348 matches found
Cybersecurity AI operating system command injection vulnerabilities
Cybersecurity AI is an open-source network security AI framework developed by Alias Robotics. Versions of Cybersecurity AI prior to 0.5.10 contain a vulnerability related to operating system command injection. This vulnerability stems from parameter injections in multiple function tools, which ma...
Macro Expert code issue vulnerabilities
Macro Expert is a robotics process automation software developed by Macro Expert Corporation. Version 4.7 of Macro Expert contains a code vulnerability; this vulnerability stems from service paths that are not enclosed in quotes, which may allow for the execution of arbitrary code...
CVE-2024-41646
Insecure Permissions vulnerability in Open Robotics Robotic Operating System 2 ROS2 navigation2 v.humble allows an attacker to execute arbitrary code via a crafted script to the nav2dwbcontroller...
CVE-2024-41647
Insecure Permissions vulnerability in Open Robotics Robotic Operating System 2 ROS2 navigation2 v.humble allows an attacker to execute arbitrary code via a crafted script to the nav2mppicontroller...
CVE-2024-41645
Insecure Permissions vulnerability in Open Robotics Robotic Operating System 2 ROS2 navigation2 v.humble allows an attacker to execute arbitrary code via a crafted script to the nav2amcl...
Trust in LLM-Controlled Robotics: A Survey of Security Threats, Defenses and Challenges
The integration of Large Language Models LLMs into robotics has revolutionized their ability to interpret complex human commands and execute sophisticated tasks. However, such paradigm shift introduces critical security vulnerabilities stemming from the ''embodiment gap'', a discord between the...
NVIDIA Isaac Lab 代码问题漏洞
NVIDIA Isaac Lab is a robotics learning framework from NVIDIA. NVIDIA Isaac Lab suffers from a code issue vulnerability that stems from a deserialization vulnerability that could lead to code execution...
HaloBot 安全漏洞
HaloBot is a robotics framework by the individual developers at SNRainiar. A security vulnerability exists in HaloBot, which stems from the incorrect manipulation of the parameter action in the file plugins/htmlrenderer/index.js, which could lead to dynamically managed code resources...
Cybersecurity AI 命令注入漏洞
Cybersecurity AI is an open source cybersecurity AI security framework from Alias Robotics. A command injection vulnerability exists in Cybersecurity AI version 0.5.9 and earlier, which stems from a command injection in the runsshcommandwithcredentials function that could lead to the execution of...
EUVD-2025-176315
Malicious code in soap-weywot-robotics-on npm...
EUVD-2025-176625
Malicious code in robotics-abiogenesis-command-react-bootstrap npm...
EUVD-2025-176621
Malicious code in robotics-polaris-antares-cluster npm...
EUVD-2025-178367
Malicious code in interstellarmedium-materialize-robotics-jovian npm...
EUVD-2025-175907
Malicious code in transform-robotics-filament-orbit npm...
EUVD-2025-179285
Malicious code in docusaurus-robotics-supercluster-sublimation npm...
EUVD-2025-178299
Malicious code in janus-robotics-optimize-css-assets-webpack-plugin-jovian npm...
EUVD-2025-176841
Malicious code in quasar-robotics-soap-winston npm...
EUVD-2025-176624
Malicious code in robotics-auriga-eclipse-parcel npm...
MAL-2025-186597 Malicious code in docusaurus-robotics-supercluster-sublimation (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a39e2608b2f82ff530582218d014aa91796cfd3a914e2f496c0d2134cf7c5238 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...