CVE-2025-47823

Flock Safety LPR License Plate Reader devices with firmware through 2.2 have a hardcoded password for a system...

CVE-2025-47822

Flock Safety LPR devices running firmware up to 2.2 expose an on-chip debug interface with improper access control. This affects the LPR module (license plate reader) and can impact confidentiality, integrity, and availability as indicated by CVSS bases (high impact across metrics). The connected...

CVE-2025-47824

CVE-2025-47824 concerns Flock Safety LPR devices with firmware up to 2.2, where the underlying issue is cleartext storage of code. This is documented across multiple sources (NVD/Red Hat/CERT style advisories and PT-2025-27042). The root cause is not fully elaborated beyond the existence of clear...

CVE-2025-47822

Flock Safety LPR License Plate Reader devices with firmware through 2.2 have an on-chip debug interface with improper access control...

CVE-2025-47824

Flock Safety LPR License Plate Reader devices with firmware through 2.2 have cleartext storage of code...

Flock Safety LPR 安全漏洞

Flock Safety LPR is a license plate recognition product from Flock Safety USA. A security vulnerability exists in Flock Safety LPR version 2.2 and prior versions, which stems from the explicit storage of code...

CVE-2025-47823

CVE-2025-47823 affects Flock Safety LPR devices with firmware up to 2.2, where a hardcoded password for a system exists. The issue enables unauthorized access via physical attack vector (attackVector: PHYSICAL) with low complexity, no privileges required, and impacts confidentiality (HIGH) per th...

Flock Safety LPR 安全漏洞

Flock Safety LPR is a license plate recognition product from Flock Safety USA. A security vulnerability exists in Flock Safety LPR version 2.2 and prior versions that stems from the system's use of hard-coded passwords...

Selea多款产品 安全漏洞

Selea Targa iZero and others are an optical character recognition camera for automatic license plate recognition from Selea, Italy. A security vulnerability exists in several Selea products, which stems from the /common/getfile.php script that does not validate the file parameter, potentially...

A Hacker May Have Deepfaked Trump’s Chief of Staff in a Phishing Campaign

Plus: An Iranian man pleads guilty to a Baltimore ransomware attack, Russia’s nuclear blueprints get leaked, a Texas sheriff uses license plate readers to track a woman who got an abortion, and more...

CVE-2023-21410

User provided input is not sanitized on the AXIS License Plate Verifier specific “api.cgi” allowing for arbitrary code execution...

CVE-2023-34245

@udecode/plate-link is the link handler for the udecode/plate rich-text editor plugin system for Slate & React. Affected versions of the link plugin and link UI component do not sanitize URLs to prevent use of the javascript: scheme. As a result, links with JavaScript URLs can be inserted into th...

CVE-2023-21412

User provided input is not sanitized on the AXIS License Plate Verifier specific “search.cgi” allowing for SQL injections...

MAL-2025-3861 Malicious code in @okdev/boiler_plate (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 03430707bf9707317455858dacbbd05a07b53ddf958d87ce767b27067864b864 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @okdev/boiler_plate (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 03430707bf9707317455858dacbbd05a07b53ddf958d87ce767b27067864b864 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2024-40631

Plate media is an open source, rich-text editor for React. Editors that use MediaEmbedElement and pass custom urlParsers to the useMediaState hook may be vulnerable to XSS if a custom parser allows javascript:, data: or vbscript: URLs to be embedded. Editors that do not use urlParsers and consume...

License Plate Readers Are Leaking Real-Time Video Feeds and Vehicle Data

Misconfigured license-plate-recognition systems reveal the livestreams of individual cameras and the wealth of data they collect about every vehicle that passes by them...

Mapping License Plate Scanners in the US

DeFlock is a crowd-sourced project to map license plate scanners. It only records the fixed scanners, of course. The mobile scanners on cars are not mapped...

Are Automatic License Plate Scanners Constitutional?

An advocacy groups is filing a Fourth Amendment challenge against automatic license plate readers. "The City of Norfolk, Virginia, has installed a network of cameras that make it functionally impossible for people to drive anywhere without having their movements tracked, photographed, and stored ...

License Plate Readers Are Creating a US-Wide Database of More Than Just Cars

From Trump campaign signs to Planned Parenthood bumper stickers, license plate readers around the US are creating searchable databases that reveal Americans’ political leanings and more...