PT-2025-31981 · Nagios Enterprises · Graph Explorer +1

Name of the Vulnerable Software and Affected Versions: Nagios XI versions prior to 1.3 Description: Nagios XI Network Monitor prior to Graph Explorer component version 1.3 contains a command injection issue in visApi.php. An authenticated user can inject system commands via unsanitized parameters...

Nagios XI Network Monitor 安全漏洞

Nagios XI Network Monitor is an IT infrastructure monitoring software and alerting solution from Nagios Corporation, USA. A security vulnerability exists in Nagios XI Network Monitor versions prior to 1.3, which stems from an uncleaned host parameter that could lead to command injection...

The vulnerability of the mt7996_set_monitor() function in the Linux kernel’s Wi-Fi component allows a hacker to trigger a service failure.

The vulnerability of the mt7996setmonitor function in the Linux kernel’s Wi-Fi component is related to the assignment of a null pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...

CVE-2025-4395

Medtronic MyCareLink Patient Monitor has a built-in user account with an empty password, which allows an attacker with physical access to log in with no password and access modify system functionality. This issue affects MyCareLink Patient Monitor models 24950 and 24952: before June 25, 2025...

CVE-2025-4394

Medtronic MyCareLink Patient Monitor uses an unencrypted filesystem on internal storage, which allows an attacker with physical access to read and modify files. This issue affects MyCareLink Patient Monitor models 24950 and 24952: before June 25, 2025...

CVE-2025-4393

Medtronic MyCareLink Patient Monitor has an internal service that deserializes data, which allows a local attacker to interact with the service by crafting a binary payload to crash the service or elevate privileges. This issue affects MyCareLink Patient Monitor models 24950 and 24952: before Jun...

CVE-2025-45702

SoftPerfect Pty Ltd Connection Quality Monitor v1.1 was discovered to store all credentials in plaintext...

Security Bulletin: A security vulnerability has been identified in IBM WebSphere Application Server shipped with IBM Business Monitor (CVE-2025-36097)

Summary IBM WebSphere Application Server is shipped as a component of Business Monitor. Information about a security vulnerability affecting WebSphere Application Server has been published in a security bulletin. Vulnerability Details Refer to the security bulletins listed in the Remediation/Fixe...

CVE-2025-45702

SoftPerfect Pty Ltd Connection Quality Monitor v1.1 was discovered to store all credentials in plaintext...

CVE-2025-45702

SoftPerfect Pty Ltd Connection Quality Monitor v1.1 was discovered to store all credentials in plaintext...

CVE-2025-4393

Medtronic MyCareLink Patient Monitor has an internal service that deserializes data, which allows a local attacker to interact with the service by crafting a binary payload to crash the service or elevate privileges. This issue affects MyCareLink Patient Monitor models 24950 and 24952: before Jun...

CVE-2025-4395

Medtronic MyCareLink Patient Monitor has a built-in user account with an empty password, which allows an attacker with physical access to log in with no password and access modify system functionality. This issue affects MyCareLink Patient Monitor models 24950 and 24952: before June 25, 2025...

CVE-2025-4395 Medtronic MyCareLink Patient Monitor Empty Password Vulnerability

Medtronic MyCareLink Patient Monitor has a built-in user account with an empty password, which allows an attacker with physical access to log in with no password and access modify system functionality. This issue affects MyCareLink Patient Monitor models 24950 and 24952: before June 25, 2025...

CVE-2025-4395

Medtronic MyCareLink Patient Monitor (models 24950/24952) is affected by CVE-2025-4395 due to a built-in user account with an empty password, enabling a physically present attacker to log in without authentication and modify system functionality. Affected component: built-in user account on the d...

CVE-2025-4394

CVE-2025-4394 affects Medtronic MyCareLink Patient Monitor models 24950 and 24952. The root cause is an unencrypted filesystem on internal storage that allows a physical attacker with access to read and modify files. The CVSS 3.1 vector (AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) yields a base score of...

CVE-2025-4394

Medtronic MyCareLink Patient Monitor uses an unencrypted filesystem on internal storage, which allows an attacker with physical access to read and modify files. This issue affects MyCareLink Patient Monitor models 24950 and 24952: before June 25, 2025...

CVE-2025-4394 Medtronic MyCareLink Patient Monitor Unencrypted Filesystem Vulnerability

Medtronic MyCareLink Patient Monitor uses an unencrypted filesystem on internal storage, which allows an attacker with physical access to read and modify files. This issue affects MyCareLink Patient Monitor models 24950 and 24952: before June 25, 2025...

SoftPerfect Connection Quality Monitor 安全漏洞

SoftPerfect Connection Quality Monitor is a software from SoftPerfect Australia for monitoring the quality of Internet connections. A security vulnerability exists in SoftPerfect Connection Quality Monitor v1.1, which stems from credentials being stored in plaintext...

PT-2025-30630 · Medtronic · Mycarelink Patient Monitor

Name of the Vulnerable Software and Affected Versions: Medtronic MyCareLink Patient Monitor models 24950 and 24952 before June 25, 2025 Description: The Medtronic MyCareLink Patient Monitor contains a built-in user account with no password. This allows an attacker with physical access to log in...

PT-2025-30687 · Softperfect Pty · Connection Quality Monitor

Name of the Vulnerable Software and Affected Versions: SoftPerfect Pty Ltd Connection Quality Monitor version 1.1 Description: SoftPerfect Pty Ltd Connection Quality Monitor stores all credentials in plaintext. Recommendations: At the moment, there is no information about a newer version that...