160 matches found
EUVD-2012-0168
Malware in sbrugna...
EUVD-2009-1424
Malware in sbrugna...
SpyChain: Multi-Vector Supply Chain Attacks on Small Satellite Systems
Small satellites are integral to scientific, commercial, and defense missions, but reliance on commercial off-the-shelf COTS hardware broadens their attack surface. Although supply chain threats are well studied in other cyber-physical domains, their feasibility and stealth in space systems remai...
EUVD-2023-47100
Malicious code in bioql PyPI...
EUVD-2025-8103
Malicious code in bioql PyPI...
What Is Cybersecurity in Space?
Satellites, drones, and 5G space links now support critical services such as air traffic, finance, and weather. Yet most were not built to resist modern cyber threats. Ground stations can be breached, GPS jammed, and supply chains compromised, while no shared list of vulnerabilities or safe testi...
Malicious code in rdpfox-onboard-client (npm)
The package rdpfox-onboard-client was found to contain malicious code...
MAL-2025-31756 Malicious code in rdpfox-onboard-client (npm)
The package rdpfox-onboard-client was found to contain malicious code...
[SECURITY] Fedora 41 Update: fido-device-onboard-0.5.1-3.fc41
A rust implementation of the FIDO Device Onboard Specification...
Fedora 41 : fido-device-onboard (2025-e375586840)
The remote Fedora 41 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-e375586840 advisory. Rebuild against idna 1.0+ for CVE-2024-12224 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Ness...
CVE-2023-23324
Zumtobel Netlink CCD Onboard 3.74 - Firmware 3.80 was discovered to contain hardcoded credentials for the Administrator account...
Guardian Positioning System (GPS) for Location Based Services
Location-based service LBS applications proliferate and support transportation, entertainment, and more. Modern mobile platforms, with smartphones being a prominent example, rely on terrestrial and satellite infrastructures e.g., global navigation satellite system GNSS and crowdsourced Wi-Fi,...
fido-device-onboard bug fix and enhancement update
An update is available for fido-device-onboard. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rock...
CVE-2025-25374
Technical details about CVE-2025-25374 are not publicly available in the provided connected documents. Monitor for updates if more specifics on affected products, impact, and fixes are released.
Bosscomm IF740 安全漏洞
Bosscomm IF740 is an OBD2 scanner for automotive diagnostics from Bosscomm. It can read codes for automotive engine, SRS, ABS, TCM, etc. A security vulnerability exists in the Bosscomm IF740 that stems from passwords being stored in clear text...
[SECURITY] Fedora 40 Update: fido-device-onboard-0.5.0-2.fc40
A rust implementation of the FIDO Device Onboard Specification...
[SECURITY] Fedora 41 Update: fido-device-onboard-0.5.1-2.fc41
A rust implementation of the FIDO Device Onboard Specification...
MAL-2025-1195 Malicious code in web3-onboard-sandbox (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 539dc0279cc6a739adf371f7670ad0946dfd3a95b07e9f55f88a2047dc7568eb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in web3-onboard-sandbox (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 539dc0279cc6a739adf371f7670ad0946dfd3a95b07e9f55f88a2047dc7568eb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
PT-2024-16401 · WordPress · Wp Travel Engine
Name of the Vulnerable Software and Affected Versions: The WP Travel Engine – Tour Booking Plugin – Tour Operator Software plugin for WordPress versions prior to 6.2.2 Description: The issue is related to a missing capability check on the wpte onboard save function callback function, allowing...