9349 matches found
CVE-2025-30072
Tiiwee X1 Alarm System TWX1HAKV2 allows Authentication Bypass by Capture-replay, leading to physical Access to the protected facilities without triggering an alarm...
CVE-2025-30072
The CVE-2025-30072 entry concerns the Tiiwee X1 Alarm System TWX1HAKV2. A capture-replay authentication bypass allows attackers to gain physical access to protected facilities without triggering an alarm. Affected component/issue: authentication mechanism enabling bypass via replayed credentials....
Tiiwee X1 Alarm System 安全漏洞
Tiiwee X1 Alarm System is a home alarm system with motion detectors from Tiiwee. A security vulnerability exists in the Tiiwee X1 Alarm System that stems from an authentication bypass that could result in physical access to a protected facility without triggering an alarm...
OESA-2025-1528 microcode_ctl security update
This is a tool to transform and deploy microcode update for x86 CPUs. Security Fixes: Exposure of Sensitive Information in Shared Microarchitectural Structures during Transient Execution for some IntelR Processors may allow an authenticated user to potentially enable information disclosure via...
CVE-2025-25370
An issue in realme GT 2 RMX3311 running Android 14 with realme UI 5.0 allows a physically proximate attacker to obtain sensitive information via the show app only setting function...
Enhanced Multiuser CSI-Based Physical Layer Authentication Based on Information Reconciliation
This paper presents a physical layer authentication PLA technique using information reconciliation in multiuser communication systems. A cost-effective solution for low-end Internet of Things networks can be provided by PLA. In this work, we develop an information reconciliation scheme using Pola...
CVE-2025-20047
Improper locking in the IntelR Integrated Connectivity I/O interface CNVi for some IntelR Core™ Ultra Processors may allow an unauthenticated user to potentially enable escalation of privilege via physical access...
CVE-2025-31228
The issue was addressed with improved authentication. This issue is fixed in iOS 18.5 and iPadOS 18.5, iPadOS 17.7.7. An attacker with physical access to a device may be able to access notes from the lock screen...
CVE-2025-31227
A logic issue was addressed with improved checks. This issue is fixed in iOS 18.5 and iPadOS 18.5. An attacker with physical access to a device may be able to access a deleted call recording...
Panasonic IR Control Hub vulnerable to Unauthorised firmware loading
Overview IR Control Hub provided by Panasonic contains a vulnerability that may lead to loading of unauthorized firmware. IR Control Hub provided by Panasonic verifies the hash value of the loading firmware when booting, but it keeps booting with the firmware even when it detects that the hash...
Siemens VersiCharge AC Series EV Charger M0 Firmware Arbitrary Code Execution Vulnerability
The VersiCharge AC Series Electric Vehicle Charger is an electric vehicle charging device from Siemens for a variety of application scenarios, including workplaces, retail, parking lots, multi-unit housing, public charging and home charging. An arbitrary code execution vulnerability exists in the...
Realme GT 2 信息泄露漏洞
Realme GT 2 is a smartphone from the Chinese company Realme Realme. The Realme GT 2 RMX3311 suffers from a security vulnerability that originates from physical proximity Attackers may be able to gain access to sensitive information through the display-only app settings feature...
CVE-2025-25370
An issue in realme GT 2 RMX3311 running Android 14 with realme UI 5.0 allows a physically proximate attacker to obtain sensitive information via the show app only setting function...
CVE-2025-25370
An issue in realme GT 2 RMX3311 running Android 14 with realme UI 5.0 allows a physically proximate attacker to obtain sensitive information via the show app only setting function...
CVE-2025-25370
CVE-2025-25370 affects Realme GT 2 (RMX3311) on Android 14 with realme UI 5.0. A nearby attacker can access sensitive information via the show app only setting function. The issue is described as a physical-proximity vulnerability with high confidentiality impact and low attack complexity, requir...
CANTXSec: a Deterministic Intrusion Detection and Prevention System for CAN Bus Monitoring ECU Activations
Despite being a legacy protocol with various known security issues, Controller Area Network CAN still represents the de-facto standard for communications within vehicles, ships, and industrial control systems. Many research works have designed Intrusion Detection Systems IDSs to identify attacks ...
SUSE CVE-2025-20012
Incorrect behavior order for some IntelR Coretm Ultra Processors may allow an unauthenticated user to potentially enable information disclosure via physical access...
CVE-2025-20047
Improper locking in the IntelR Integrated Connectivity I/O interface CNVi for some IntelR Core™ Ultra Processors may allow an unauthenticated user to potentially enable escalation of privilege via physical access...