331 matches found
Quiksand-CVE-2023-24012
DDS Security Test ROS 2 DDS 安全研究测试环境，基于 ROS 2 Foxy。 项目简介 本项目演示了 ROS 2 SROS2 安全框架中的一个权限绕过漏洞。通过修改签名的权限文件，攻击者可以让节点订阅本不该订阅的话题。 环境要求 Docker 快速开始 构建镜像 docker build -t dds-test . 运行 PoC docker run -it dds-test ./poc.sh PoC 脚本说明 poc.sh 脚本执行以下步骤： 1. 创建密钥库 - 使用 ros2 security 工具生成 talker 和 listener 的密钥和证书 2...
aztarna
このリポジトリはアーカイブされており、今後はメンテナンスされません。ロボットのフットプリンティングとフィンガープリンティングに関する今後の進展については、alurity を参照してください。 aztarna このリポジトリには、Alias Robotics の aztarna ロボット向けフットプリンティングツール が含まれています。 Alias...
aztarna
This repository has been archived and is not maintained any further. Refer to alurity for future progress on robot footprinting and fingerprinting. aztarna This repository contains Alias Robotics' aztarna, a footprinting tool for robots. Alias Robotics supports original robot manufacturers...
CVE-2026-41551
Reproducción de CVE-2026-41551 Vulnerabilidad: recorrido de ruta relativa en los servicios fileserver / fileserver2 de Siemens ROS CVSS v3.1: 9.1 AV:N / AC:L / PR:N / UI:N / S:U / C:H / I:H / A:N Versiones afectadas: todas las versiones de ros-sharp name.substr10; // elimina "package://"...
ROS-20260930-73-0102
The vulnerability of the hwtracing/intelth/core.c component in the Linux operating system is related to improper memory release before deleting the last reference. Exploiting this vulnerability can allow an attacker to cause a service failure...
CVE-2012-1803
CVE-2012-1803 Vulnerabilidad crítica en dispositivos Siemens RuggedCom ROS que permite a los atacantes derivar una contraseña oculta de cuenta de fábrica a partir de la dirección MAC del dispositivo y obtener acceso administrativo no autorizado a través de interfaces TELNET, rsh o serie. Afecta a...
ROS-20260923-73-0044
The vulnerability of the transportipc component in Linux operating systems is related to pointer arithmetic errors. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...
ROS-20260921-73-0088
The vulnerability is related to insufficient verification of data authenticity. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
ROS-20260921-73-0087
The vulnerability is related to the use of an incomplete black list. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
ROS-20260921-73-0079
The vulnerability is related to the lack of integrity checks. Exploiting this vulnerability can allow an attacker to cause a service failure...
ROS-20260921-73-0083
The vulnerability is related to insecure resource initialization. Exploiting this vulnerability can allow a remote attacker to gain increased privileges...
ROS-20260921-73-0078
The vulnerability is related to the failure to release resources after their useful life has expired. Exploiting this vulnerability can allow a perpetrator to cause service failures...
ROS-20260921-73-0089
The vulnerability is related to insufficient verification of data authenticity. Exploiting this vulnerability can allow an attacker to enhance their privileges and execute arbitrary code...
ROS-20260921-73-0091
The vulnerability is related to insufficient control over the amount of network messages transmitted. Exploiting this vulnerability can allow a remote attacker to trigger a service failure rdos...
OESA-2026-3965 poco security update
This is ROS melodic roscomm's 3rdparty poco. Security Fixes: UTF32Encoding.cpp in POCO has a Poco::UTF32Encoding integer overflow and resultant stack buffer overflow because Poco::UTF32Encoding::convert and Poco::UTF32::queryConvert may return a negative integer if a UTF-32 byte sequence evaluate...
OESA-2026-3963 poco security update
This is ROS melodic roscomm's 3rdparty poco. Security Fixes: UTF32Encoding.cpp in POCO has a Poco::UTF32Encoding integer overflow and resultant stack buffer overflow because Poco::UTF32Encoding::convert and Poco::UTF32::queryConvert may return a negative integer if a UTF-32 byte sequence evaluate...
ROS-20260908-73-0002
The vulnerability in Java-11-openjdk is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to enhance their privileges...
The vulnerability of open libraries and tools written in C# ROS# relates to errors in the mechanism for handling relative pathnames to directories. This allows attackers to gain access to read, modify, or delete data.
The vulnerability of open libraries and tools written in C for ROS is related to errors in the mechanism for handling relative pathnames to directories. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain access to read, modify, or delete data...
EUVD-2026-58621
Authorization Bypass Through User-Controlled Key in the payroll module in Roskus Prospero Flow CRM before 5.15.10 allows authenticated users holding the read payroll permission to view the salary and banking details of employees of any other company in the instance, and users holding the create...
