Lucene search
K

8091 matches found

OSV
OSV
added 2025/10/12 11:15 p.m.0 views

CVE-2025-11649

A vulnerability was found in Tomofun Furbo 360 and Furbo Mini. The affected element is an unknown function of the component Root Account Handler. Performing manipulation results in use of hard-coded password. The attack must be initiated from a local position. The attack is considered to have hig...

6.3CVSS5.1AI score0.00021EPSS
Exploits0References4
NVD
NVD
added 2025/10/12 11:15 p.m.2 views

CVE-2025-11649

A vulnerability was found in Tomofun Furbo 360 and Furbo Mini. The affected element is an unknown function of the component Root Account Handler. Performing manipulation results in use of hard-coded password. The attack must be initiated from a local position. The attack is considered to have hig...

7.3CVSS0.00021EPSS
Exploits0References4
Vulnrichment
Vulnrichment
added 2025/10/12 10:32 p.m.3 views

CVE-2025-11649 Tomofun Furbo 360/Furbo Mini Root Account hard-coded password

A vulnerability was found in Tomofun Furbo 360 and Furbo Mini. The affected element is an unknown function of the component Root Account Handler. Performing manipulation results in use of hard-coded password. The attack must be initiated from a local position. The attack is considered to have hig...

7.3CVSS5.6AI score0.00021EPSS
Exploits0References4
Cvelist
Cvelist
added 2025/10/12 10:32 p.m.7 views

CVE-2025-11649 Tomofun Furbo 360/Furbo Mini Root Account hard-coded password

A vulnerability was found in Tomofun Furbo 360 and Furbo Mini. The affected element is an unknown function of the component Root Account Handler. Performing manipulation results in use of hard-coded password. The attack must be initiated from a local position. The attack is considered to have hig...

7.3CVSS0.00021EPSS
Exploits0References4
EUVD
EUVD
added 2025/10/12 9:30 p.m.3 views

EUVD-2025-33906

A security flaw has been discovered in Tomofun Furbo 360 and Furbo Mini. Affected by this vulnerability is an unknown functionality of the file /squashfs-root/furboimg of the component MQTT Client Certificate. Performing manipulation results in hard-coded credentials. The attack may be initiated...

6.3CVSS4.3AI score0.00056EPSS
Exploits0References4
OSV
OSV
added 2025/10/12 8:15 p.m.1 views

CVE-2025-11643

A security flaw has been discovered in Tomofun Furbo 360 and Furbo Mini. Affected by this vulnerability is an unknown functionality of the file /squashfs-root/furboimg of the component MQTT Client Certificate. Performing manipulation results in hard-coded credentials. The attack may be initiated...

8.1CVSS5AI score0.00056EPSS
Exploits0References3
NVD
NVD
added 2025/10/12 8:15 p.m.2 views

CVE-2025-11643

A security flaw has been discovered in Tomofun Furbo 360 and Furbo Mini. Affected by this vulnerability is an unknown functionality of the file /squashfs-root/furboimg of the component MQTT Client Certificate. Performing manipulation results in hard-coded credentials. The attack may be initiated...

8.1CVSS0.00056EPSS
Exploits0References3
CVE
CVE
added 2025/10/12 7:32 p.m.5 views

CVE-2025-11643

Tomofun Furbo 360 and Furbo Mini are affected by a vulnerability in the MQTT Client Certificate handling of the /squashfs-root/furbo_img component. Manipulation can reveal hard-coded credentials and may be exploitable remotely. Affected firmware versions are Furbo 360 up to FB0035_FW_036 and Furb...

8.1CVSS4.4AI score0.00056EPSS
Exploits0References3Affected Software1
Vulnrichment
Vulnrichment
added 2025/10/12 7:32 p.m.2 views

CVE-2025-11643 Tomofun Furbo 360/Furbo Mini MQTT Client Certificate furbo_img hard-coded credentials

A security flaw has been discovered in Tomofun Furbo 360 and Furbo Mini. Affected by this vulnerability is an unknown functionality of the file /squashfs-root/furboimg of the component MQTT Client Certificate. Performing manipulation results in hard-coded credentials. The attack may be initiated...

6.3CVSS6AI score0.00056EPSS
Exploits0References3
Cvelist
Cvelist
added 2025/10/12 7:32 p.m.4 views

CVE-2025-11643 Tomofun Furbo 360/Furbo Mini MQTT Client Certificate furbo_img hard-coded credentials

A security flaw has been discovered in Tomofun Furbo 360 and Furbo Mini. Affected by this vulnerability is an unknown functionality of the file /squashfs-root/furboimg of the component MQTT Client Certificate. Performing manipulation results in hard-coded credentials. The attack may be initiated...

6.3CVSS0.00056EPSS
Exploits0References3
RedhatCVE
RedhatCVE
added 2025/10/12 6:7 p.m.5 views

CVE-2025-11609

A flaw has been found in code-projects Hospital Management System 1.0. Affected is the function session of the component express-session. This manipulation of the argument secret with the input secret causes use of hard-coded cryptographic key . The attack can be initiated remotely. The attack is...

8.1CVSS6.5AI score0.00287EPSS
Exploits1References1
Positive Technologies
Positive Technologies
added 2025/10/12 12:0 a.m.2 views

PT-2025-41737

Name of the Vulnerable Software and Affected Versions Tomofun Furbo 360 versions prior to FB0035 FW 036 Tomofun Furbo Mini versions prior to MC0020 FW 074 Description A security flaw exists in Tomofun Furbo 360 and Furbo Mini devices. The issue involves an unknown function within the Root Account...

7.3CVSS6.4AI score0.00021EPSS
Exploits0References9
CNNVD
CNNVD
added 2025/10/12 12:0 a.m.2 views

Tomofun Furbo 360和Tomofun Furbo Mini 信任管理问题漏洞

Tomofun Furbo 360 and Tomofun Furbo Mini are both smart pet cameras from Tomofun Corporation of Taiwan, China. A trust management issue vulnerability exists in Tomofun Furbo 360 FB0035FW036 and earlier versions and Tomofun Furbo Mini MC0020FW074 and earlier versions, which stems from the presence...

8.1CVSS4.8AI score0.00056EPSS
Exploits0References4
CNNVD
CNNVD
added 2025/10/12 12:0 a.m.1 views

Tomofun Furbo 360和Tomofun Furbo Mini 安全漏洞

Tomofun Furbo 360 and Tomofun Furbo Mini are both smart pet cameras from Tomofun Corporation of Taiwan, China. A security vulnerability exists in Tomofun Furbo 360 and Tomofun Furbo Mini, which stems from the use of hard-coded passwords in the Root Account Handler component, which could lead to a...

7.3CVSS6.7AI score0.00021EPSS
Exploits0References5
EUVD
EUVD
added 2025/10/11 6:30 p.m.1 views

EUVD-2025-33870

A flaw has been found in code-projects Hospital Management System 1.0. Affected is the function session of the component express-session. This manipulation of the argument secret with the input secret causes use of hard-coded cryptographic key . The attack can be initiated remotely. The attack is...

6.3CVSS6.2AI score0.00287EPSS
Exploits1References6
OSV
OSV
added 2025/10/11 6:15 p.m.1 views

CVE-2025-11609

A flaw has been found in code-projects Hospital Management System 1.0. Affected is the function session of the component express-session. This manipulation of the argument secret with the input secret causes use of hard-coded cryptographic key . The attack can be initiated remotely. The attack is...

8.1CVSS5.2AI score0.00287EPSS
Exploits1References5
NVD
NVD
added 2025/10/11 6:15 p.m.2 views

CVE-2025-11609

A flaw has been found in code-projects Hospital Management System 1.0. Affected is the function session of the component express-session. This manipulation of the argument secret with the input secret causes use of hard-coded cryptographic key . The attack can be initiated remotely. The attack is...

8.1CVSS0.00287EPSS
Exploits1References5
Vulnrichment
Vulnrichment
added 2025/10/11 5:32 p.m.3 views

CVE-2025-11609 code-projects Hospital Management System express-session hard-coded key

A flaw has been found in code-projects Hospital Management System 1.0. Affected is the function session of the component express-session. This manipulation of the argument secret with the input secret causes use of hard-coded cryptographic key . The attack can be initiated remotely. The attack is...

6.3CVSS6.4AI score0.00287EPSS
Exploits1References5
Cvelist
Cvelist
added 2025/10/11 5:32 p.m.6 views

CVE-2025-11609 code-projects Hospital Management System express-session hard-coded key

A flaw has been found in code-projects Hospital Management System 1.0. Affected is the function session of the component express-session. This manipulation of the argument secret with the input secret causes use of hard-coded cryptographic key . The attack can be initiated remotely. The attack is...

6.3CVSS0.00287EPSS
Exploits1References5
CVE
CVE
added 2025/10/11 5:32 p.m.11 views

CVE-2025-11609

CVE-2025-11609 affects code-projects Hospital Management System 1.0, specifically the session function of the express-session component. The vulnerability arises from manipulation of the secret argument, causing use of a hard-coded cryptographic key. A remote attack is possible and the issue is d...

8.1CVSS4.7AI score0.00287EPSS
Exploits1References5Affected Software1
Rows per page
Query Builder