CVE-2025-31654

An attacker can get information about the groups of the smart home devices for arbitrary users i.e., "rooms"...

CVE-2025-30514

Unauthenticated attackers can obtain restricted information about a user's smart device collections i.e., "scenes"...

CVE-2025-30514

CVE-2025-30514 affects Growatt Cloud Applications (portal). Multiple connected sources indicate unauthenticated attackers can obtain restricted information about a user’s smart device collections (including “scenes” and possibly “rooms”) via unauthenticated API access, exposure of usernames/email...

CVE-2025-27938 Growatt Cloud portal Authorization Bypass Through User-Controlled Key

Unauthenticated attackers can obtain restricted information about a user's smart device collections i.e., "rooms"...

CVE-2025-30109

In the IROAD APK 5.2.5, there are Hardcoded Credentials in the APK for ports 9091 and 9092. The mobile application for the dashcam contains hardcoded credentials that allow an attacker on the local Wi-Fi network to access API endpoints and retrieve sensitive device information, including live and...

IROAD APK 安全漏洞

The IROAD APK is a mobile application from IROAD that works with the IROAD Car Recorder. A security vulnerability exists in IROAD APK version 5.2.5, which stems from the use of hard-coded credentials on ports 9091 and 9092 in the APK, which could allow an attacker to access the API endpoint and...

CVE-2025-30109

The IROAD APK version 5.2.5 contains hardcoded credentials for ports 9091 and 9092 within the mobile application for the dashcam. An attacker on the local Wi-Fi network can exploit these credentials to access API endpoints and retrieve sensitive device information, including live and recorded foo...

CVE-2025-30109: Use of Hard-coded Credentials

In the IROAD APK 5.2.5, there are Hardcoded Credentials in the APK for ports 9091 and 9092. The mobile application for the dashcam contains hardcoded credentials that allow an attacker on the local Wi-Fi network to access API endpoints and retrieve sensitive device information, including live and...

PT-2025-11605

Name of the Vulnerable Software and Affected Versions IROAD APK version 5.2.5 Description The mobile application for the dashcam contains hardcoded credentials that allow an attacker on the local Wi-Fi network to access API endpoints and retrieve sensitive device information, including live and...

CVE-2025-30109

In the IROAD APK 5.2.5, there are Hardcoded Credentials in the APK for ports 9091 and 9092. The mobile application for the dashcam contains hardcoded credentials that allow an attacker on the local Wi-Fi network to access API endpoints and retrieve sensitive device information, including live and...

i3c: Use i3cdev->desc->info instead of calling i3c_device_get_info() to avoid deadlock

...

CVE-2025-24846

Authentication bypass vulnerability exists in FutureNet AS series Industrial Routers provided by Century Systems Co., Ltd. If this vulnerability is exploited, a remote unauthenticated attacker may obtain the device information such as MAC address by sending a specially crafted request...

Linux Distros Unpatched Vulnerability : CVE-2023-6693

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A stack based buffer overflow was found in the virtio-net device of QEMU. This issue occurs when flushing TX in the virtionetflushtx function if guest features...

CVE-2025-24846

Authentication bypass vulnerability exists in FutureNet AS series Industrial Routers provided by Century Systems Co., Ltd. If this vulnerability is exploited, a remote unauthenticated attacker may obtain the device information such as MAC address by sending a specially crafted request...

CVE-2025-24846

The CVE-2025-24846 entry describes an authentication bypass in Century Systems’ FutureNet AS series Industrial Routers (CWE-288). An unauthenticated, remote attacker could obtain device information such as MAC addresses by sending a specially crafted request. Connected sources (JVN/JPCERT, Red Ha...

CVE-2025-24846

Authentication bypass vulnerability exists in FutureNet AS series Industrial Routers provided by Century Systems Co., Ltd. If this vulnerability is exploited, a remote unauthenticated attacker may obtain the device information such as MAC address by sending a specially crafted request...

CVE-2025-24846

Authentication bypass vulnerability exists in FutureNet AS series Industrial Routers provided by Century Systems Co., Ltd. If this vulnerability is exploited, a remote unauthenticated attacker may obtain the device information such as MAC address by sending a specially crafted request...

PT-2025-9287

Name of the Vulnerable Software and Affected Versions FutureNet AS series Industrial Routers affected versions not specified Description An authentication bypass issue exists, allowing a remote unauthenticated attacker to obtain device information, such as the MAC address, by sending a specially...

Century Systems FutureNet AS series 安全漏洞

Century Systems FutureNet AS series is a series of industrial routers from Century Systems, Japan. A security vulnerability exists in the Century Systems FutureNet AS series that stems from an authentication bypass that could allow a remote, unauthenticated attacker to gain access to device...

CVE-2022-3186

Dataprobe iBoot-PDU FW versions prior to 1.42.06162022 contain a vulnerability where the affected product allows an attacker to access the device’s main management page from the cloud. This feature enables users to remotely connect devices, however, the current implementation permits users to...