News · via Eclypsium
Ars Technica: Code-execution flaw in UEFI firmware affects most servers on planet Earth
Critical flaw in EDK2 allows attackers to execute code early in the boot process.
Firmware
Coverage tagged "Firmware".
News · via Ars Technica
Code-execution flaw in UEFI firmware threatens most servers on planet Earth
Defenders across the world face the burden of responding to yet another botched code-execution vulnerability, this time in boot-time firmware used by most of the world’s server vendors and data…
News · via Canadian Centre for Cyber Security
[Control systems] Hitachi security advisory (AV26-1091)
Serial Number: AV26-1091 Date: October 27, 2026 As of October 27, 2026, Hitachi is affected by vulnerabilities in the following products: HiRDB Server Version 10 Multiple versions HiRDB Server…
News · via Canadian Centre for Cyber Security
[Control Systems] Moxa security advisory (AV26-1089)
Serial number: AV26-1089 Date: October 27, 2026 As of October 27, 2026, Moxa is affected by vulnerabilities in the following products: Moxa Remote Connect Suite (MRC Client) Prior to or equal to…
News · via Security Affairs
Attackers Take Control of Dahua Cameras and Video Recorders Via Easy4IP
Ukraine warns that attackers can remotely access Dahua cameras and recorders via Easy4IP, viewing video and changing settings. Ukraine’s cyber incident response team CERT-UA has warned about…
News · via ransomware.live
🏴☠️ N0n has just published a new victim : Ingelectus Innovative Electrical Solutions S.L.
smart grid engineering firm · Spain | Live electrical telemetry sampled from the plant control network, with voltage, current and energy readings recorded on 23 October 2026; Complete inventory of 49…
News · via The Hacker News
BlackX UEFI Bootkit Bypasses Secure Boot on Patched Windows Systems Missing Revocations
Diplomatic organizations in Central Asia have been targeted by a sophisticated new Unified Extensible Firmware Interface (UEFI) bootkit called BlackX. The activity, which singled out diplomatic…
News · via Dark Reading
Les supermarchés de l'UE paient d'un firmware de réfrigérateur non mis à jour
Des centaines de magasins ont subi des pertes se chiffrant en millions d'euros parce qu'ils avaient fait appel à des tiers pour gérer le micrologiciel OT obsolète qui pilotait leurs systèmes de…
News · via Eclypsium
Memory Safety, AI security, Auth Challenges - BTS #84
Paul Asadoorian, Chase Snyder, and Vlad Babkin discuss newly disclosed vulnerabilities in NGINX and PAN-OS, the persistent exploitation of network appliances, and whether restricting access to AI…
News · via CISA
Siemens RUGGEDCOM CROSSBOW
View CSAF Summary RUGGEDCOM CROSSBOW contains multiple vulnerabilities that could allow an attacker to execute arbitrary SQL commands on the underlying database, retrieve sensitive administrative…
News · via CISA
Siemens SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP
View CSAF Summary Multiple vulnerabilities have been identified in the additional GNU/Linux subsystem of the firmware version V3.1.7 for the SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP (incl. SIPLUS…
News · via CISA
Kiloview E3 NDI Encoder
View CSAF Summary Successful exploitation of this these vulnerabilities could allow an attacker to fully compromise the device. The following versions of Kiloview E3 NDI Encoder are affected: E3…
News · via Exploit-DB
[remote] Edimax BR-6478AC firmware v2.20 - authenticated command injection
Edimax BR-6478AC firmware v2.20 - authenticated command injection
News · via Exploit-DB
[remote] ProSoft RLX-IFH24E v2.2.44 - Unsigned Firmware Upgrade Package Executed as Root
ProSoft RLX-IFH24E v2.2.44 - Unsigned Firmware Upgrade Package Executed as Root
News · via Full Disclosure
[0day-rubbish] TRENDnet TV-IP302PI firmware 1.02.38 authenticated NTP server-address OS command injection to root command execution via a shell-form system() call (7.2 High, PR:H)
Posted by disclosure via Fulldisclosure on Oct 20 0day Rubbish Research Team is publicly disclosing a vulnerability in TRENDnet TV-IP302PI firmware 1.02.38, the closed-source IP surveillance camera…
News · via Full Disclosure
[0day-rubbish] ProSoft Technology RLX-IFH24E v2.2.44 unsigned firmware upgrade package to root command execution and full account-database overwrite (7.2)
Posted by disclosure via Fulldisclosure on Oct 20 0day Rubbish Research Team is publicly disclosing a vulnerability in the ProSoft RLX-IFH24E, version v2.2.44, the industrial wireless radio from…
News · via Full Disclosure
[0day-rubbish] Edimax BR-6478AC firmware v2.20 authenticated command injection in the setWAN WAN-configuration handler, root command execution (7.2)
Posted by disclosure via Fulldisclosure on Oct 20 0day Rubbish Research Team is publicly disclosing a vulnerability in the Edimax BR-6478AC, firmware image BR6478AC_v2.20.bin, the dual-band AC1750…
News · via Full Disclosure
[0day-rubbish] Edimax BR-6478AC firmware v2.20 authenticated command injection in the formWlanMP manufacturing-test handler, root command execution (7.2)
Posted by disclosure via Fulldisclosure on Oct 20 0day Rubbish Research Team is publicly disclosing a vulnerability in the Edimax BR-6478AC, firmware image BR6478AC_v2.20.bin, the dual-band AC1750…
News · via CISA
Hitachi Energy RTU500 Product
View CSAF Summary Hitachi Energy is aware of vulnerabilities that affect RTU500 product versions listed in this document. These vulnerabilities if exploited can have impact on confidentiality…
News · via CISA
Moxa AIG-302 ThingsPro Edge
View CSAF Summary Successful exploitation of these vulnerabilities could allow an attacker to obtain and disclose sensitive information. The following versions of Moxa AIG-302 ThingsPro Edge are…