EUVD-2025-25605

Malicious code in bioql PyPI...

EUVD-2025-25606

Malicious code in bioql PyPI...

CVE-2025-55622

Reolink v4.54.0.4.20250526 was discovered to contain a task hijacking vulnerability due to inappropriate taskAffinity settings. NOTE: this is disputed by the Supplier because it is intentional behavior to ensure a predictable user experience...

CVE-2025-55623

An issue in the lock screen component of Reolink v4.54.0.4.20250526 allows attackers to bypass authentication via using an ADB Android Debug Bridge...

CVE-2025-55625

An open redirect vulnerability in Reolink v4.54.0.4.20250526 allows attackers to redirect users to a malicious site via a crafted URL. NOTE: this is disputed by the Supplier because it is intentional behavior that supports redirection to Alexa URLs, which are not guaranteed to remain at the same...

CVE-2025-55621

An Insecure Direct Object Reference IDOR vulnerability in Reolink v4.54.0.4.20250526 allows unauthorized attackers to access and download other users' profile photos via a crafted URL. NOTE: this is disputed by the Supplier because it is intentional behavior; the photos are part of a social...

CVE-2025-55623

An issue in the lock screen component of Reolink v4.54.0.4.20250526 allows attackers to bypass authentication via using an ADB Android Debug Bridge...

CVE-2025-55620

A cross-site scripting XSS vulnerability in the valuateJavascript function of Reolink v4.54.0.4.20250526 allows attackers to execute arbitrary web scripts or HTML via a crafted payload...

PT-2025-34451 · Reolink · Reolink

Name of the Vulnerable Software and Affected Versions: Reolink version 4.54.0.4.20250526 Description: A cross-site scripting XSS issue exists in the valuateJavascript function, potentially allowing attackers to execute arbitrary web scripts or HTML via a crafted payload. Recommendations: Update t...

CVE-2025-55625

An open redirect vulnerability in Reolink v4.54.0.4.20250526 allows attackers to redirect users to a malicious site via a crafted URL. NOTE: this is disputed by the Supplier because it is intentional behavior that supports redirection to Alexa URLs, which are not guaranteed to remain at the same...

Reolink App 安全漏洞

Reolink App is a mobile application from Reolink USA. A security vulnerability exists in Reolink App version v4.54.0.4.20250526, which stems from an insecure direct object reference that could lead to unauthorized access to user profile photos...

Reolink App 安全漏洞

Reolink App is a mobile application from Reolink USA. A security vulnerability exists in Reolink App version v4.54.0.4.20250526, which stems from an improper setting of taskAffinity, which could lead to task hijacking...

CVE-2025-55620

CVE-2025-55620 describes an XSS in the Reolink mobile app/Web UI via the valuateJavascript() function in Reolink v4.54.0.4.20250526. The root cause is improper handling/sanitization of crafted payloads, allowing attackers to execute arbitrary web scripts or HTML when a user views or interacts wit...

PT-2025-34450 · Reolink · Reolink

Name of the Vulnerable Software and Affected Versions: Reolink version 4.54.0.4.20250526 Description: The Reolink application contains a hardcoded encryption key and initialization vector. This allows an attacker to decrypt access tokens and web session tokens through reverse engineering...

CVE-2025-55624

CVE-2025-55624 affects Reolink for Android/iOS (Reolink app version 4.54.0.4.20250526). The root cause is an intent redirection vulnerability that allows unauthorized attackers to access internal functions or non-public components. Public references indicate a PoC exists, and the issue is categor...

PT-2025-34453

Name of the Vulnerable Software and Affected Versions: Reolink version 4.54.0.4.20250526 Description: The software contains a task hijacking issue due to inappropriate taskAffinity settings. Recommendations: At the moment, there is no information about a newer version that contains a fix for this...

CVE-2025-55624

An intent redirection vulnerability in Reolink v4.54.0.4.20250526 allows unauthorized attackers to access internal functions or access non-public components...

Reolink App 安全漏洞

Reolink App is a mobile application from Reolink Inc. in the United States. A security vulnerability exists in Reolink App version v4.54.0.4.20250526, which originates from an open redirect that could cause users to be redirected to a malicious website...

CVE-2025-55622

CVE-2025-55622 affects Reolink v4.54.0.4.20250526 and is caused by inappropriate taskAffinity settings that enable task hijacking. This root cause is repeatedly stated across sources (NVD, Red Hat, CVE lists) with no consistent remediation information; some entries note no details about a fix. Te...

PT-2025-34454 · Reolink · Reolink

Name of the Vulnerable Software and Affected Versions: Reolink version 4.54.0.4.20250526 Description: An issue exists in the lock screen component that allows attackers to bypass authentication using an Android Debug Bridge ADB. ADB is a versatile command-line tool that facilitates communication...