Lucene search
+L

19 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/06/17 12:00 a.m.•1 views

CVE-2026-0092: Undefined Security Weakness

In Package Manager, there is a possible device lock controller bypass due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

10CVSS5.8AI score0.00218EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2025/06/01 12:35 a.m.•17 views

CVE-2025-44614

Tinxy WiFi Lock Controller v1 RF was discovered to store users' sensitive information, including credentials and mobile phone numbers, in plaintext...

7.5CVSS7.2AI score0.0024EPSS
SaveExploits0References1
NVD
NVD
•added 2025/05/30 3:15 a.m.•21 views

CVE-2025-44614

Tinxy WiFi Lock Controller v1 RF was discovered to store users' sensitive information, including credentials and mobile phone numbers, in plaintext...

7.5CVSS0.0024EPSS
SaveExploits0References1
NVD
NVD
•added 2025/05/30 3:15 a.m.•22 views

CVE-2025-44619

Tinxy WiFi Lock Controller v1 RF was discovered to be configured to transmit on an open Wi-Fi network, allowing attackers to join the network without authentication...

9.1CVSS0.00458EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/05/30 12:00 a.m.•2 views

CVE-2025-44614: Cleartext Storage of Sensitive Information

Tinxy WiFi Lock Controller v1 RF was discovered to store users' sensitive information, including credentials and mobile phone numbers, in plaintext...

7.5CVSS5.7AI score0.0024EPSS
SaveExploits0References1
CVE
CVE
•added 2025/05/30 12:00 a.m.•78 views

CVE-2025-44619

The Tinxy WiFi Lock Controller v1 RF is vulnerable due to a configuration flaw that causes it to transmit on an open Wi-Fi network . This improper access control allows unauthorized attackers to join the network without any authentication. To mitigate this risk, it is recommended to configure the...

9.1CVSS7.4AI score0.00458EPSS
SaveExploits0References3Affected Software1
CVE
CVE
•added 2025/05/30 12:00 a.m.•82 views

CVE-2025-44612

The Tinxy WiFi Lock Controller v1 RF is vulnerable to a security flaw where it transmits sensitive information, such as device credentials and control information , in plaintext . This lack of encryption allows an attacker to perform a man-in-the-middle attack to intercept and access this data. A...

5.9CVSS7AI score0.00195EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2025/05/30 12:00 a.m.•34 views

CVE-2025-44619

Tinxy WiFi Lock Controller v1 RF was discovered to be configured to transmit on an open Wi-Fi network, allowing attackers to join the network without authentication...

0.00458EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/05/30 12:00 a.m.•6 views

CVE-2025-44619: Improper Access Control

Tinxy WiFi Lock Controller v1 RF was discovered to be configured to transmit on an open Wi-Fi network, allowing attackers to join the network without authentication...

9.1CVSS5.8AI score0.00458EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2025/05/30 12:00 a.m.•16 views

PT-2025-23234 · Unknown · Tinxy Wifi Lock Controller

Name of the Vulnerable Software and Affected Versions: Tinxy WiFi Lock Controller version v1 RF Description: The issue concerns the storage of sensitive user information, including credentials and mobile phone numbers, in plaintext. Recommendations: For Tinxy WiFi Lock Controller version v1 RF,...

7.5CVSS6.2AI score0.0024EPSS
SaveExploits0References9
Vulnrichment
Vulnrichment
•added 2025/05/30 12:00 a.m.•8 views

CVE-2025-44614

Tinxy WiFi Lock Controller v1 RF was discovered to store users' sensitive information, including credentials and mobile phone numbers, in plaintext...

7.4AI score0.0024EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/05/30 12:00 a.m.•26 views

CVE-2025-44614

Tinxy WiFi Lock Controller v1 RF was discovered to store users' sensitive information, including credentials and mobile phone numbers, in plaintext...

0.0024EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/05/30 12:00 a.m.•15 views

Tinxy WiFi Lock Controller v1 RF 访问控制错误漏洞

Tinxy WiFi Lock Controller v1 RF is a smart door lock from Tinxy. A security vulnerability exists in the Tinxy WiFi Lock Controller v1 RF, which originates from being configured for an open Wi-Fi network and could lead to unauthenticated network access...

9.1CVSS6.7AI score0.00458EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2025/05/30 12:00 a.m.•8 views

CVE-2025-44612

Tinxy WiFi Lock Controller v1 RF was discovered to transmit sensitive information in plaintext, including control information and device credentials, allowing attackers to possibly intercept and access sensitive information via a man-in-the-middle attack...

7AI score0.00195EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/05/30 12:00 a.m.•1 views

CVE-2025-44612: Cleartext Transmission of Sensitive Information

Tinxy WiFi Lock Controller v1 RF was discovered to transmit sensitive information in plaintext, including control information and device credentials, allowing attackers to possibly intercept and access sensitive information via a man-in-the-middle attack...

5.9CVSS5.7AI score0.00195EPSS
SaveExploits0References1
CVE
CVE
•added 2025/05/30 12:00 a.m.•72 views

CVE-2025-44614

The Tinxy WiFi Lock Controller v1 RF is vulnerable to cleartext storage of sensitive information . The device stores user credentials and mobile phone numbers in plaintext, which may lead to information leakage. To mitigate this risk, it is recommended to restrict access to the device, avoid usin...

7.5CVSS7.4AI score0.0024EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
•added 2025/05/30 12:00 a.m.•17 views

PT-2025-23235

Name of the Vulnerable Software and Affected Versions Tinxy WiFi Lock Controller version v1 RF Description The issue allows attackers to join the network without authentication because the device is configured to transmit on an open Wi-Fi network. Recommendations For Tinxy WiFi Lock Controller...

9.1CVSS6AI score0.00458EPSS
SaveExploits0References14
CNNVD
CNNVD
•added 2025/05/30 12:00 a.m.•14 views

Tinxy WiFi Lock Controller v1 RF 安全漏洞

Tinxy WiFi Lock Controller v1 RF is a smart door lock from Tinxy. A security vulnerability exists in Tinxy WiFi Lock Controller v1 RF, which originates from transmitting sensitive information in clear text and could lead to a man-in-the-middle attack...

5.9CVSS6.2AI score0.00195EPSS
SaveExploits0References2
Pen Test Partners Blog
Pen Test Partners Blog
•added 2024/01/10 11:24 a.m.•29 views

Cockpit door lock auto-unlock is no surprise

TL;DR Through reverse engineering a cockpit door lock controller several years ago, we’ve known about the auto-unlatch issue We couldn’t publish owing to the risk to flight safety, even though some airplane type manuals already described the behaviour in a depressurisation event Now that the Alas...

7.5AI score
SaveExploits0
Rows per page
Query Builder