EUVD-2025-25605

Malicious code in bioql PyPI...

EUVD-2025-25606

Malicious code in bioql PyPI...

CVE-2025-55622

Reolink v4.54.0.4.20250526 was discovered to contain a task hijacking vulnerability due to inappropriate taskAffinity settings. NOTE: this is disputed by the Supplier because it is intentional behavior to ensure a predictable user experience...

CVE-2025-55623

An issue in the lock screen component of Reolink v4.54.0.4.20250526 allows attackers to bypass authentication via using an ADB Android Debug Bridge...

CVE-2025-55625

An open redirect vulnerability in Reolink v4.54.0.4.20250526 allows attackers to redirect users to a malicious site via a crafted URL. NOTE: this is disputed by the Supplier because it is intentional behavior that supports redirection to Alexa URLs, which are not guaranteed to remain at the same...

CVE-2025-55623

An issue in the lock screen component of Reolink v4.54.0.4.20250526 allows attackers to bypass authentication via using an ADB Android Debug Bridge...

CVE-2025-55621

An Insecure Direct Object Reference IDOR vulnerability in Reolink v4.54.0.4.20250526 allows unauthorized attackers to access and download other users' profile photos via a crafted URL. NOTE: this is disputed by the Supplier because it is intentional behavior; the photos are part of a social...

CVE-2025-55620

A cross-site scripting XSS vulnerability in the valuateJavascript function of Reolink v4.54.0.4.20250526 allows attackers to execute arbitrary web scripts or HTML via a crafted payload...

Reolink App 安全漏洞

Reolink App is a mobile application from Reolink USA. A security vulnerability exists in Reolink App version v4.54.0.4.20250526, which stems from an insecure direct object reference that could lead to unauthorized access to user profile photos...

PT-2025-34450

Name of the Vulnerable Software and Affected Versions: Reolink version 4.54.0.4.20250526 Description: The Reolink application contains a hardcoded encryption key and initialization vector. This allows an attacker to decrypt access tokens and web session tokens through reverse engineering...

PT-2025-34451

Name of the Vulnerable Software and Affected Versions: Reolink version 4.54.0.4.20250526 Description: A cross-site scripting XSS issue exists in the valuateJavascript function, potentially allowing attackers to execute arbitrary web scripts or HTML via a crafted payload. Recommendations: Update t...

Reolink App 安全漏洞

Reolink App is a mobile application from Reolink USA. A security vulnerability exists in Reolink App version v4.54.0.4.20250526, which stems from an improper setting of taskAffinity, which could lead to task hijacking...

CVE-2025-55620

A cross-site scripting (XSS) vulnerability exists in the valuateJavascript() function of Reolink v4.54.0.4.20250526 . The root cause is the failure to correctly handle input, which allows an attacker to execute arbitrary web scripts or HTML using a crafted payload. Practical consequences include ...

CVE-2025-55624

The Reolink mobile application for video surveillance management, specifically version v4.54.0.4.20250526 , is affected by an intent redirection vulnerability. The flaw originates within the ForegroundLockActivity() and WelcomeActivity() functions, which allows for the redirection of URLs to unre...

CVE-2025-55625

An open redirect vulnerability in Reolink v4.54.0.4.20250526 allows attackers to redirect users to a malicious site via a crafted URL. NOTE: this is disputed by the Supplier because it is intentional behavior that supports redirection to Alexa URLs, which are not guaranteed to remain at the same...

CVE-2025-55624

An intent redirection vulnerability in Reolink v4.54.0.4.20250526 allows unauthorized attackers to access internal functions or access non-public components...

PT-2025-34453

Name of the Vulnerable Software and Affected Versions: Reolink version 4.54.0.4.20250526 Description: The software contains a task hijacking issue due to inappropriate taskAffinity settings. Recommendations: At the moment, there is no information about a newer version that contains a fix for this...

Reolink App 安全漏洞

Reolink App is a mobile application from Reolink Inc. in the United States. A security vulnerability exists in Reolink App version v4.54.0.4.20250526, which originates from an open redirect that could cause users to be redirected to a malicious website...

CVE-2025-55622

Reolink v4.54.0.4.20250526 contains a task hijacking vulnerability caused by inappropriate taskAffinity settings. While the supplier disputes this claim, stating it is intentional behavior for a predictable user experience, security records identify it as a potential security flaw. No remediation...

PT-2025-34456

Name of the Vulnerable Software and Affected Versions: Reolink version 4.54.0.4.20250526 Description: An open redirect issue exists in Reolink. Attackers can redirect users to a malicious site by using a specially crafted URL. Recommendations: At the moment, there is no information about a newer...