7 matches found
EUVD-2025-13273
Malicious code in bioql PyPI...
EUVD-2025-13279
Malicious code in bioql PyPI...
EUVD-2025-13284
Malicious code in bioql PyPI...
CVE-2025-32881
An issue was discovered on goTenna v1 devices with app 5.5.3 and firmware 0.25.5. By default, the GID is the user's phone number unless they specifically opt out. A phone number is very sensitive information because it can be tied back to individuals. The app does not encrypt the GID in messages...
CVE-2025-32889
An issue was discovered on goTenna v1 devices with app 5.5.3 and firmware 0.25.5. The verification token used for sending SMS through a goTenna server is hardcoded in the app...
CVE-2025-32886
An issue was discovered on goTenna v1 devices with app 5.5.3 and firmware 0.25.5. All packets sent over RF are also sent over UART with USB Shell, allowing someone with local access to gain information about the protocol and intercept sensitive data...
CVE-2025-32882
CVE-2025-32882 affects goTenna V1 devices: application 5.5.3 and firmware 0.25.5 use a custom encryption implementation without integrity checking, making messages malleable. This vulnerability is described across multiple sources (NVD, Red Hat, PT Security) with no confirmed exploitation details...