CVE-2024-52329 ECOVACS HOME mobile app plugins do not properly validate TLS certificates

ECOVACS HOME mobile app plugins for specific robots do not properly validate TLS certificates. An unauthenticated attacker can read or modify TLS traffic and obtain authentication tokens...

ECOVACS HOME mobile app plugins: Trust management issue vulnerability

The ECOVACS HOME mobile app plugins is a mobile app plugin from ECOVACS, China. A security vulnerability exists in the ECOVACS HOME mobile app plugins that stems from the mobile app plugin not properly validating TLS certificates. An unauthenticated attacker could read or modify TLS traffic and...

CVE-2024-52329: Improper Certificate Validation

ECOVACS HOME mobile app plugins for specific robots do not properly validate TLS certificates. An unauthenticated attacker can read or modify TLS traffic and obtain authentication tokens...

Tunneling Flaws Put VPNs, CDNs and Routers at Risk Globally

Millions of devices, including home routers, VPN servers, and CDNs are vulnerable to exploitation due to critical flaws…...

NETGEAR DGN1000 Command Injection Vulnerability (CNVD-2025-02105)

The NETGEAR DGN1000 is a wireless router from NETGEAR for home and small office networking. An authentication bypass vulnerability exists in the NETGEAR DGN1000 prior to version 1.1.00.48. An attacker can exploit this vulnerability to take full control of the device by sending a constructed HTTP...

CVE-2025-23214

Summary: Cosmos-Server before version 0.17.7 exposes a user-enumeration vulnerability during login, allowing an attacker to determine if a username exists in the database due to error code behavior. This has been addressed in version 0.17.7. Affected software: Cosmos-Server (pre-0.17.7). Root cau...

PlugX malware deleted from thousands of systems by FBI

The FBI says it has removed PlugX malware from thousands of infected computers worldwide. The move came after suspicion that cybercriminals groups under control of the People’s Republic of China PRC used a version of PlugX malware to control, and steal information from victims' computers. PlugX h...

Matrix Authorization Issues Vulnerabilities

Matrix is an ambitious new ecosystem for open federated instant messaging and VoIP. Matrix suffers from an authorization issue vulnerability that stems from allowing a remote participant to trigger the download and caching of remote media from a remote home server to a local media repository...

PT-2025-1235 · Gre +1 · Gre +1

Name of the Vulnerable Software and Affected Versions: GRE and GRE6 protocols RFC2784 affected versions not specified Description: The GRE and GRE6 protocols do not validate or verify the source of a network packet, allowing an attacker to spoof and route arbitrary traffic via an exposed network...

USN-6940-2 snapd vulnerabilities

USN-6940-1 fixed vulnerabilities in snapd. This update provides the corresponding updates for Ubuntu 18.04 LTS and Ubuntu 16.04 LTS. Original advisory details: Neil McPhail discovered that snapd did not properly restrict writes to the /home/jslarraz/bin path in the AppArmor profile for snaps usin...

PT-2025-3438 · Evehome · Eve Play

Name of the Vulnerable Software and Affected Versions: Eve Play versions through 1.1.42 Description: An attacker could exploit the issue of using a password hash with insufficient computational effort in EveHome Eve Play to execute arbitrary code. Recommendations: For versions through 1.1.42,...

EveHome Eve Play security vulnerabilities

EveHome Eve Play is an audio streaming interface from EveHome, Inc. A security vulnerability exists in EveHome Eve Play version 1.1.42 and earlier, which stems from the presence of a cryptographic hash vulnerability using insufficient computational effort that can be exploited by an attacker to...

PT-2025-4587 · Wegia · Wegia

Name of the Vulnerable Software and Affected Versions: WeGIA versions prior to 3.2.8 Description: A Reflected Cross-Site Scripting XSS issue was identified in the "home.php" endpoint of the WeGIA application. This issue allows attackers to inject malicious scripts in the msg c parameter...

PT-2025-2659

Name of the Vulnerable Software and Affected Versions Iocharger Home firmware for AC model versions prior to 25010801 Description The issue is related to a patch traversal vulnerability, which allows for external control of file name or path, enabling the deletion of arbitrary files. This can...

CVE-2024-56448

Vulnerability of improper access control in the home screen widget module Impact: Successful exploitation of this vulnerability may affect availability...

CVE-2024-56448

Vulnerability of improper access control in the home screen widget module Impact: Successful exploitation of this vulnerability may affect availability...

CVE-2024-56448

Vulnerability of improper access control in the home screen widget module Impact: Successful exploitation of this vulnerability may affect availability...

CVE-2024-56448

Vulnerability of improper access control in the home screen widget module Impact: Successful exploitation of this vulnerability may affect availability...

CVE-2024-56448

Technical details about CVE-2024-56448 are not publicly available in the provided documents. Monitor for updates from Huawei and security bulletins.

PT-2025-3292 · Huawei · Emui +1

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue concerns improper access control in the home screen widget module. Successful exploitation of this vulnerability may affect availability. Ther...