CVE-2025-53644

creationtimestamp| type| source ---|---|--- 2025-08-08 19:04:56+00:00| seen| https://bsky.app/profile/ferramentaslinux.bsky.social/post/3lvvwzw7ep22t...

CVE-2025-43980

An issue was discovered on FIRSTNUM JC21A-04 devices through 2.01ME/FN. They enable the SSH service by default with the credentials of root/admin. The GUI doesn't offer a way to disable the account...

CVE-2025-43979

An issue was discovered on FIRSTNUM JC21A-04 devices through 2.01ME/FN that allows authenticated attackers to execute arbitrary OS system commands with root privileges via crafted payloads to the xmlaction.cgi?method= endpoint...

FIRSTNUM JC21A-04 安全漏洞

The FIRSTNUM JC21A-04 is a router from the Chinese company FIRSTNUM. A security vulnerability exists in the FIRSTNUM JC21A-04 version 2.01ME/FN and prior versions, which stems from the SSH service being enabled by default and using root/admin credentials...

PT-2025-31947 · Firstnum · Firstnum Jc21A-04

Name of the Vulnerable Software and Affected Versions: FIRSTNUM JC21A-04 devices versions through 2.01ME/FN Description: FIRSTNUM JC21A-04 devices enable the SSH service by default with the credentials root/admin. The graphical user interface GUI does not provide a method to disable this account...

FIRSTNUM JC21A-04 安全漏洞

The FIRSTNUM JC21A-04 is a router from the Chinese company FIRSTNUM. A security vulnerability exists in the FIRSTNUM JC21A-04 version 2.01ME/FN and earlier, which originates from an arbitrary system command that can be executed via the xmlaction.cgi endpoint...

PT-2025-31941 · Firstnum · Firstnum Jc21A-04

Name of the Vulnerable Software and Affected Versions: FIRSTNUM JC21A-04 devices versions through 2.01ME/FN Description: An issue allows authenticated attackers to execute arbitrary OS system commands with root privileges via crafted payloads to the xml action.cgi?method= endpoint. Recommendation...

CVE-2025-43979

An issue was discovered on FIRSTNUM JC21A-04 devices through 2.01ME/FN that allows authenticated attackers to execute arbitrary OS system commands with root privileges via crafted payloads to the xmlaction.cgi?method= endpoint...

CVE-2025-43979

An issue was discovered on FIRSTNUM JC21A-04 devices through 2.01ME/FN that allows authenticated attackers to execute arbitrary OS system commands with root privileges via crafted payloads to the xmlaction.cgi?method= endpoint...

Kodi Xbmc 安全漏洞

Kodi Xbmc is a free and open source software media player and digital media entertainment center from the Kodi Foundation in the United States. A security vulnerability exists in Kodi Xbmc version 2012-11-04 and earlier, which stems from the HTTP server not properly cleaning up URI inputs, which...

CVE-2025-43980

The CVE pertains to FIRSTNUM JC21A-04 devices (versions through 2.01ME/FN). The issue is that SSH is enabled by default and authenticates with root/admin credentials, and the GUI provides no way to disable this account. This creates an environment where remote access could be gained under default...

CVE-2025-43980

An issue was discovered on FIRSTNUM JC21A-04 devices through 2.01ME/FN. They enable the SSH service by default with the credentials of root/admin. The GUI doesn't offer a way to disable the account...

CVE-2025-43979

Affected product: FIRSTNUM JC21A-04 devices (firmware up to 2.01ME/FN). Vulnerable component: xml_action.cgi?method= endpoint, where crafted payloads allow authenticated users to execute arbitrary OS commands with root privileges. This is a remote code execution issue (network attack vector) with...

CVE-2024-45183

creationtimestamp| type| source ---|---|--- 2025-08-04 17:52:12+00:00| seen| Telegram/p2-uqN2lQSGoaIhzaxwSWeCe3w6eGKLWUTdkqZ9y--F9Iek...

CVE-2025-38739

creationtimestamp| type| source ---|---|--- 2025-08-04 16:51:10+00:00| seen| Telegram/I7LZnQHOX8MHPQAyBZs5rW0PePdQQYoNJdr7EYjS7arDM9o...

CVE-2025-51535

creationtimestamp| type| source ---|---|--- 2025-08-04 16:51:05+00:00| seen| Telegram/UcHU2sZzk81sEOon5qtRGyu5NBxmahTG1ass4QXP3974LDQ...

CVE-2025-36607

creationtimestamp| type| source ---|---|--- 2025-08-04 16:03:09+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lvlkzacu5e2l...

CVE-2025-51536

creationtimestamp| type| source ---|---|--- 2025-08-04 14:49:06+00:00| seen| Telegram/1IU9Cy-41QBaqoIWddmWDWCQSAXTQNlv7su19pIxeSSGt4...

CVE-2025-0932

creationtimestamp| type| source ---|---|--- 2025-08-04 12:48:00+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lvla4c7ebp2a...

SUSE: Security Advisory (SUSE-SU-2025:02575-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...