2500 matches found
The vulnerability of the Yealink Meeting Server lies in the lack of measures taken at the management level to ensure data hygiene, allowing attackers to execute arbitrary codes.
The vulnerability of the Yealink Meeting Server lies in the lack of measures taken at the management level to protect data. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands remotely...
📄 Mobile Mouse Server 3.6.3 Remote Code Execution
Mobile Mouse Server for macOS exposes a TCP control interface on port 9090, which accepts plaintext commands to simulate keyboard input and launch applications. By default, no authentication is required, allowing a remote attacker to fully control the target system. Version 3.6.3 is affected...
CISA Warns of Remote Control Flaws in SinoTrack GPS Trackers
The US CISA reports critical vulnerabilities in SinoTrack GPS devices that could let attackers remotely control vehicles and track locations. Discover the vulnerabilities and essential steps to secure your device...
SinoTrack GPS Devices Vulnerable to Remote Vehicle Control via Default Passwords
Two security vulnerabilities have been disclosed in SinoTrack GPS devices that could be exploited to control certain remote functions on connected vehicles and even track their locations. "Successful exploitation of these vulnerabilities could allow an attacker to access device profiles without...
CVE-2025-5743
CWE-78: Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability exists that could cause remote control over the charging station when an authenticated user modifies configuration parameters on the web server...
CVE-2025-5743
The CVE-2025-5743 entry concerns Schneider Electric EVLink WallBox (home charging station) with an OS command injection flaw (CWE-78). The vulnerability arises from improper neutralization of OS command elements, enabling remote control of the charging station when an authenticated user changes c...
CVE-2025-5743
CWE-78: Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability exists that could cause remote control over the charging station when an authenticated user modifies configuration parameters on the web server...
CVE-2025-5743
CWE-78: Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability exists that could cause remote control over the charging station when an authenticated user modifies configuration parameters on the web server...
PT-2025-24625
Name of the Vulnerable Software and Affected Versions The product name cannot be determined. Description A vulnerability exists that could cause remote control over the charging station when an authenticated user modifies configuration parameters on the web server. This issue is related to improp...
Schneider Electric EVLink WallBox 操作系统命令注入漏洞
The Schneider Electric EVLink WallBox is a home charging station from the French company Schneider Electric. The Schneider Electric EVLink WallBox suffers from an operating system command injection vulnerability that originates from improper neutralization of special elements in OS commands, whic...
CVE-2025-5743: Improper Neutralization of Special Elements used in an OS Command
CWE-78: Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability exists that could cause remote control over the charging station when an authenticated user modifies configuration parameters on the web server...
Siemens Energy Services
SUMMARY Siemens Energy Services previously known as Managed Applications and Services, sell solutions using Elspec G5 Digital Fault Recorder which contains default credentials with admin privileges. A client configuration with remote access could allow an attacker to gain remote control of the...
MAL-2025-4726 Malicious code in connectnodewebclient (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 72fc085bcccf174a0e94231d33f82e278941f6a8b7d9fa72f1f83ae85902b993 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
The vulnerability of charge devices for VersiCharge AC Series electric vehicles, related to unsafe initialization of resources, allows a violator to gain unauthorized access to control the device.
The vulnerability of the VersiCharge AC Series electric vehicle charging devices is related to unsafe initialization of the resource. Exploiting this vulnerability can allow a malicious actor to remotely access and gain unauthorized control over the device...
The vulnerability of the SolarWinds DameWare Mini Remote Control software lies in its insecure management of privileges, allowing a malicious individual to escalate their privileges.
The vulnerability of the SolarWinds DameWare Mini Remote Control software-related remote access control tool is related to insecure management of privileges. Exploiting this vulnerability can allow attackers to enhance their privileges...
Malicious Package
Overview coloramapkgsw is a malicious package. This package contains payloads with Windows and Linux variants that access and exfiltrate sensitive configuration information, establish remote control / remote access for the attacker, establish persistence and “command and control” C2 mechanisms...
CVE-2025-26396
The SolarWinds Dameware Mini Remote Control was determined to be affected by Incorrect Permissions Local Privilege Escalation Vulnerability. This vulnerability requires local access and a valid low privilege account to be susceptible to this vulnerability...
CVE-2025-26396 SolarWinds Dameware Mini Remote Control Service Incorrect Permissions Local Privilege Escalation Vulnerability
The SolarWinds Dameware Mini Remote Control was determined to be affected by Incorrect Permissions Local Privilege Escalation Vulnerability. This vulnerability requires local access and a valid low privilege account to be susceptible to this vulnerability...
CVE-2025-26396
SolarWinds DameWare Mini Remote Control is affected by an Incorrect Permissions Local Privilege Escalation vulnerability. The issue stems from improper permissions on a product component (installer/service) that allows a local attacker with a low-privilege account to escalate privileges, potentia...