Sign-up

VARIoT news about IoT security

Top 10 Vulnerability Assessment Tools: Features, Pros, Cons & Comparison - Cotocus

Trust: 4.5

Fetched: Jan. 13, 2026, 10:19 a.m., Published: Jan. 2, 2026, 9 a.m.
 Vulnerabilities: sql injection, cross-site scripting
Affected productsExternal IDs
vendor: essential model: phone
db: NVD ids: CVE-2024-1234

Mitsubishi Electric GT Designer3 | CISA

Trust: 3.75

Fetched: Jan. 13, 2026, 10:18 a.m., Published: Jan. 1, 2026, midnight
 Vulnerabilities: information disclosure
Affected productsExternal IDs
db: NVD ids: CVE-2025-11009

CVE-2025-31200: Critical Memory Corruption Vulnerability in Apple Devices - Ameeba Exploit Tracker

Trust: 4.5

Fetched: Jan. 13, 2026, 10:18 a.m., Published: Nov. 30, 0001, midnight
 Vulnerabilities: memory corruption, code execution
Affected productsExternal IDs
vendor: apple model: tvos
vendor: apple model: macos
db: NVD ids: CVE-2025-31200

Critical 0-Day RCE Vulnerability in Networking Devices Exposes 70,000+ Hosts

Trust: 4.75

Fetched: Jan. 13, 2026, 10:17 a.m., Published: Dec. 30, 2025, 9:48 a.m.
 Vulnerabilities: command execution, code execution
Affected productsExternal IDs
db: NVD ids: CVE-2025-54322

⚡ Weekly Recap: IoT Exploits, Wallet Breaches, Rogue Extensions, AI Abuse & More

Trust: 4.5

Fetched: Jan. 13, 2026, 10:17 a.m., Published: Jan. 5, 2026, 12:53 p.m.
 Vulnerabilities: code execution
Affected productsExternal IDs
vendor: winscp model: winscp
vendor: putty model: putty
vendor: google model: chrome
vendor: google model: google chrome
vendor: eaton model: drive
db: NVD ids: CVE-2025-59888, CVE-2025-55182, CVE-2025-14346, CVE-2025-53597, CVE-2025-52691, CVE-2025-59887, CVE-2025-20700, CVE-2025-20702, CVE-2025-13915, CVE-2025-52871, CVE-2025-20701, CVE-2025-47411, CVE-2025-48769

Critical 0-Day RCE Vulnerability in Networking Devices Exposes 70,000+

Trust: 5.5

Fetched: Jan. 13, 2026, 10:13 a.m., Published: Dec. 30, 2025, 4:38 p.m.
 Vulnerabilities: denial of service, service disruption, code execution
Affected productsExternal IDs
vendor: snort.org model: snort
vendor: snort model: snort

CVE-2026-0854 - Merit LILIN｜NVR - OS Command Injection - SecAlerts

Trust: 3.0

Fetched: Jan. 13, 2026, 10:13 a.m., Published: -
 Vulnerabilities: command injection, os command injection
Affected productsExternal IDs
db: NVD ids: CVE-2026-0854

Critical AdonisJS Bodyparser Flaw (CVSS 9.2) Enables Arbitrary File Write on Servers

Trust: 5.5

Fetched: Jan. 13, 2026, 10:12 a.m., Published: Jan. 6, 2026, 3:30 a.m.
 Vulnerabilities: path traversal, code execution
Affected productsExternal IDs
vendor: node.js model: node.js
db: NVD ids: CVE-2026-21440, CVE-2025-68428

Update Canonical Ubuntu Desktop: USN-7944-1: Net-SNMP vulnerability

Trust: 3.75

Fetched: Jan. 13, 2026, 10:12 a.m., Published: Jan. 13, 7944, midnight
 Vulnerabilities: denial of service
Affected productsExternal IDs
vendor: net-snmp model: net-snmp
vendor: canonical model: ubuntu

Update Canonical Ubuntu Server: USN-7944-1: Net-SNMP vulnerability

Trust: 3.75

Fetched: Jan. 13, 2026, 10:11 a.m., Published: Jan. 13, 7944, midnight
 Vulnerabilities: denial of service
Affected productsExternal IDs
vendor: net-snmp model: net-snmp
vendor: canonical model: ubuntu

Apple MacBook Wi-Fi Vulnerability Exploited | Enigma Security posted on the topic | LinkedIn

Trust: 3.75

Fetched: Jan. 13, 2026, 10:11 a.m., Published: -
 Vulnerabilities: -
Affected productsExternal IDs
vendor: apple model: safari
vendor: apple model: macbook
vendor: google model: chrome
db: NVD ids: CVE-2023-41064, CVE-2023-4863

Update Canonical Ubuntu Server: USN-7945-1: Libxslt vulnerability

Trust: 4.25

Fetched: Jan. 13, 2026, 10:11 a.m., Published: Jan. 13, 7945, midnight
 Vulnerabilities: denial of service
Affected productsExternal IDs
vendor: canonical model: ubuntu

CVE-2025-14748 - Ningyuanda TC155 IP Camera Unauthenticated Hard Reset Vulnerability via ONVIF Device Management Service | Volerion Advisory

Trust: 3.25

Fetched: Jan. 13, 2026, 10:10 a.m., Published: Jan. 1, 2026, midnight
 Vulnerabilities: -
Affected productsExternal IDs
db: NVD ids: CVE-2025-14748

CVE-2025-3606: Sensitive Information Exposure Vulnerability in Vestel AC Charger - Ameeba Exploit Tracker

Trust: 5.0

Fetched: Jan. 13, 2026, 10:09 a.m., Published: Nov. 30, 0001, midnight
 Vulnerabilities: information exposure
Affected productsExternal IDs
db: NVD ids: CVE-2025-3606

CVE-2026-0855 - Merit LILIN｜IP Camera - OS Command Injection - SecAlerts

Trust: 5.0

Fetched: Jan. 13, 2026, 10:08 a.m., Published: -
 Vulnerabilities: command injection, os command injection
Affected productsExternal IDs
db: NVD ids: CVE-2026-0855

CarPlay vulnerability via AirPlay: BMW does not want to patch "Pwn My Ride" | heise online

Trust: 4.0

Fetched: Jan. 13, 2026, 10:08 a.m., Published: Jan. 9, 2026, 10:02 a.m.
 Vulnerabilities: -
Affected productsExternal IDs
vendor: apple model: software update
db: NVD ids: CVE-2025-24132

Update Canonical Ubuntu Server: USN-7943-1: libcaca vulnerability

Trust: 3.25

Fetched: Jan. 13, 2026, 10:08 a.m., Published: Jan. 13, 7943, midnight
 Vulnerabilities: -
Affected productsExternal IDs
vendor: canonical model: ubuntu

CVE-2025-52516 - Samsung Exynos Denial of Service (DoS) Vulnerability

Trust: 5.75

Fetched: Jan. 13, 2026, 10:07 a.m., Published: Jan. 5, 2026, 7:15 p.m.
 Vulnerabilities: denial of service
Affected productsExternal IDs
vendor: samsung model: exynos
vendor: samsung model: mobile
vendor: samsung model: samsung mobile
vendor: samsung model: samsung
db: NVD ids: CVE-2025-52516

Ongoing Attacks Exploiting Critical RCE Vulnerability in Legacy D-Link DSL Routers

Trust: 4.75

Fetched: Jan. 13, 2026, 10:07 a.m., Published: Jan. 7, 2026, 4:31 a.m.
 Vulnerabilities: command injection, code execution
Affected productsExternal IDs
vendor: d-link model: router
vendor: d-link model: dsl-2740r
vendor: d-link model: dsl-2640b
db: NVD ids: CVE-2026-0625

Security Advisory on Vulnerabilities in TP-Link Archer BE400 V1 (CVE-2025-14631)

Trust: 5.25

Fetched: Jan. 13, 2026, 10:06 a.m., Published: Jan. 7, 2026, midnight
 Vulnerabilities: pointer dereference vulnerability
Affected productsExternal IDs
db: NVD ids: CVE-2025-14631