CVE-2025-23296

CVE-2025-23296 affects NVIDIA Isaac-GR00T on all platforms. A vulnerability in a Python component could allow an attacker with local access (low privileges, no user interaction) to achieve code execution, privilege escalation, information disclosure, and data tampering. The CVSS 3.1 base score is...

CVE-2025-23296

NVIDIA Isaac-GR00T for all platforms contains a vulnerability in a Python component where an attacker could cause a code injection issue. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure, and data tampering...

CVE-2025-23296

NVIDIA Isaac-GR00T for all platforms contains a vulnerability in a Python component where an attacker could cause a code injection issue. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure, and data tampering...

CVE-2025-23296: Improper Control of Generation of Code

NVIDIA Isaac-GR00T for all platforms contains a vulnerability in a Python component where an attacker could cause a code injection issue. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure, and data tampering...

NVIDIA Isaac-GR00T code injection vulnerability

NVIDIA Isaac-GR00T is an open base modeling platform from NVIDIA. The NVIDIA Isaac-GR00T suffers from a code injection vulnerability, which originates in a Python component, that can be exploited by an attacker to perform malicious operations and compromise system stability by bypassing security...

PT-2025-33044 · Nvidia · Nvidia Isaac-Gr00T

Name of the Vulnerable Software and Affected Versions: NVIDIA Isaac-GR00T affected versions not specified Description: NVIDIA Isaac-GR00T contains a vulnerability in a Python component that could allow an attacker to inject code. A successful exploit may lead to code execution, escalation of...

Security Bulletin: NVIDIA Isaac-GR00T - August 2025

NVIDIA has released a software update for NVIDIA Isaac-GR00T. To protect your system, install the software including the Github commit 9ca97e1 of NVIDIA Isaac-GR00T. Go to NVIDIA Product Security...

NVIDIA Omniverse Kit code injection vulnerability

The NVIDIA Omniverse Kit is a powerful toolkit from NVIDIA, Inc. for developers to build their own applications, microservices, or plug-ins for their ecosystems. A security vulnerability exists in NVIDIA Omniverse Kit. An attacker could exploit this vulnerability to craft a USD file containing...

CVE-2022-42268: Improper Neutralization of Special Elements in Output Used by a Downstream Component

Omniverse Kit contains a vulnerability in the reference applications Create, Audio2Face, Isaac Sim, View, Code, and Machinima. These applications allow executable Python code to be embedded in Universal Scene Description USD files to customize all aspects of a scene. If a user opens a USD file th...

HP Isaac Mizrahi Smartwatch Security Feature Issue Vulnerability

HP Isaac Mizrahi is an application from Hewlett-Packard HP USA for managing access to the HP Isaac Mizrahi smartwatch. A security vulnerability exists in HP Isaac Mizrahi Smartwatch. An attacker could exploit the vulnerability to steal credentials and hijack the user interface...

Design/Logic Flaw

A potential security vulnerability caused by the use of insecure http transactions during login has been identified with early versions of the Isaac Mizrahi Smartwatch mobile app. HP has no access to customer data as a result of this issue...

CVE-2017-2748

A potential security vulnerability caused by the use of insecure http transactions during login has been identified with early versions of the Isaac Mizrahi Smartwatch mobile app. HP has no access to customer data as a result of this issue...

CVE-2017-2748

A potential security vulnerability caused by the use of insecure http transactions during login has been identified with early versions of the Isaac Mizrahi Smartwatch mobile app. HP has no access to customer data as a result of this issue...

CVE-2017-2748

The CVE-2017-2748 entry concerns insecure (http) login transactions in early versions of the Isaac Mizrahi Smartwatch mobile app. Affected component: Isaac Mizrahi Smartwatch mobile app (iOS earlier versions; Android earlier versions). Root cause: use of unencrypted HTTP during login, enabling cr...

CVE-2017-2748: Undefined Security Weakness

A potential security vulnerability caused by the use of insecure http transactions during login has been identified with early versions of the Isaac Mizrahi Smartwatch mobile app. HP has no access to customer data as a result of this issue...

PT-2019-8559

Name of the Vulnerable Software and Affected Versions Isaac Mizrahi Smartwatch mobile app affected versions not specified Description A potential security issue has been identified in early versions of the app, related to the use of insecure HTTP transactions during login. It is noted that HP has...

HPSBGN03565 rev.1 - Unsecure (http) Transactions in Isaac Mizrahi Smartwatch Mobile App

Potential Security Impact Potential theft of credentials and UI hijack Source: HP, HP Product Security Response Team PSRT Reported by: Jerry Decime VULNERABILITY SUMMARY A potential security vulnerability caused by the use of unsecure http transactions during login has been identified with early...

las-f4-del-isaac-newton.globered.com XSS vulnerability

Open Bug Bounty ID: OBB-573383 Description| Value ---|--- Affected Website:| las-f4-del-isaac-newton.globered.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:...

Bouncing Isaac: Watch Face - Suspicious files vulnerabilities

HackApp vulnerability scanner discovered that application Bouncing Isaac: Watch Face published at the 'play' market has multiple vulnerabilities...

CenoCipher - Easy-To-Use, End-To-End Encrypted Communications Tool

CenoCipher is a free, open-source, easy-to-use tool for exchanging secure encrypted communications over the internet. It uses strong cryptography to convert messages and files into encrypted cipher-data, which can then be sent to the recipient via regular email or any other channel available, suc...