Lucene search
K

12 matches found

RedhatCVE
RedhatCVE
added 2026/01/09 9:55 a.m.6 views

CVE-2020-12856

OpenTrace, as used in COVIDSafe through v1.0.17, TraceTogether, ABTraceTogether, and other applications on iOS and Android, allows remote attackers to conduct long-term re-identification attacks and possibly have unspecified other impact, because of how Bluetooth is used...

9.8CVSS7.2AI score0.10755EPSS
Exploits0References1
Circl
Circl
added 2025/11/07 3:15 p.m.2 views

CVE-2025-12856

creationtimestamp| type| source ---|---|--- 2025-11-07 15:15:33+00:00| seen| https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3m52engqw7dv2 2025-11-07 15:57:37+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m52gysn63k2n...

9.8CVSS4.4AI score0.00029EPSS
Exploits1References2
OSV
OSV
added 2025/11/07 2:15 p.m.1 views

CVE-2025-12856

A weakness has been identified in code-projects Responsive Hotel Site 1.0. Impacted is an unknown function of the file /admin/reservation.php. This manipulation of the argument email causes sql injection. The attack can be initiated remotely. The exploit has been made available to the public and...

9.8CVSS5.8AI score0.00029EPSS
Exploits1References5
HackRead
HackRead
added 2024/12/30 6:13 a.m.28 views

Critical Flaw Exposes Four-Faith Routers to Remote Exploitation

SUMMARY: VulnCheck has discovered a critical new vulnerability CVE-2024-12856 affecting Four-Faith industrial routers F3x24 and F3x36, with evidence…...

7.2CVSS7.2AI score0.70178EPSS
Exploits4
The Hacker News
The Hacker News
added 2024/12/28 6:25 a.m.13 views

15,000+ Four-Faith Routers Exposed to New Exploit Due to Default Credentials

A high-severity flaw impacting select Four-Faith industrial routers has come under active exploitation in the wild, according to new findings from VulnCheck. The vulnerability, tracked as CVE-2024-12856 CVSS score: 7.2, has been described as an operating system OS command injection bug affecting...

7.2CVSS9.9AI score0.70178EPSS
Exploits4
Circl
Circl
added 2024/12/27 4:15 p.m.128 views

CVE-2024-12856

creationtimestamp| type| source ---|---|--- 2024-12-27 16:15:50+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lecf5eb7so2l 2024-12-27 17:41:58+00:00| seen| https://t.me/cvedetector/13787 2024-12-27 18:19:54+00:00| seen|...

7.2CVSS7.2AI score0.70178EPSS
In wildExploits4References30
Cvelist
Cvelist
added 2024/12/27 4:3 p.m.24 views

CVE-2024-12856 Four-Faith Industrial Router adjust_sys_time OS Command Injection

The Four-Faith router models F3x24 and F3x36 are affected by an operating system OS command injection vulnerability. At least firmware version 2.0 allows authenticated and remote attackers to execute arbitrary OS commands over HTTP when modifying the system time via apply.cgi. Additionally, this...

7.2CVSS0.70178EPSS
Exploits4References3
VulnCheck KEV
VulnCheck KEV
added 2024/11/09 12:0 a.m.0 views

VulnCheck KEV: CVE-2024-12856

Four-Faith industrial routers are vulnerable to an operating system command injection vulnerability...

7.2CVSS7.3AI score0.70178EPSS
Exploits4References1
Circl
Circl
added 2020/05/18 8:46 a.m.5 views

CVE-2020-12856

creationtimestamp| type| source ---|---|--- 2020-05-18 08:46:52+00:00| seen| MISP/5ec24b64-3014-4fa2-9b9e-12cf44b7dd05 2020-09-22 21:46:02+00:00| published-proof-of-concept| https://t.me/androidMalware/876...

9.8CVSS8.7AI score0.10755EPSS
Exploits0References1
CVE
CVE
added 2020/05/18 3:35 a.m.123 views

CVE-2020-12856

OpenTrace (used in COVIDSafe up to v1.0.17) and similar apps on iOS/Android expose a vulnerability where Bluetooth usage enables long-term user re-identification by remote attackers, per CVE-2020-12856. Red‑hat and other sources mirror this description. The Android security bulletin lists CVE-202...

9.8CVSS9.4AI score0.10755EPSS
Exploits0References3Affected Software3
CVE
CVE
added 2018/10/12 6:0 p.m.64 views

CVE-2018-12856

Vulnerability: CVE-2018-12856 affects Adobe Acrobat and Reader. Description specifies an out-of-bounds read in versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier, leading to information disclosure if exploited. Connected sources corroborate the same is...

6.5CVSS6.1AI score0.02089EPSS
Exploits0References3Affected Software2
CVE
CVE
added 2017/08/29 3:0 p.m.50 views

CVE-2017-12856

Technical details such as affected products, versions, root cause, and remediation are not publicly available in the provided documents. Monitor for updates from the listed sources; additional details may be released in future advisories.

6.1CVSS6AI score0.00315EPSS
Exploits1References1Affected Software1
Rows per page
Query Builder