PT-2025-40018

Name of the Vulnerable Software and Affected Versions EKEN video doorbell T6 BT60PLUS MAIN V1.0 GC1084 20230531 Description The EKEN video doorbell T6 BT60PLUS MAIN V1.0 GC1084 20230531 firmware periodically transmits debug logs to EKEN cloud servers. These logs contain sensitive information,...

CVE-2025-56675

The EKEN video doorbell T6 BT60PLUSMAINV1.0GC108420230531 periodically sends debug logs to the EKEN cloud servers with sensitive information such as the Wi-Fi SSID and password...

EKEN video doorbell T6 安全漏洞

EKEN video doorbell T6 is a visual doorbell device from EKEN. A security vulnerability exists in the EKEN video doorbell T6 BT60PLUSMAINV1.0GC108420230531 version, which originates from periodically sending debug logs containing sensitive information such as Wi-Fi SSIDs and passwords to a server ...

CVE-2025-56675: Incorrect Resource Transfer Between Spheres

The EKEN video doorbell T6 BT60PLUSMAINV1.0GC108420230531 periodically sends debug logs to the EKEN cloud servers with sensitive information such as the Wi-Fi SSID and password...

CVE-2025-35031

Medical Informatics Engineering Enterprise Health includes the user's current session token in debug output. An attacker could convince a user to send this output to the attacker, thus allowing the attacker to impersonate that user. This issue is fixed as of 2025-04-08...

CVE-2025-35031

Medical Informatics Engineering Enterprise Health includes the user's current session token in debug output. An attacker could convince a user to send this output to the attacker, thus allowing the attacker to impersonate that user. This issue is fixed as of 2025-04-08...

CVE-2025-35031 Medical Informatics Engineering Enterprise Health includes session token in debug output

Medical Informatics Engineering Enterprise Health includes the user's current session token in debug output. An attacker could convince a user to send this output to the attacker, thus allowing the attacker to impersonate that user. This issue is fixed as of 2025-04-08...

CVE-2025-35031

Medical Informatics Engineering Enterprise Health is affected by CVE-2025-35031, where the software includes the user’s current session token in debug output. This enables an attacker to impersonate the user if the token is exfiltrated (e.g., via the user sending debug output). The issue is fixed...

CVE-2025-35031 Medical Informatics Engineering Enterprise Health includes session token in debug output

Medical Informatics Engineering Enterprise Health includes the user's current session token in debug output. An attacker could convince a user to send this output to the attacker, thus allowing the attacker to impersonate that user. This issue is fixed as of 2025-04-08...

CVE-2025-57428

Default credentials in Each Italy Wireless Mini Router WIRELESS-N 300M v28K.MiniRouter.20190211 allows attackers to gain access to the debug shell exposed via Telnet on Port 23 and execute hardware-level flash and register manipulation commands...

CVE-2025-57428

The Each Italy Wireless Mini Router WIRELESS-N 300M (firmware v28K.MiniRouter.20190211 ) is vulnerable to unauthorized access due to default credentials (admin/admin) on the Telnet debug interface exposed on Port 23 . Exploitation allows an attacker to gain access to a debug shell and execute hig...

PT-2025-39828

Name of the Vulnerable Software and Affected Versions Italy Wireless Mini Router WIRELESS-N 300M version v28K.MiniRouter.20190211 Description Default credentials in the Italy Wireless Mini Router WIRELESS-N 300M version v28K.MiniRouter.20190211 allow attackers to access the debug shell exposed vi...

📄 Windows Silent Process Exit Persistence

Windows allows you to set up a debug process when a process exits. This Metasploit module uploads a payload and declares that it is the debug process to launch when a specified process exits. This module requires Metasploit: https://metasploit.com/download Current source:...

PT-2025-39872

Name of the Vulnerable Software and Affected Versions Medical Informatics Engineering Enterprise Health affected versions not specified Description The software includes a user's current session token in debug output. An attacker could potentially convince a user to send this output to the...

Italy Wireless WIRELESS-N 300M 安全漏洞

Italy Wireless WIRELESS-N 300M is a MiniRouter from Italy Wireless, Italy. A security vulnerability exists in the Italy Wireless WIRELESS-N 300M v28K.MiniRouter.20190211 version, which originates from the default credentials, and could lead to an attacker accessing the debug shell and executing...

Medical Informatics Engineering Enterprise Health 安全漏洞

Medical Informatics Engineering Enterprise Health is a healthcare solution from US-based Medical Informatics Engineering. A security vulnerability exists in Medical Informatics Engineering Enterprise Health that stems from the inclusion of a user's current session token in the debug output, which...

CVE-2025-57428: Improper Access Control

Default credentials in Each Italy Wireless Mini Router WIRELESS-N 300M v28K.MiniRouter.20190211 allows attackers to gain access to the debug shell exposed via Telnet on Port 23 and execute hardware-level flash and register manipulation commands...

CVE-2025-35031: Debug Messages Revealing Unnecessary Information

Medical Informatics Engineering Enterprise Health includes the user's current session token in debug output. An attacker could convince a user to send this output to the attacker, thus allowing the attacker to impersonate that user. This issue is fixed as of 2025-04-08...

Exploit for CVE-2025-57428

CVE-2025-57428 - Telnet debug interface enabled by default all...

CVE-2025-9984

The Featured Image from URL FIFU plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the fifuapidebugposts function in all versions up to, and including, 5.2.7. This makes it possible for unauthenticated attackers to read private/password protect...