Cisco IOS XR Data Forgery Issue Vulnerability (CNVD-2025-21252)

Cisco IOS XR is a set of operating systems developed by the American company Cisco Cisco for its network equipment. Cisco IOS XR suffers from a data forgery vulnerability that arises from incomplete file validation during installation, which can be exploited by an attacker to cause unsigned...

Cisco IOS XR Data Forgery Vulnerability

Cisco IOS XR is a set of operating systems developed by the American company Cisco Cisco for its network equipment. Cisco IOS XR suffers from a data forgery vulnerability that arises from incomplete file validation during installation, which can be exploited by an attacker to cause unsigned...

Belkin AX1800: Data forgery vulnerability

The Belkin AX1800 is a wireless router from Belkin Canada. A data forgery issue vulnerability exists in the Belkin AX1800 version 1.1.00.016, which stems from insufficient validation of data authenticity and could lead to remote attacks...

GNARK data falsification vulnerability

gnark is a fast zk-SNARK library open-sourced by Consensys. for advanced APIs to design circuits. A data forgery issue vulnerability exists in versions prior to gnark 0.14.0, which stems from incomplete signature verification and could lead to signature malleability attacks...

Microsoft Windows Certificates Data Forgery Vulnerability

Microsoft Windows Certificates is a digital certificate software from Microsoft Corporation USA. A data forgery vulnerability exists in Microsoft Windows Certificates that stems from improper cryptographic signature verification and could lead to spoofing attacks...

Tenda AC15 Data Forgery Issue Vulnerability

Tenda AC15 is a dual-band wireless router launched by Shenzhen Jixiang Tenda Technology Co. in October 2015, which supports 802.11ac protocol and is mainly designed for home network environment. Tenda AC15 is vulnerable to a data forgery issue, which stems from insufficient data authenticity...

Tenda AC15: Vulnerability in data falsification

Tenda AC15 is a dual-band wireless router launched by Shenzhen Jixiang Tenda Technology Co. in October 2015, which supports 802.11ac protocol and is mainly designed for home network environment. Tenda AC15 is vulnerable to a data forgery issue, which stems from insufficient data authenticity...

Tenda G1 data falsification vulnerability

Tenda G1 is an Enterprise Ap Management Router from Tenda China. A data forgery issue vulnerability exists in Tenda G1 version 16.01.7.83660, which stems from insufficient data authenticity validation of the function checkuploadfile in the firmware update processing component...

CVE-2025-52586

The MOD3 command traffic between the monitoring application and the inverter is transmitted in plaintext without encryption or obfuscation. This vulnerability may allow an attacker with access to a local network to intercept, manipulate, replay, or forge critical data, including read/write...

CIRCL data falsification vulnerability

CIRCL is a collection of cryptographic primitives written in Go open-sourced by Cloudflare. CIRCL suffers from a Data Forgery Issue vulnerability that stems from low-order point injection and improper point validation that could compromise session security...

Node-SAML data forgeing vulnerability

node-saml is a SAML library that does not depend on any framework running in Node.js. A data forgery issue vulnerability exists in Node-SAML 5.0.1 and prior versions, which stems from an unvalidated assertion document that could result in modifying authentication details in SAML assertions...

Mozilla’s various products have vulnerabilities related to data manipulation and falsification.

Mozilla Firefox and Mozilla Thunderbird are both products of the Mozilla Foundation in the U.S. Mozilla Firefox is an open-source Web browser. Mozilla Thunderbird is a separate set of Mozilla Application Suite Email client software. The software supports IMAP and POP mail protocols as well as the...

Siemens TIA Administrator Data Forgery Issue Vulnerability

Siemens TIA Administrator is a management program for authorizing and licensing SIMATIC products from Siemens, Germany. A data forgery vulnerability exists in Siemens TIA Administrator, which arises from improper validation of code signing certificates and can be exploited by an attacker to bypas...

Eluktronics Control Center data falsification vulnerability

Eluktronics Control Center is a control center software from Eluktronics Corporation. A data forgery issue vulnerability exists in Eluktronics Control Center version 5.23.51.41, which stems from insufficient validation of data authenticity in the REG File Handler component...

Official Clerk JavaScript SDKs: Data Forgery Vulnerability

Official Clerk JavaScript SDKs is a Clerk open source official Javascript repository for Clerk authentication. A data forgery vulnerability exists in the Official Clerk JavaScript SDKs, which stems from insufficient verifyWebhook validation and may result in the acceptance of unsigned webhook...

Siemens TIA Administrator data manipulation vulnerability

Siemens TIA Administrator is a management program for authorizing and licensing SIMATIC products from Siemens, Germany. A data forgery vulnerability exists in Siemens TIA Administrator, which arises from improper validation of code signing certificates and can be exploited by an attacker to bypas...

Pioneer DMH-WT7600NEX has vulnerabilities related to data falsification.

The Pioneer DMH-WT7600NEX is a multimedia digital media receiver from Pioneer. The Pioneer DMH-WT7600NEX suffers from a Data Forgery Issue vulnerability that stems from insufficient root filesystem protection, which could lead to authentication bypass...

Pioneer DMH-WT7600NEX has vulnerabilities related to data falsification.

The Pioneer DMH-WT7600NEX is a multimedia digital media receiver from Pioneer. The Pioneer DMH-WT7600NEX suffers from a Data Forgery Issue vulnerability that stems from insufficient validation of software updates and could lead to the execution of arbitrary code...

rfc3161-client Data Forgery Vulnerability

rfc3161-client is a Trail of Bits open source software. A data forgery issue vulnerability exists in rfc3161-client versions prior to 1.0.3, which stems from a flaw in the timestamp response signature validation logic that could lead to insufficient signature validation...

BlueRiSC WindowsSCOPE Cyber Forensics: Data Forgery Vulnerability

BlueRiSC WindowsSCOPE Cyber Forensics is a GUI-based memory forensic capture and analysis toolkit from BlueRiSC. BlueRiSC WindowsSCOPE Cyber Forensics suffers from a Data Forgery Issue vulnerability that stems from a lack of constraints in the rv32im circuit, which could lead to a malicious prove...