11 matches found
PT-2026-60587
EQ-3 Eqiva CC-RT-BLE Bluetooth Smart Radiator Thermostat Firmware up to the latest version 1.46 was discovered to allow unsecured bluetooth connections. This vulnerability allows attackers to gain full access to the device without authentication...
PT-2026-45529
Name of the Vulnerable Software and Affected Versions Nextcloud versions 32.0.0 through 32.0.8 Nextcloud versions 33.0.0 through 33.0.2 Description When a user shares a folder or file with a Nextcloud Team containing an external member a person added via email without a Nextcloud account, the...
CVE-2025-30468
A weak authentication vulnerability in iOS and iPadOS (versions prior to 26) allows Private Browsing tabs to be accessed without proper authentication. The root cause stems from an issue in the system's state management . This vulnerability could lead to unauthorized access to private user data. ...
CVE-2025-50861
The Lotus Cars Android app (com.lotus.carsdomestic.intl) version 1.2.8 contains an exported component, PushDeepLinkActivity , which is accessible without authentication via ADB or malicious apps. This vulnerability allows for unintended access to application internals, potentially leading to deni...
CVE-2025-3506
Files to be deployed with agents are accessible without authentication in Checkmk 2.1.0, Checkmk 2.2.0, Checkmk 2.3.0 and Checkmk 2.4.0b6 allows attacker to access files that could contain secrets...
CVE-2023-5117
Removed by vendor...
PT-2024-11622 · Motorola · Q14 Mesh Router Firmware
Name of the Vulnerable Software and Affected Versions: No specific software or versions mentioned. Description: An authentication bypass issue could allow an attacker to access API functions without authentication. Recommendations: At the moment, there is no information about a newer version that...
The vulnerability of the CGI microprogramming interface of the D-Link DAP-1325 wireless signal booster allows a intruder to disclose protected information.
The vulnerability of the CGI microprogramming interface of the D-Link DAP-1325 wireless signal booster exists due to the lack of authentication checks before access to functions is granted. Exploiting this vulnerability could allow a malicious actor to disclose protected information...
Couchbase Server 访问控制错误漏洞
Couchbase Server is a distributed, open source NoSQL non-relational database from Couchbase, Inc. that supports data querying, full-text searching, and active global replication. A security vulnerability exists in Couchbase Server versions 5.x through 7.x prior to 7.1.4, which stems from access...
