CVE-2023-5457

CVE-2023-5457 is a CWE-1269 issue in the Django-based application where debug=True in Django causes exposure of sensitive information. It affects AiLux imx6 bundle prior to version imx6_1.0.7-2. Root cause: non-release configuration leaking data. Impact: confidentiality, integrity, and availabili...

CVE-2023-5457

A CWE-1269 “Product Released in Non-Release Configuration” vulnerability in the Django web framework used by the web application due to the “debug” configuration parameter set to “True” allows a remote unauthenticated attacker to access critical information and have other unspecified impacts to t...

CVE-2023-5456

CVE-2023-5456 is a CWE-798 vulnerability affecting AiLux imx6 bundle prior to version imx6_1.0.7-2. The issue arises from hard-coded credentials in the MariaDB database used by the web application, enabling a remote unauthenticated attacker to access the database service and all data with the web...

AiLux imx6 Security Vulnerability

AiLux imx6 is a computing module from AiLux. A security vulnerability exists in versions prior to AiLux imx6 bundle imx61.0.7-2, which originates from a hole that allows a physical attacker to arbitrarily download/upload files from/to the file system, with unspecified impact on the confidentialit...

PT-2024-13260 · Unknown · Ailux Imx6 Bundle

Name of the Vulnerable Software and Affected Versions: AiLux imx6 bundle versions prior to imx6 1.0.7-2 Description: A vulnerability in the file configuration functionality of the web application allows a remote unauthenticated attacker to access confidential configuration files. The issue is...

PT-2024-13263 · Ailux · Ailux Imx6 Bundle

Name of the Vulnerable Software and Affected Versions: AiLux imx6 bundle versions prior to imx6 1.0.7-2 Description: A CWE-646 issue in the "iec61850" functionality of the web application allows a remote authenticated attacker to upload any arbitrary type of file into the device. Recommendations:...

PT-2024-13264 · Unknown · Ailux Imx6 Bundle

Name of the Vulnerable Software and Affected Versions: AiLux imx6 bundle versions prior to imx6 1.0.7-2 Description: A CWE-613 “Insufficient Session Expiration” issue in the web application exists due to the session cookie sessionid lasting two weeks, which facilitates session hijacking attacks...

PT-2024-13258 · Google · Chromium

Name of the Vulnerable Software and Affected Versions: AiLux imx6 bundle versions prior to imx6 1.0.7-2 Description: A CWE-552 vulnerability in the embedded Chromium browser allows a physical attacker to arbitrarily download or upload files to or from the file system. This issue has unspecified...

PT-2024-13255 · Unknown · Ailux Imx6 Bundle

Name of the Vulnerable Software and Affected Versions: AiLux imx6 bundle versions prior to imx6 1.0.7-2 Description: A heap-based buffer overflow vulnerability in the logger generic function of the Ax rtu binary allows a remote authenticated attacker to trigger a memory corruption. This may resul...

AiLux imx6 Security Vulnerability

AiLux imx6 is a computing module from AiLux. A security vulnerability exists in versions prior to AiLux imx6 bundle imx61.0.7-2 that stems from a lack of authorization and allows an unauthenticated, remote attacker to access confidential configuration files...

PT-2024-13261 · Unknown · Ailux Imx6 Bundle

Name of the Vulnerable Software and Affected Versions: AiLux imx6 bundle versions prior to imx6 1.0.7-2 Description: A CWE-1236 issue in the file configuration functionality of the web application, concerning the export file function, allows a remote authenticated attacker to inject arbitrary...

CVE-2021-47101

creationtimestamp| type| source ---|---|--- 2024-03-04 19:31:56+00:00| seen| https://t.me/ctinow/199515 2024-03-05 17:22:27+00:00| seen| https://t.me/ctinow/200466 2025-02-06 02:39:12+00:00| seen| Telegram/-rN7PQWioBy1ImOulGBonLWWQYwnEkb03pWfeEFvbprKqv6I 2025-12-03 14:14:49+00:00| seen|...

CVE-2024-26622

creationtimestamp| type| source ---|---|--- 2024-03-04 08:26:52+00:00| seen| https://t.me/ctinow/199070 2024-03-04 08:31:24+00:00| seen| https://t.me/ctinow/199078 2024-03-04 18:31:37+00:00| seen| https://t.me/ctinow/199429 2025-12-03 14:14:49+00:00| seen|...

CVE-2023-52517

creationtimestamp| type| source ---|---|--- 2024-03-02 23:26:29+00:00| seen| https://t.me/ctinow/198495 2024-03-02 23:32:12+00:00| seen| https://t.me/ctinow/198515 2025-12-03 14:14:49+00:00| seen| https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8...

CVE-2023-52516

creationtimestamp| type| source ---|---|--- 2024-03-02 23:26:28+00:00| seen| https://t.me/ctinow/198494 2024-03-02 23:32:11+00:00| seen| https://t.me/ctinow/198514 2024-03-04 21:11:36+00:00| seen| https://t.me/ctinow/199586 2025-12-03 14:14:49+00:00| seen|...

CVE-2023-52515

creationtimestamp| type| source ---|---|--- 2024-03-02 23:26:24+00:00| seen| https://t.me/ctinow/198493 2024-03-02 23:32:07+00:00| seen| https://t.me/ctinow/198513 2024-03-04 21:16:51+00:00| seen| https://t.me/ctinow/199600 2025-12-03 14:14:49+00:00| seen|...

CVE-2023-52511

creationtimestamp| type| source ---|---|--- 2024-03-02 23:26:20+00:00| seen| https://t.me/ctinow/198489 2024-03-02 23:32:03+00:00| seen| https://t.me/ctinow/198509 2024-03-04 20:31:11+00:00| seen| https://t.me/ctinow/199543 2025-12-03 14:14:49+00:00| seen|...

CVE-2021-47076

creationtimestamp| type| source ---|---|--- 2024-03-01 23:26:48+00:00| seen| https://t.me/ctinow/198099 2024-03-01 23:31:56+00:00| seen| https://t.me/ctinow/198117 2024-03-03 11:11:27+00:00| seen| https://t.me/ctinow/198680 2025-12-03 14:14:49+00:00| seen|...

CVE-2021-47070

creationtimestamp| type| source ---|---|--- 2024-03-01 23:26:42+00:00| seen| https://t.me/ctinow/198093 2024-03-01 23:31:48+00:00| seen| https://t.me/ctinow/198111 2024-03-03 10:41:11+00:00| seen| https://t.me/ctinow/198663 2025-12-03 14:14:49+00:00| seen|...

GHSA-68C2-4MPX-QH95 Potential leakage of Sentry auth tokens by React Native SDK with Expo plugin

Impact SDK versions between and including 5.16.0 and 5.19.0 allowed Sentry auth tokens to be set in the optional authToken configuration parameter, for debugging purposes. Doing so would result in the auth token being built into the application bundle, and therefore the auth token could be...