19 matches found
CVE-2026-0092: Undefined Security Weakness
In Package Manager, there is a possible device lock controller bypass due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2025-44614
Tinxy WiFi Lock Controller v1 RF was discovered to store users' sensitive information, including credentials and mobile phone numbers, in plaintext...
CVE-2025-44614
Tinxy WiFi Lock Controller v1 RF was discovered to store users' sensitive information, including credentials and mobile phone numbers, in plaintext...
CVE-2025-44619
Tinxy WiFi Lock Controller v1 RF was discovered to be configured to transmit on an open Wi-Fi network, allowing attackers to join the network without authentication...
CVE-2025-44614: Cleartext Storage of Sensitive Information
Tinxy WiFi Lock Controller v1 RF was discovered to store users' sensitive information, including credentials and mobile phone numbers, in plaintext...
CVE-2025-44619
The Tinxy WiFi Lock Controller v1 RF is vulnerable due to a configuration flaw that causes it to transmit on an open Wi-Fi network . This improper access control allows unauthorized attackers to join the network without any authentication. To mitigate this risk, it is recommended to configure the...
CVE-2025-44612
The Tinxy WiFi Lock Controller v1 RF is vulnerable to a security flaw where it transmits sensitive information, such as device credentials and control information , in plaintext . This lack of encryption allows an attacker to perform a man-in-the-middle attack to intercept and access this data. A...
CVE-2025-44619
Tinxy WiFi Lock Controller v1 RF was discovered to be configured to transmit on an open Wi-Fi network, allowing attackers to join the network without authentication...
CVE-2025-44619: Improper Access Control
Tinxy WiFi Lock Controller v1 RF was discovered to be configured to transmit on an open Wi-Fi network, allowing attackers to join the network without authentication...
PT-2025-23234 · Unknown · Tinxy Wifi Lock Controller
Name of the Vulnerable Software and Affected Versions: Tinxy WiFi Lock Controller version v1 RF Description: The issue concerns the storage of sensitive user information, including credentials and mobile phone numbers, in plaintext. Recommendations: For Tinxy WiFi Lock Controller version v1 RF,...
CVE-2025-44614
Tinxy WiFi Lock Controller v1 RF was discovered to store users' sensitive information, including credentials and mobile phone numbers, in plaintext...
CVE-2025-44614
Tinxy WiFi Lock Controller v1 RF was discovered to store users' sensitive information, including credentials and mobile phone numbers, in plaintext...
Tinxy WiFi Lock Controller v1 RF 访问控制错误漏洞
Tinxy WiFi Lock Controller v1 RF is a smart door lock from Tinxy. A security vulnerability exists in the Tinxy WiFi Lock Controller v1 RF, which originates from being configured for an open Wi-Fi network and could lead to unauthenticated network access...
CVE-2025-44612
Tinxy WiFi Lock Controller v1 RF was discovered to transmit sensitive information in plaintext, including control information and device credentials, allowing attackers to possibly intercept and access sensitive information via a man-in-the-middle attack...
CVE-2025-44612: Cleartext Transmission of Sensitive Information
Tinxy WiFi Lock Controller v1 RF was discovered to transmit sensitive information in plaintext, including control information and device credentials, allowing attackers to possibly intercept and access sensitive information via a man-in-the-middle attack...
CVE-2025-44614
The Tinxy WiFi Lock Controller v1 RF is vulnerable to cleartext storage of sensitive information . The device stores user credentials and mobile phone numbers in plaintext, which may lead to information leakage. To mitigate this risk, it is recommended to restrict access to the device, avoid usin...
PT-2025-23235
Name of the Vulnerable Software and Affected Versions Tinxy WiFi Lock Controller version v1 RF Description The issue allows attackers to join the network without authentication because the device is configured to transmit on an open Wi-Fi network. Recommendations For Tinxy WiFi Lock Controller...
Tinxy WiFi Lock Controller v1 RF 安全漏洞
Tinxy WiFi Lock Controller v1 RF is a smart door lock from Tinxy. A security vulnerability exists in Tinxy WiFi Lock Controller v1 RF, which originates from transmitting sensitive information in clear text and could lead to a man-in-the-middle attack...
Cockpit door lock auto-unlock is no surprise
TL;DR Through reverse engineering a cockpit door lock controller several years ago, we’ve known about the auto-unlatch issue We couldn’t publish owing to the risk to flight safety, even though some airplane type manuals already described the behaviour in a depressurisation event Now that the Alas...