CVE-2024-23978

Heap-based buffer overflow vulnerability exists in HOME SPOT CUBE2 V102 and earlier. By processing invalid values, arbitrary code may be executed. Note that the affected products are no longer supported...

Blind Spot Navigation: Evolutionary Discovery of Sensitive Semantic Concepts for LVLMs

Whitepaper called Blind Spot Navigation: Evolutionary Discovery Of Sensitive Semantic Concepts For LVLMs...

Linux io_uring PoC Rootkit Bypasses System Call-Based Threat Detection Tools

Cybersecurity researchers have demonstrated a proof-of-concept PoC rootkit dubbed Curing that leverages a Linux asynchronous I/O mechanism called iouring to bypass traditional system call monitoring. This causes a "major blind spot in Linux runtime security tools," ARMO said. "This mechanism allo...

Malicious code in spot-the-station-app (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis eb32a10195bed4025536ad80a8fc81f68b24c95dc8f8db05358097fcb07bc613 The OpenSSF Package Analysis project identified 'spot-the-station-app' @ 2.1.2 npm as malicious. It is considered malicious because: - The packa...

MAL-2025-2349 Malicious code in spot-the-station-app (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis eb32a10195bed4025536ad80a8fc81f68b24c95dc8f8db05358097fcb07bc613 The OpenSSF Package Analysis project identified 'spot-the-station-app' @ 2.1.2 npm as malicious. It is considered malicious because: - The packa...

Malicious code in spot-admin (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 5266209798ebafe67e3827752a8025acd7d54406e99400930929aee0c6b8e862 The OpenSSF Package Analysis project identified 'spot-admin' @ 0.0.2 npm as malicious. It is considered malicious because: - The package execute...

MAL-2024-11776 Malicious code in spot-admin (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 5266209798ebafe67e3827752a8025acd7d54406e99400930929aee0c6b8e862 The OpenSSF Package Analysis project identified 'spot-admin' @ 0.0.2 npm as malicious. It is considered malicious because: - The package execute...

Think You're Secure? 49% of Enterprises Underestimate SaaS Risks

It may come as a surprise to learn that 34% of security practitioners are in the dark about how many SaaS applications are deployed in their organizations. And it's no wonder—the recent AppOmni 2024 State of SaaS Security Report reveals that only 15% of organizations centralize SaaS security with...

CVE-2024-6348

Predictable seed generation in the security access mechanism of UDS in the Blind Spot Protection Sensor ECU in Nissan Altima 2022 allows attackers to predict the requested seeds and bypass security controls via repeated ECU resets and seed requests...

CVE-2024-6348 Predictable seed generation after ECU reset

Predictable seed generation in the security access mechanism of UDS in the Blind Spot Protection Sensor ECU in Nissan Altima 2022 allows attackers to predict the requested seeds and bypass security controls via repeated ECU resets and seed requests...

CVE-2024-6348 Predictable seed generation after ECU reset

Predictable seed generation in the security access mechanism of UDS in the Blind Spot Protection Sensor ECU in Nissan Altima 2022 allows attackers to predict the requested seeds and bypass security controls via repeated ECU resets and seed requests...

CVE-2024-6348

CVE-2024-6348 affects the Nissan Altima 2022 Blind Spot Protection Sensor ECU, specifically the UDS security access seed generation. The root cause is predictable seed generation, enabling an attacker to forecast the requested seeds and bypass security controls by repeatedly resetting the ECU and...

Nissan Altima Blind Spot Detection Sensor ECU 安全漏洞

The Nissan Altima Blind Spot Detection Sensor ECU is a blind spot detection sensor from Nissan Japan. A security vulnerability exists in the Nissan Altima Blind Spot Detection Sensor ECU that stems from predictable seed generation in the security access mechanism of the UDS, allowing an attacker ...

PT-2024-37557 · Nissan · Nissan Altima Blind Spot Protection Sensor Ecu

Name of the Vulnerable Software and Affected Versions: Nissan Altima 2022 Blind Spot Protection Sensor ECU Description: The issue concerns predictable seed generation in the security access mechanism of UDS in the Blind Spot Protection Sensor ECU. This predictability allows attackers to forecast...

CVE-2024-6347 Unauthorized access to ECU functionality

Unprotected privileged mode access through UDS session in the Blind Spot Detection Sensor ECU firmware in Nissan Altima 2022 allows attackers to trigger denial-of-service DoS by unauthorized access to the ECU's programming session. No preconditions implemented for ECU management functionality...

CVE-2024-6347

The CVE-2024-6347 issue affects Nissan Altima (2022) with the Blind Spot Detection Sensor ECU firmware. It describes an unprotected UDS session enabling privileged-mode access, allowing unauthorized DoS-inducing commands and disruption of ECU operations without authentication. Several sources rei...

PT-2024-37556 · Nissan · Nissan Altima

Name of the Vulnerable Software and Affected Versions: Nissan Altima 2022 Description: The issue concerns unprotected privileged mode access through UDS session in the Blind Spot Detection Sensor ECU firmware, allowing attackers to trigger denial-of-service DoS by unauthorized access to the ECU's...

Nissan Altima Blind Spot Detection Sensor ECU 安全漏洞

The Nissan Altima Blind Spot Detection Sensor ECU is a blind spot detection sensor from Nissan Japan. A security vulnerability exists in Nissan Altima Blind Spot Detection Sensor ECU version 2022, which arises from an unprotected UDS session in the blind spot detection sensor ECU firmware, allowi...

HackerOne: [ Spot Check ] Team members can edit a user's write-up

Team members could edit a user's spot check write-up. The write-up could be modified through a GraphQL request, even though there was no option to edit the write-up in the user interface. This was considered unintended functionality, as HackerOne had previously fixed vulnerabilities where team...

CVE-2024-1275

Use of Default Cryptographic Key vulnerability in Baxter Welch Allyn Connex Spot Monitor may allow Configuration/Environment Manipulation.This issue affects Welch Allyn Connex Spot Monitor in all versions prior to 1.52...