PULSEUnderground Intel

EN VIVO20señales / 24h

FEED

ransomn0n reclama a Company #117 · USransomn0n reclama a Company #116 · USransomn0n reclama a Company #115 · USransomn0n reclama a Company #114 · USransomn0n reclama a Company #113 · USransombyod reclama a Michigan State University · US · Educationransomlockbit5 reclama a synergy.co.id · IDransomshiba reclama a Tema Hwt · DEransomqilin reclama a fzmb GmbH, Forschungszentrum für Medizintechnik und Biotechnologie · DE · Healthcareransomqilin reclama a Global Holding · Otherransomwhitearmor reclama a AmplifAI (GoDaddy instance) · US · Technologyransomdirewolf reclama a My Cloud Grocer · GB · Retail & E-Commerceransomhyflock reclama a hitech group · US · Technologyransomqilin reclama a Shibata Co., Ltd. · JP · Manufacturingransomn0n reclama a Company #117 · USransomn0n reclama a Company #116 · USransomn0n reclama a Company #115 · USransomn0n reclama a Company #114 · USransomn0n reclama a Company #113 · USransombyod reclama a Michigan State University · US · Educationransomlockbit5 reclama a synergy.co.id · IDransomshiba reclama a Tema Hwt · DEransomqilin reclama a fzmb GmbH, Forschungszentrum für Medizintechnik und Biotechnologie · DE · Healthcareransomqilin reclama a Global Holding · Otherransomwhitearmor reclama a AmplifAI (GoDaddy instance) · US · Technologyransomdirewolf reclama a My Cloud Grocer · GB · Retail & E-Commerceransomhyflock reclama a hitech group · US · Technologyransomqilin reclama a Shibata Co., Ltd. · JP · Manufacturing

← Todos los CVEs

CVE Watch5 jul 2026

CVE-2025-65396

A vulnerability in the boot process of Blurams Flare Camera version 24.1114.151.929 and earlier allows a physically proximate attacker to hi

CVSS

6.1

Medio

EPSS

0.2%

p12

KEV

—

Exploit Today

4

0-100

Publicado: 14 ene 2026 · Última mod.: 5 jul 2026 · CWE-119 · CWE-125 · CWE-1274

EPSS · 30d

0.2%EPSS · 30 días0.2%

2026-10-042026-10-31

Descripción técnica

A vulnerability in the boot process of Blurams Flare Camera version 24.1114.151.929 and earlier allows a physically proximate attacker to hijack the boot mechanism and gain a bootloader shell via the UART interface. This is achieved by inducing a read error from the SPI flash memory during the boot, by shorting a data pin of the IC to ground. An attacker can then dump the entire firmware, leading to the disclosure of sensitive information including cryptographic keys and user configurations.

Referencias oficiales

lessonsec.comhttps://lessonsec.com/cve/cve-2025-65396/

CVEs relacionados

CVECVSSEPSSKEVRExplotTítuloVis.

CVE-2026-1203377.3 ALT

———A vulnerability was determined in VStarcam O-KAM SuperIPCam 1.3.3.32. Affected by this issue is the function FUN_005a2d44 of the file SuperIPCam.exe of the component P2P Session Teardown. This manipulation causes use after free. The attack can be initiated remotely. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way.6h CVE-2026-1203367.3 ALT

———A vulnerability was found in VStarcam O-KAM Client 1.3.3.32. Affected by this vulnerability is the function FUN_10003EA0 in the library DevDll_925.dll. The manipulation results in stack-based buffer overflow. It is possible to launch the attack remotely. The exploit has been made public and could be used. The vendor was contacted early about this disclosure but did not respond in any way.6h CVE-2026-68590—

———In ip_stack, there is a possible out of bounds read due to improper input validation. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01387180; Issue ID: MSV-5152.7h CVE-2026-20598—

———In Modem, there is a possible out of bounds read due to an integer overflow. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01755742; Issue ID: MSV-8896.7h CVE-2026-20597—

———In Modem, there is a possible out of bounds read due to a missing bounds check. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01758223; Issue ID: MSV-8909.7h CVE-2026-20596—

———In Modem, there is a possible out of bounds read due to improper input validation. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01758225; Issue ID: MSV-8910.7h