417 matches found
thingsboard
开源物联网平台，用于数据收集、处理、可视化及设备管理。 💡 开始使用 • 🌐 网站 • 📚 文档 • 📔 博客 • 🔗 LinkedIn 🚀 安装选项 在本地安装ThingsBoard，或使用ThingsBoard Cloud。 💡 开始使用ThingsBoard 请查看我们的入门指南或观看视频，了解ThingsBoard的基础知识并创建你的第一个仪表板！你将学习： 将设备连接到ThingsBoard 从设备推送数据到ThingsBoard 构建实时仪表板 创建客户并为其分配仪表板 定义阈值并触发告警 通过电子邮件、短信、移动应用设置通知，或集成第三方服务 ✨ 特性 配置和管理 设备及资...
ThingsBoard-IoT-Platform-CVE-2024-55466
使用存储型XSS进行Thingsboard权限提升 在探索物联网技术时，我发现Thingsboard应用程序中存在一个漏洞，该漏洞为权限提升提供了途径。 Thingsboard是一个开源应用程序，允许对物联网服务和部署进行设备管理、数据收集、处理和可视化。此外，单个Thingsboard实例（由租户管理员管理）可以为多个组织提供服务，每个组织都有各自的公司管理员。 在探索其功能时，我注意到“Image Gallery”（图片库）视图中有一个文件上传功能。不幸的是，该功能存在存储型跨站脚本漏洞，攻击者可以通过窃取身份验证令牌来提升权限。...
thingsboard-ssrf-cve-2025-34282
CVE-2025-34282 — 通过 SVG 图片上传实现的 ThingsBoard SSRF 漏洞 概述 ThingsBoard IoT 平台 4.2.1 之前版本存在服务端请求伪造（SSRF）漏洞。 拥有租户管理员（Tenant Admin）权限的攻击者可以通过图片上传画廊（Image Upload Gallery）上传一个包含内部 URL 引用的恶意 SVG 文件。当 ThingsBoard 在服务端处理该 SVG 时，会请求所引用的 URL — 从而允许访问未暴露到互联网的内部服务。 字段| 详情 ---|--- CVE| CVE-2025-34282 受影响版本| 标签嵌入...
CVE-2026-68525 vulnerabilities
Vulnerabilities for packages: thingsboard...
CVE-2026-65905 vulnerabilities
Vulnerabilities for packages: thingsboard...
GHSA-GCX9-497G-6CP6 vulnerabilities
Vulnerabilities for packages: thingsboard...
GHSA-H3X4-894J-XPX5 vulnerabilities
Vulnerabilities for packages: thingsboard...
CVE-2026-65182 vulnerabilities
Vulnerabilities for packages: thingsboard...
GHSA-9XV2-5V5Q-P794 vulnerabilities
Vulnerabilities for packages: thingsboard...
CVE-2025-70340
A Broken Access Control vulnerability exists in ThingsBoard Professional Edition PE 4.21 and below, within the Alarms comments functionality. An authenticated customer user can manipulate the respective API request parameters to create or modify system-generated alarm comments. This allows...
EUVD-2025-210791
A Broken Access Control vulnerability exists in ThingsBoard Professional Edition PE 4.21 and below, within the Alarms comments functionality. An authenticated customer user can manipulate the respective API request parameters to create or modify system-generated alarm comments. This allows...
CVE-2025-70340
A Broken Access Control vulnerability exists in ThingsBoard Professional Edition PE 4.21 and below, within the Alarms comments functionality. An authenticated customer user can manipulate the respective API request parameters to create or modify system-generated alarm comments. This allows...
CVE-2025-70340
CVE-2025-70340 is a Broken Access Control vulnerability in ThingsBoard Professional Edition (PE) 4.21 and below , specifically within the Alarms comments functionality. An authenticated customer user can manipulate API request parameters to create or modify system-generated alarm comments , enabl...
GHSA-2QJ4-MMR9-4V2F vulnerabilities
Vulnerabilities for packages: management-api-for-apache-cassandra-4.0, management-api-for-apache-cassandra-5.0, tez, pinot-fips, seata, trino, apache-hop-fips, pinot, hadoop-fips, tinkerpop, thingsboard, management-api-for-apache-cassandra-4.1, celeborn...
CVE-2026-59902 vulnerabilities
Vulnerabilities for packages: management-api-for-apache-cassandra-4.0, management-api-for-apache-cassandra-5.0, tez, pinot-fips, seata, trino, apache-hop-fips, pinot, hadoop-fips, tinkerpop, thingsboard, management-api-for-apache-cassandra-4.1, celeborn...
CVE-2026-73569 vulnerabilities
Vulnerabilities for packages: langfuse-fips, kibana, tileserver-gl-fips, langfuse, thingsboard-fips, tileserver-gl, jitsucom-jitsu...
CVE-2026-73507 vulnerabilities
Vulnerabilities for packages: management-api-for-apache-cassandra-5.0, tez, seata, apache-hop-fips, hadoop-fips, apache-hop, tinkerpop, thingsboard...
CVE-2026-73507 vulnerabilities
Vulnerabilities for packages: thingsboard, management-api-for-apache-cassandra-5.0, tez...
CVE-2026-73508 vulnerabilities
Vulnerabilities for packages: druid, management-api-for-apache-cassandra-5.0, akhq, tez, spark, apache-pulsar, apache-nifi, strimzi-kafka-operator, zipkin, opensearch, keycloak, thingsboard, apicurio-registry, celeborn...