PT-2025-42042

Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description A flaw exists in Windows Error Reporting due to improper input validation. This could allow an authorized attacker to gain elevated privileges on a local system. Recommendations At the moment...

PT-2025-42131

Name of the Vulnerable Software and Affected Versions Microsoft Windows affected versions not specified Description An improper access control issue exists in the Microsoft Windows Search Component. This can allow an authorized attacker to cause a denial of service locally. Recommendations At the...

PT-2025-42149

Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description A double free condition exists in the Windows Bluetooth Service. This allows an authorized attacker to elevate privileges locally. Recommendations At the moment, there is no information about...

PT-2025-42052

Name of the Vulnerable Software and Affected Versions Windows Ancillary Function Driver for WinSock affected versions not specified Description An improper access control issue exists in the Windows Ancillary Function Driver for WinSock. This allows a local attacker who is already authorized to...

PT-2025-42143

Name of the Vulnerable Software and Affected Versions Xbox Gaming Services affected versions not specified Description An issue involving improper link resolution before file access, known as 'link following', exists in Xbox Gaming Services. This allows an authorized attacker to elevate privilege...

PT-2025-42083

Name of the Vulnerable Software and Affected Versions Connected Devices Platform Service Cdpsvc affected versions not specified Description A heap-based buffer overflow exists in the Connected Devices Platform Service Cdpsvc. This allows an authorized attacker to elevate privileges locally...

CVE-2025-11639

A vulnerability has been found in Tomofun Furbo 360 and Furbo Mini. The impacted element is an unknown function of the file collectlogs.sh of the component Debug Log S3 Bucket Handler. The manipulation leads to insecure storage of sensitive information. An attack has to be approached locally. The...

CVE-2025-11666

A flaw has been found in Tenda RP3 Pro up to 22.5.7.93. This impacts an unknown function of the file forceupgrade.sh of the component Firmware Update Handler. Executing manipulation of the argument currentforceupgradepwd can lead to use of hard-coded password. The attack can only be executed...

CVE-2025-11666

CVE-2025-11666 affects Tenda RP3 Pro firmware up to version 22.5.7.93. The vulnerability resides in the Firmware Update Handler’s force_upgrade.sh, where manipulating the current_force_upgrade_pwd argument can trigger use of a hard-coded password. Local attack required. Public exploit exists. Rem...

CVE-2025-11666 Tenda RP3 Pro Firmware Update force_upgrade.sh hard-coded password

A flaw has been found in Tenda RP3 Pro up to 22.5.7.93. This impacts an unknown function of the file forceupgrade.sh of the component Firmware Update Handler. Executing manipulation of the argument currentforceupgradepwd can lead to use of hard-coded password. The attack can only be executed...

EUVD-2025-33912

A vulnerability was found in Tomofun Furbo 360 and Furbo Mini. The affected element is an unknown function of the component Root Account Handler. Performing manipulation results in use of hard-coded password. The attack must be initiated from a local position. The attack is considered to have hig...

CVE-2025-11649 Tomofun Furbo 360/Furbo Mini Root Account hard-coded password

A vulnerability was found in Tomofun Furbo 360 and Furbo Mini. The affected element is an unknown function of the component Root Account Handler. Performing manipulation results in use of hard-coded password. The attack must be initiated from a local position. The attack is considered to have hig...

EUVD-2025-33902

A vulnerability has been found in Tomofun Furbo 360 and Furbo Mini. The impacted element is an unknown function of the file collectlogs.sh of the component Debug Log S3 Bucket Handler. The manipulation leads to insecure storage of sensitive information. An attack has to be approached locally. The...

CVE-2025-11639 Tomofun Furbo 360/Furbo Mini Debug Log S3 Bucket collect_logs.sh sensitive information

A vulnerability has been found in Tomofun Furbo 360 and Furbo Mini. The impacted element is an unknown function of the file collectlogs.sh of the component Debug Log S3 Bucket Handler. The manipulation leads to insecure storage of sensitive information. An attack has to be approached locally. The...

CVE-2025-11639 Tomofun Furbo 360/Furbo Mini Debug Log S3 Bucket collect_logs.sh sensitive information

A vulnerability has been found in Tomofun Furbo 360 and Furbo Mini. The impacted element is an unknown function of the file collectlogs.sh of the component Debug Log S3 Bucket Handler. The manipulation leads to insecure storage of sensitive information. An attack has to be approached locally. The...

Tomofun Furbo 360和Tomofun Furbo Mini 安全漏洞

Tomofun Furbo 360 and Tomofun Furbo Mini are both smart pet cameras from Tomofun, a company based in Taiwan, China. A security vulnerability exists in Tomofun Furbo 360 FB0035FW036 and earlier versions and Tomofun Furbo Mini MC0020FW074 and earlier versions, which stems from the insecure storage ...

Tomofun Furbo 360和Tomofun Furbo Mini 安全漏洞

Tomofun Furbo 360 and Tomofun Furbo Mini are both smart pet cameras from Tomofun Corporation of Taiwan, China. A security vulnerability exists in Tomofun Furbo 360 and Tomofun Furbo Mini, which stems from the use of hard-coded passwords in the Root Account Handler component, which could lead to a...

PT-2025-41737

Name of the Vulnerable Software and Affected Versions Tomofun Furbo 360 versions prior to FB0035 FW 036 Tomofun Furbo Mini versions prior to MC0020 FW 074 Description A security flaw exists in Tomofun Furbo 360 and Furbo Mini devices. The issue involves an unknown function within the Root Account...

EulerOS 2.0 SP11 : libtiff (EulerOS-SA-2025-2202)

According to the versions of the libtiff package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A vulnerability was found in LibTIFF up to 4.7.0. It has been rated as critical. This issue affects the function setrow of the file...

EulerOS 2.0 SP11 : ncurses (EulerOS-SA-2025-2206)

According to the versions of the ncurses packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A vulnerability has been found in GNU ncurses up to 6.5-20250322 and classified as problematic. This vulnerability affects the function...