CVE-2025-13453

CVE-2025-13453 concerns ThinkPlus USB drives where a user with physical access could read data stored on the drive. The NVD entry and multiple third-party sources (Red Hat, EUVD, CIRCL, CVE records) describe the issue as a data-retrieval risk tied to physical access, with CVSS v3.1 base score 4.6...

CVE-2025-13453

A potential vulnerability was reported in some ThinkPlus USB drives that could allow a user with physical access to read data stored on the drive...

CVE-2026-20834

Absolute path traversal in Windows Shell allows an unauthorized attacker to perform spoofing with a physical attack...

CVE-2026-20936

Out-of-bounds read in Windows NDIS allows an authorized attacker to disclose information with a physical attack...

CVE-2026-20828

Out-of-bounds read in Windows Internet Connection Sharing ICS allows an unauthorized attacker to disclose information with a physical attack...

CVE-2025-67399

CVE-2025-67399 concerns the AIRTH SMART HOME AQI MONITOR Bootloader v1.005. The issue enables a physically proximate attacker to access sensitive information via the UART port on the BK7231N controller (Wi‑Fi/BLE module) due to exposed UART access. Impact is information disclosure (confidential d...

Lenovo ThinkPlus 安全漏洞

Lenovo ThinkPlus FU100 and others are products of Lenovo, a Chinese company.Lenovo ThinkPlus FU100 is a fingerprint USB flash drive.Lenovo ThinkPlus FU200 is a fingerprint USB flash drive.Lenovo ThinkPlus TU800 is a USB flash drive. A security vulnerability exists in Lenovo ThinkPlus, which...

PT-2026-2959

Name of the Vulnerable Software and Affected Versions ThinkPlus USB drives affected versions not specified Description A potential issue exists in some ThinkPlus USB drives that may allow a user with physical access to read data stored on the drive. Recommendations At the moment, there is no...

AIRTH SMART HOME AQI MONITOR Bootloader 安全漏洞

The AIRTH SMART HOME AQI MONITOR Bootloader is the underlying software for an air quality detector from AIRTH India. A security vulnerability exists in AIRTH SMART HOME AQI MONITOR Bootloader version 1.005, which originates from physical proximity Attackers can access the BK7231N controller throu...

PT-2026-2908

Name of the Vulnerable Software and Affected Versions AIRTH SMART HOME AQI MONITOR Bootloader version 1.005 Description An issue allows a physically proximate attacker to obtain sensitive information via the UART port of the BK7231N controller Wi-Fi and BLE module on the device. The UART port is...

Lenovo Tablets 安全漏洞

Lenovo Tablets are a line of tablets from Chinese company Lenovo. A security vulnerability exists in the Lenovo Tablets, which arises from the possibility that an unauthorized user with physical access could modify Control Center settings when the Allow access to Control Center when locked option...

PT-2026-2965

Name of the Vulnerable Software and Affected Versions Lenovo Tablets affected versions not specified Description A missing authentication issue exists in some Lenovo Tablets. An unauthorized user with physical access may be able to modify Control Center settings if the device is locked and the...

AmbShield: Enhancing Physical Layer Security with Ambient Backscatter Devices against Eavesdroppers

Passive eavesdropping compromises confidentiality in wireless networks, especially in resource-constrained environments where heavyweight cryptography is impractical. Physical layer security PLS exploits channel randomness and spatial selectivity to confine information to an intended receiver wit...

CVE-2026-20974

Improper input validation in data related to network restrictions prior to SMR Jan-2026 Release 1 allows physical attackers to bypass Carrier Relock...

CVE-2026-20936

Out-of-bounds read in Windows NDIS allows an authorized attacker to disclose information with a physical attack...

CVE-2026-20936

Out-of-bounds read in Windows NDIS allows an authorized attacker to disclose information with a physical attack...

CVE-2026-20834

Absolute path traversal in Windows Shell allows an unauthorized attacker to perform spoofing with a physical attack...

CVE-2026-20834

Absolute path traversal in Windows Shell allows an unauthorized attacker to perform spoofing with a physical attack...

CVE-2026-20828

Out-of-bounds read in Windows Internet Connection Sharing ICS allows an unauthorized attacker to disclose information with a physical attack...

CVE-2026-20828

Out-of-bounds read in Windows Internet Connection Sharing ICS allows an unauthorized attacker to disclose information with a physical attack...