9262 matches found
CVE-2025-60674
A stack buffer overflow vulnerability exists in the D-Link DIR-878A1 router firmware FW101B04.bin in the rc binary's USB storage handling module. The vulnerability occurs when the "Serial Number" field from a USB device is read via sscanf into a 64-byte stack buffer, while fgets reads up to 127...
CVE-2025-40118
In the Linux kernel, the following vulnerability has been resolved: scsi: pm80xx: Fix array-index-out-of-of-bounds on rmmod Since commit f7b705c238d1 "scsi: pm80xx: Set phyattached to zero when device is gone" UBSAN reports: UBSAN: array-index-out-of-bounds in drivers/scsi/pm8001/pm8001sas.c:786:...
CVE-2025-60674
A stack buffer overflow vulnerability exists in the D-Link DIR-878A1 router firmware FW101B04.bin in the rc binary's USB storage handling module. The vulnerability occurs when the "Serial Number" field from a USB device is read via sscanf into a 64-byte stack buffer, while fgets reads up to 127...
HP Integrated Lights-Out Improper Protection of Physical Side Channels (CVE-2023-28092)
A potential security vulnerability has been identified in HPE ProLiant RL300 Gen11 Server. The vulnerability could result in the system being vulnerable to exploits by attackers with physical access inside the server chassis. This plugin only works with Tenable.ot. Please visit...
CVE-2025-60674
CVE-2025-60674 affects D-Link DIR-878A1 router firmware FW101B04.bin in the rc USB storage handling module. The flaw occurs when reading the USB device’s Serial Number with sscanf into a 64-byte stack buffer while fgets can read up to 127 bytes, causing a stack overflow. An attacker with physical...
Alaga Home Security WiFi Camera 安全漏洞
Alaga Home Security WiFi Camera is a series of home webcams from Alaga USA. A security vulnerability exists in Alaga Home Security WiFi Camera that originates from a physical attacker being able to execute root commands via a specifically named SD card script file...
Phantom Menace: Exploring and Enhancing the Robustness of VLA Models against Physical Sensor Attacks
Vision-Language-Action VLA models revolutionize robotic systems by enabling end-to-end perception-to-action pipelines that integrate multiple sensory modalities, such as visual signals processed by cameras and auditory signals captured by microphones. This multi-modality integration allows VLA...
PT-2025-46887
A stack buffer overflow vulnerability exists in the D-Link DIR-878A1 router firmware FW101B04.bin in the rc binary's USB storage handling module. The vulnerability occurs when the "Serial Number" field from a USB device is read via sscanf into a 64-byte stack buffer, while fgets reads up to 127...
PT-2025-46892
🚨 CVE-2025-55810 A vulnerability was found in Alaga Home Security WiFi Camera 3K model S-CW2503C-H with hardware version V03 and firmware version 1.4.2, which allows physical attackers to execute commands as root via script file with a specific name on a SD card. 🎖@cveNotify...
Siemens SIMATIC S7-1500 Insufficient Verification of Data Authenticity (CVE-2021-4122)
It was found that a specially crafted LUKS header could trick cryptsetup into disabling encryption during the recovery of the device. An attacker with physical access to the medium, such as a flash disk, could use this flaw to force a user into permanently disabling the encryption layer of that...
IBM Db2 Information Disclosure Vulnerability (CNVD-2025-29173)
IBM Db2 is a relational database management system from International Business Machines IBM. The system's execution environments are mainly UNIX, Linux, IBMi, z/OS, and Windows server versions. An information disclosure vulnerability exists in IBM Db2 that stems from the clpplus command exposing...
EUVD-2025-103035
Malicious code in physicalmoosez3n npm...
Malicious code in physical_marmot_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a78f4a8f8c99c84887171abd3aa542db1cb6703b9d4b52a78174f9d5ea95d0e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-103036
Malicious code in physicalmarmotz3n npm...
EUVD-2025-95789
Malicious code in physicalslothz3n npm...
EUVD-2025-89484
Malicious code in physicalpinnipedz3n npm...
EUVD-2025-89485
Malicious code in physicalowlz3n npm...
EUVD-2025-89486
Malicious code in physicalgoldfishz3n npm...
Schneider Electric PowerChute Serial Shutdown
GENERAL SECURITY RECOMMENDATIONS We strongly recommend the following industry cybersecurity best practices. Locate control and safety system networks and remote devices behind firewalls and isolate them from the business network. Install physical controls so no unauthorized personnel can access...