623 matches found
PT-2025-49301
Name of the Vulnerable Software and Affected Versions Nextcloud talk versions prior to 20.1.8 Nextcloud talk versions prior to 21.1.2 Description A participant with chat permissions could delete poll drafts of other participants within a conversation by using their numeric ID. This issue affects...
Nextcloud Talk 安全漏洞
Nextcloud Talk is a self-hosted local audio/video and chat communication service from Nextcloud Germany. A security vulnerability exists in Nextcloud talk versions prior to 20.1.8 and prior to 21.1.2, which stems from the ability of a participant with chat privileges to delete drafts of other...
CVE-2025-66556: Authorization Bypass Through User-Controlled Key
Nextcloud talk is a video & audio conferencing app for Nextcloud. Prior to 20.1.8 and 21.1.2, a participant with chat permissions was able to delete poll drafts of other participants within the conversation based on their numeric ID. This vulnerability is fixed in 20.1.8 and 21.1.2...
EUVD-2025-200715
Malicious code in @hand-talk/yotta-icons npm...
Malicious code in @hand-talk/yotta-icons (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c045f3fe855bc71b3f6e34b9341c65fc06e25d0ee9ec32d4036dfb3da596e96 The package @hand-talk/yotta-icons was found to contain malicious code...
MAL-2025-191950 Malicious code in @hand-talk/yotta-icons (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c045f3fe855bc71b3f6e34b9341c65fc06e25d0ee9ec32d4036dfb3da596e96 The package @hand-talk/yotta-icons was found to contain malicious code...
Malicious code in @hand-talk/yotta-core (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa12c4979b84a435f622bda703becfcf1b917f52e0c1dbb8a1bc5a875d8d8edb The package @hand-talk/yotta-core was found to contain malicious code...
MAL-2025-191496 Malicious code in @hand-talk/yotta-core (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa12c4979b84a435f622bda703becfcf1b917f52e0c1dbb8a1bc5a875d8d8edb The package @hand-talk/yotta-core was found to contain malicious code...
EUVD-2025-200014
Malicious code in @hand-talk/yotta-core npm...
CVE-2025-52663
A vulnerability was identified in certain UniFi Talk devices where internal debugging functionality remained unintentionally enabled. This issue could allow an attacker with access to the UniFi Talk management network to invoke internal debug operations through the device API. Affected Products:...
EUVD-2025-37234
A vulnerability was identified in certain UniFi Talk devices where internal debugging functionality remained unintentionally enabled. This issue could allow an attacker with access to the UniFi Talk management network to invoke internal debug operations through the device API. Affected Products:...
CVE-2025-52663
A vulnerability was identified in certain UniFi Talk devices where internal debugging functionality remained unintentionally enabled. This issue could allow an attacker with access to the UniFi Talk management network to invoke internal debug operations through the device API. Affected Products:...
CVE-2025-52663: Active Debug Code
A vulnerability was identified in certain UniFi Talk devices where internal debugging functionality remained unintentionally enabled. This issue could allow an attacker with access to the UniFi Talk management network to invoke internal debug operations through the device API. Affected Products:...
Ubiquiti多款产品 安全漏洞
Ubiquiti UniFi Talk Touch, among others, is an IP phone from Ubiquiti USA. A security vulnerability exists in various Ubiquiti products, which stems from an unintentional enablement of the internal debugging feature, which could allow an attacker to invoke internal debugging operations via the...
CVE-2025-52663
A vulnerability was identified in certain UniFi Talk devices where internal debugging functionality remained unintentionally enabled. This issue could allow an attacker with access to the UniFi Talk management network to invoke internal debug operations through the device API. Affected Products:...
CVE-2025-52663
A vulnerability was identified in certain UniFi Talk devices where internal debugging functionality remained unintentionally enabled. This issue could allow an attacker with access to the UniFi Talk management network to invoke internal debug operations through the device API. Affected Products:...
CVE-2025-52663
A vulnerability exists in certain UniFi Talk devices where internal debugging functionality remains unintentionally enabled. An attacker with access to the UniFi Talk management network can exploit this by invoking internal debug operations through the device API . Affected products include UniFi...
PT-2025-44561
Name of the Vulnerable Software and Affected Versions UniFi Talk Touch versions 1.21.16 and earlier UniFi Talk Touch Max versions 2.21.22 and earlier UniFi Talk G3 Phones versions 3.21.26 and earlier Description An issue was identified in certain UniFi Talk devices where internal debugging...