NVD disclosure day
CVE-2025-29329
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
A critical buffer overflow in the Internet Printing Protocol service of Sagemcom devices allows remote attackers to execute arbitrary code. This vulnerability is reachable via crafted HTTP requests and could impact device functionality. Organizations should confirm if these specific devices are in use within their envi
CVE-2025-63314
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
A vulnerability in DDSN Interactive Acora CMS password resets allows attackers to take over user accounts via a static token replay attack. This could impact user accounts and associated data if the password reset function is reachable.
CVE-2025-65552
Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.
The D3D Wi-Fi Home Security System ZX-G12 is vulnerable to RF replay attacks on its sensor communication channel due to a lack of security measures. An attacker within radio range could replay captured signals, potentially triggering false alarms. Organizations should verify if this system is deployed and assess its ex