Lucene search
+L

8356 matches found

Tenable Nessus
Tenable Nessus
•added 2025/12/11 12:00 a.m.•17 views

EulerOS 2.0 SP13 : avahi (EulerOS-SA-2025-2514)

According to the versions of the avahi package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A flaw was found in Avahi-daemon, which relies on fixed source ports for wide-area DNS queries. This issue simplifies attacks where malicious DNS...

5.3CVSS6.6AI score0.00666EPSS
SaveExploits0References3
OpenVAS
OpenVAS
•added 2025/12/11 12:00 a.m.•6 views

Huawei EulerOS: Security Advisory for kernel (EulerOS-SA-2025-2483)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS6.4AI score0.00644EPSS
SaveExploits3References2
osv_cve
osv_cve
•added 2025/12/10 10:16 p.m.•17 views

CVE-2023-53776

Screen SFT DAB 1.9.3 contains an authentication bypass vulnerability that allows attackers to exploit weak session management by reusing IP-bound session identifiers. Attackers can issue unauthorized requests to the device management API by leveraging the session binding mechanism to perform...

8.8CVSS5.9AI score0.0048EPSS
SaveExploits1References6
Vulnrichment
Vulnrichment
•added 2025/12/10 9:12 p.m.•10 views

CVE-2023-53776 Screen SFT DAB 1.9.3 Authentication Bypass via Session Management Weakness

Screen SFT DAB 1.9.3 contains an authentication bypass vulnerability that allows attackers to exploit weak session management by reusing IP-bound session identifiers. Attackers can issue unauthorized requests to the device management API by leveraging the session binding mechanism to perform...

8.7CVSS5.9AI score0.0048EPSS
SaveExploits1References6
Cvelist
Cvelist
•added 2025/12/10 9:12 p.m.•43 views

CVE-2023-53776 Screen SFT DAB 1.9.3 Authentication Bypass via Session Management Weakness

Screen SFT DAB 1.9.3 contains an authentication bypass vulnerability that allows attackers to exploit weak session management by reusing IP-bound session identifiers. Attackers can issue unauthorized requests to the device management API by leveraging the session binding mechanism to perform...

8.7CVSS0.0048EPSS
SaveExploits1References6
CVE
CVE
•added 2025/12/10 9:12 p.m.•33 views

CVE-2023-53776

CVE-2023-53776 affects Screen SFT DAB 1.9.3, describing an authentication bypass caused by weak session management and reuse of IP-bound session identifiers. This enables attackers to issue unauthorized requests to the device management API and perform critical operations on the transmitter. The ...

8.8CVSS5.9AI score0.0048EPSS
SaveExploits1References6Affected Software1
EUVD
EUVD
•added 2025/12/10 3:31 p.m.•22 views

EUVD-2025-202420

Authorization Bypass Through User-Controlled Key vulnerability in Im Park Information Technology, Electronics, Press, Publishing and Advertising, Education Ltd. Co. DijiDemi allows Exploitation of Trusted Identifiers.This issue affects DijiDemi: through 28.11.2025...

4.3CVSS6.4AI score0.00218EPSS
SaveExploits0References2
NVD
NVD
•added 2025/12/10 3:15 p.m.•25 views

CVE-2025-13125

Authorization Bypass Through User-Controlled Key vulnerability in Im Park Information Technology, Electronics, Press, Publishing and Advertising, Education Ltd. Co. DijiDemi allows Exploitation of Trusted Identifiers. This issue affects DijiDemi: through 28.11.2025...

4.3CVSS0.00218EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2025/12/10 2:11 p.m.•14 views

CVE-2025-13125

Authorization Bypass Through User-Controlled Key vulnerability in Im Park Information Technology, Electronics, Press, Publishing and Advertising, Education Ltd. Co. DijiDemi allows Exploitation of Trusted Identifiers. This issue affects DijiDemi: through 28.11.2025...

4.3CVSS5.8AI score0.00218EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2025/12/10 2:11 p.m.•66 views

CVE-2025-13125 IDOR in Im Park's DijiDemi

Authorization Bypass Through User-Controlled Key vulnerability in Im Park Information Technology, Electronics, Press, Publishing and Advertising, Education Ltd. Co. DijiDemi allows Exploitation of Trusted Identifiers. This issue affects DijiDemi: through 28.11.2025...

4.3CVSS0.00218EPSS
SaveExploits0References2
NVD
NVD
•added 2025/12/10 9:15 a.m.•22 views

CVE-2025-13955

Predictable default Wi-Fi Password in Access Point functionality in EZCast Pro II before version 1.17478.177 allows attackers in Wi-Fi range to gain access to the dongle by calculating the default password from observable device identifiers...

9.3CVSS0.00186EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2025/12/10 8:30 a.m.•10 views

CVE-2025-13955 Predictable Default Wi-Fi Password in EZCast Pro II Dongle

Predictable default Wi-Fi Password in Access Point functionality in EZCast Pro II before version 1.17478.177 allows attackers in Wi-Fi range to gain access to the dongle by calculating the default password from observable device identifiers...

9.3CVSS5.9AI score0.00186EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2025/12/10 8:30 a.m.•12 views

CVE-2025-13955

Predictable default Wi-Fi Password in Access Point functionality in EZCast Pro II before version 1.17478.177 allows attackers in Wi-Fi range to gain access to the dongle by calculating the default password from observable device identifiers...

9.3CVSS5.8AI score0.00186EPSS
SaveExploits0References3
CVE
CVE
•added 2025/12/10 8:30 a.m.•41 views

CVE-2025-13955

CVE-2025-13955 describes a vulnerability in EZCast Pro II dongle (software version 1.17478.146) where the Wi‑Fi access point password is predictable. Attackers within Wi‑Fi range can deduce the default password from observable device identifiers, granting access to the dongle. The vulnerability i...

9.3CVSS5.9AI score0.00186EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/12/10 8:30 a.m.•19 views

EUVD-2025-202407

Predictable default Wi-Fi Password in Access Point functionality in EZCast Pro II version 1.17478.146 allows attackers in Wi-Fi range to gain access to the dongle by calculating the default password from observable device identifiers...

9.3CVSS6.7AI score0.00186EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2025/12/10 8:30 a.m.•51 views

CVE-2025-13955 Predictable Default Wi-Fi Password in EZCast Pro II Dongle

Predictable default Wi-Fi Password in Access Point functionality in EZCast Pro II before version 1.17478.177 allows attackers in Wi-Fi range to gain access to the dongle by calculating the default password from observable device identifiers...

9.3CVSS0.00186EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2025/12/10 12:00 a.m.•19 views

PT-2025-50310

Name of the Vulnerable Software and Affected Versions EZCast Pro II version 1.17478.146 Description The Access Point functionality in EZCast Pro II version 1.17478.146 has a predictable default Wi-Fi password. Attackers within Wi-Fi range can calculate the default password from observable device...

9.3CVSS5.8AI score0.00186EPSS
SaveExploits0References9
CNNVD
CNNVD
•added 2025/12/10 12:00 a.m.•20 views

I am Park DijiDemi – there is a security vulnerability

Im Park DijiDemi is an educational software from Im Park Turkey. A security vulnerability exists in Im Park DijiDemi version 28.11.2025 and earlier, which stems from a user control key leading to an authorization bypass that could exploit trusted identifiers...

4.3CVSS5.8AI score0.00218EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/12/10 12:00 a.m.•12 views

CVE-2025-13125: Authorization Bypass Through User-Controlled Key

Authorization Bypass Through User-Controlled Key vulnerability in Im Park Information Technology, Electronics, Press, Publishing and Advertising, Education Ltd. Co. DijiDemi allows Exploitation of Trusted Identifiers. This issue affects DijiDemi: through 28.11.2025...

4.3CVSS5.8AI score0.00218EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2025/12/10 12:00 a.m.•12 views

Debian dsa-6078 : firefox-esr - security update

The remote Debian 12 / 13 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-6078 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-6078-1 [email protected]...

9.8CVSS7.4AI score0.00596EPSS
SaveExploits2References23
Rows per page
Query Builder