CVE-2026-41446: Hidden Functionality

Snap One WattBox 800 and 820 series firmware versions prior to 2.10.0.0 contain undisclosed diagnostic HTTP endpoints that require only the device MAC address and service tag for authentication, both of which are printed in plaintext on the physical device label. Attackers with access to the devi...

Weintek cMT security vulnerabilities

Weintek cMT is a human-computer interface application developed by Weintek Corporation. There is a security vulnerability in Weintek cMT. This vulnerability stems from the insufficient validation of inputs that are assumed to be immutable but are actually externally controllable. This could allow...

EUVD-2017-9292

Malware in sbrugna...

EUVD-2018-5844

Malware in sbrugna...

EUVD-2018-17679

Malware in sbrugna...

EUVD-2017-7263

Malware in sbrugna...

D-Link DIR-820 Devices Command Injection (CVE-2023-25280)

OS Command injection vulnerability in D-Link DIR-820 allows attackers to escalate privileges to root via a crafted payload with the pingaddr parameter to ping.ccp. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number...

CVE-2018-13901

Due to missing permissions in Android Manifest file, Sensitive information disclosure issue can happen in PCI RCS app in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables ...

Forvia Hella HELLA Driving Recorder DR 820 安全漏洞

Forvia Hella HELLA Driving Recorder DR 820 is a driving recorder from Forvia. A security vulnerability exists in Forvia Hella HELLA Driving Recorder DR 820, which stems from the use of hard-coded credentials on ports 9091 and 9092 in the APK, which allows an attacker to gain unauthorized access t...

CVE-2025-30115: Use of Hard-coded Password

An issue was discovered on the Forvia Hella HELLA Driving Recorder DR 820. Default Credentials Cannot Be Changed. It uses a fixed default SSID and password "qwertyuiop", which cannot be modified by users. The SSID is continuously broadcast, allowing unauthorized access to the device network...

CVE-2025-30116: Improper Authentication

An issue was discovered on the Forvia Hella HELLA Driving Recorder DR 820. Remotely Dumping of Video Footage and the Live Video Stream can occur. It allows remote attackers to access and download recorded video footage from the SD card via port 9091. Additionally, attackers can connect to port 90...

PT-2025-11615

Name of the Vulnerable Software and Affected Versions Forvia Hella HELLA Driving Recorder DR 820 affected versions not specified Description An issue was discovered where the device uses a fixed default SSID and password "qwertyuiop", which cannot be modified by users. The SSID is continuously...

PT-2025-11613

Name of the Vulnerable Software and Affected Versions Forvia Hella HELLA Driving Recorder DR 820 affected versions not specified Description An issue exists where hardcoded credentials are present in the APK for ports 9091 and 9092. The dashcam's Android application contains these credentials,...

PT-2025-11614

Name of the Vulnerable Software and Affected Versions Forvia Hella HELLA Driving Recorder DR 820 affected versions not specified Description An issue was discovered where the pairing mechanism of the device relies solely on the connecting device's MAC address. By obtaining the MAC address through...

PT-2025-11617

Name of the Vulnerable Software and Affected Versions Forvia Hella HELLA Driving Recorder DR 820 affected versions not specified Description An issue was discovered that allows unauthorized parties to manage settings and obtain sensitive data, potentially sabotaging the car battery. After bypassi...

CVE-2025-30113: Use of Hard-coded Credentials

An issue was discovered on the Forvia Hella HELLA Driving Recorder DR 820. Hardcoded Credentials exist in the APK for Ports 9091 and 9092. The dashcam's Android application contains hardcoded credentials that allow unauthorized access to device settings through ports 9091 and 9092. These...

PT-2025-11616

Name of the Vulnerable Software and Affected Versions Forvia Hella HELLA Driving Recorder DR 820 affected versions not specified Description An issue allows remote attackers to access and download recorded video footage from the SD card via port 9091. Additionally, attackers can connect to port...

CVE-2025-30117: Improper Authorization

An issue was discovered on the Forvia Hella HELLA Driving Recorder DR 820. Managing Settings and Obtaining Sensitive Data and Sabotaging the Car Battery can be performed by unauthorized parties. After bypassing the device pairing, an attacker can obtain sensitive user and vehicle information...

CVE-2025-30114: Improper Authentication

An issue was discovered on the Forvia Hella HELLA Driving Recorder DR 820. Bypassing of Device Pairing can occur. The pairing mechanism relies solely on the connecting device's MAC address. By obtaining the MAC address through network scanning and spoofing it, an attacker can bypass the...

Low: ansible-core

Issue Overview: No CVE associated with this advisory Affected Packages: ansible-core Issue Correction: Run dnf update ansible-core --releasever 2023.6.20250123 or dnf update --advisory ALAS2023-2025-820 --releasever 2023.6.20250123 to update your system. More information on how to update your...