315 5G Iot Modem Firmware +81

Name of the Vulnerable Software and Affected Versions: affected versions not specified Description: A transient Denial-of-Service DoS condition may occur during the processing of Common Control Channel CCCH data when the network NW sends data with an invalid length. Recommendations: At the moment...

PT-2025-30551 · Iotgen · Iotgen

Name of the Vulnerable Software and Affected Versions: Apache IoT affected versions not specified Description: An authenticated remote attacker can execute arbitrary commands with root privileges on affected devices due to improper sanitizing of user input in the Main Web Interface. The vulnerabl...

MAL-2025-6152 Malicious code in aws-iot-twinmaker-grafana-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4c4ed5abc6b9aacfab44cd41a0d5b9609603b25a6a318e051d71e9efa218d851 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in aws-iot-twinmaker-grafana-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4c4ed5abc6b9aacfab44cd41a0d5b9609603b25a6a318e051d71e9efa218d851 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...