CVE-2025-6522 TrendMakers Sight Bulb Pro Command Injection

Unauthenticated users on an adjacent network with the Sight Bulb Pro can run shell commands as root through a vulnerable proprietary TCP protocol available on Port 16668. This vulnerability allows an attacker to run arbitrary commands on the Sight Bulb Pro by passing a well formed JSON string...

CVE-2025-6521 TrendMakers Sight Bulb Pro Use of a Broken or Risky Cryptographic Algorithm

During the initial setup of the device the user connects to an access point broadcast by the Sight Bulb Pro. During the negotiation, AES Encryption keys are passed in cleartext. If captured, an attacker may be able to decrypt communications between the management app and the Sight Bulb Pro which...

CVE-2025-6521

CVE-2025-6521 affects the TrendMakers Sight Bulb Pro. During initial setup, AES keys are passed in cleartext as the device negotiates with an access point, enabling an attacker on an adjacent network to decrypt management app communications and potentially access credentials. The CISA ICS advisor...

CVE-2025-6521 TrendMakers Sight Bulb Pro Use of a Broken or Risky Cryptographic Algorithm

During the initial setup of the device the user connects to an access point broadcast by the Sight Bulb Pro. During the negotiation, AES Encryption keys are passed in cleartext. If captured, an attacker may be able to decrypt communications between the management app and the Sight Bulb Pro which...

CVE-2025-45729

D-Link DIR-823-Pro 1.02 has improper permission control, allowing unauthorized users to turn on and access Telnet services...

CVE-2025-45729

D-Link DIR-823-Pro 1.02 has improper permission control, allowing unauthorized users to turn on and access Telnet services...

WordPress plugin Drag and Drop Multiple File Upload (Pro) - WooCommerce 代码问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL. WordPress plugin is an application plugin. WordPress plugin Drag and Drop...

CVE-2025-45729

D-Link DIR-823-Pro 1.02 has improper permission control, allowing unauthorized users to turn on and access Telnet services...

Trend Makers Sight Bulb Pro 加密问题漏洞

Trend Makers Sight Bulb Pro is a camera from Trend Makers, Inc. The Trend Makers Sight Bulb Pro suffers from an encryption issue vulnerability that stems from the plaintext transfer of an AES key during initial setup, which could lead to the decryption of communications and the disclosure of...

D-Link DIR-823-Pro 安全漏洞

D-Link DIR-823-Pro is a dual-band intelligent wireless router with quad-antenna design, supporting 802.11ac Gigabit Wi-Fi technology and wireless rate up to 1200Mbps, which can meet the high bandwidth demand for HD video playback, online games and so on. The D-Link DIR-823-Pro suffers from an...

Trend Makers Sight Bulb Pro 命令注入漏洞

Trend Makers Sight Bulb Pro is a webcam from Trend Makers, USA. The Trend Makers Sight Bulb Pro suffers from a command injection vulnerability that stems from a vulnerability in the TCP protocol on port 16668, which could result in an unauthenticated user executing arbitrary commands...

CVE-2025-45729

The CVE-2025-45729 entry affects D-Link DIR-823-Pro hardware (version 1.02) and is caused by improper permission control that allows unauthorized users to turn on and access Telnet services. The documented impact is low for confidentiality, integrity, and availability, with network access as the ...

PT-2025-27247 · Trendmakers · Trendmakers Sight Bulb Pro

Name of the Vulnerable Software and Affected Versions: TrendMakers Sight Bulb Pro affected versions not specified Description: The issue arises during the initial setup of the device, where the user connects to an access point broadcast by the Sight Bulb Pro. During this negotiation, AES Encrypti...

PT-2025-27248 · Unknown · Sight Bulb Pro

Name of the Vulnerable Software and Affected Versions: Sight Bulb Pro affected versions not specified Description: The issue allows unauthenticated users on an adjacent network to run shell commands as root through a vulnerable proprietary TCP protocol available on Port 16668. This enables an...

PT-2025-27230

Name of the Vulnerable Software and Affected Versions: D-Link DIR-823-Pro version 1.02 Description: The issue is related to improper permission control, which allows unauthorized users to turn on and access Telnet services. Recommendations: For D-Link DIR-823-Pro version 1.02, consider disabling...

CVE-2025-45729

D-Link DIR-823-Pro 1.02 has improper permission control, allowing unauthorized users to turn on and access Telnet services...

CVE-2025-39202

A vulnerability exists in in the Monitor Pro interface of the MicroSCADA X SYS600 product. An authenticated user with low privileges can see and overwrite files causing information leak and data corruption...

CISA Releases Two Industrial Control Systems Advisories

CISA released two Industrial Control Systems ICS advisories on June 26, 2025. These advisories provide timely information about current security issues, vulnerabilities, and exploits surrounding ICS. ICSA-25-177-01 Mitsubishi Electric Air Conditioning Systems ICSA-25-177-02 TrendMakers Sight Bulb...

CVE-2025-6532

A vulnerability classified as problematic was found in NOYAFA/Xiami LF9 Pro up to 20250611. Affected by this vulnerability is an unknown functionality of the component RTSP Live Video Stream Endpoint. The manipulation leads to improper access controls. The attack can only be initiated within the...

Pro-Iranian Hacktivist Group Leaks Personal Records from the 2024 Saudi Games

Thousands of personal records allegedly linked to athletes and visitors of the Saudi Games have been published online by a pro-Iranian hacktivist group called Cyber Fattah. Cybersecurity company Resecurity said the breach was announced on Telegram on June 22, 2025, in the form of SQL database...