CVE-2024-2104 JBL: Improper BLE security configurations and lack of authentication on the device's GATT server

Due to improper BLE security configurations on the device's GATT server, an adjacent unauthenticated attacker can read and write device control commands through the mobile app service wich could render the device unusable...

CVE-2024-2104

CVE-2024-2104 describes an improper BLE security configuration on a device GATT server that enables an adjacent, unauthenticated attacker to read and write device control commands via the mobile app service, potentially rendering the device unusable. Multiple connected sources (including JBL/CVE ...

EUVD-2024-27068

Due to improper BLE security configurations on the device's GATT server, an adjacent unauthenticated attacker can read and write device control commands through the mobile app service wich could render the device unusable...

MAL-2025-192423 Malicious code in vue2-amis-custom-widget-pro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c676b8d3fdeb2773313404ba039b4e2162b5e516e6938db609188c352f319cc8 The package vue2-amis-custom-widget-pro was found to contain malicious code. Source: ghsa-malware...

Malicious code in vue2-amis-custom-widget-pro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c676b8d3fdeb2773313404ba039b4e2162b5e516e6938db609188c352f319cc8 The package vue2-amis-custom-widget-pro was found to contain malicious code. Source: ghsa-malware...

MAL-2025-192429 Malicious code in yunxohang3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c2e673bf41f2c09d7193d10d854da05f9ca7460ff6ea0aa7f20c54637ec8be6 The package yunxohang3 was found to contain malicious code. Source: ghsa-malware 0900450d580a55eafca9c4f9d12f2d00bee5c44547a809c1bb9f919b328f6350 Any...

Malicious code in yunxohang3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c2e673bf41f2c09d7193d10d854da05f9ca7460ff6ea0aa7f20c54637ec8be6 The package yunxohang3 was found to contain malicious code. Source: ghsa-malware 0900450d580a55eafca9c4f9d12f2d00bee5c44547a809c1bb9f919b328f6350 Any...

Malicious code in yunxoahng2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 590cb2c888056f49872da23301bfc59ab2eab0b221cd551f2074bdb586e765bc The package yunxoahng2 was found to contain malicious code. Source: ghsa-malware 0f8f5e6fad408a138d25de919d714b42202c0c57ad1b5d32200f17f4fe3e31af Any...

MAL-2025-192428 Malicious code in yunxoahng2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 590cb2c888056f49872da23301bfc59ab2eab0b221cd551f2074bdb586e765bc The package yunxoahng2 was found to contain malicious code. Source: ghsa-malware 0f8f5e6fad408a138d25de919d714b42202c0c57ad1b5d32200f17f4fe3e31af Any...

Malicious code in vue2-amis-custom-widget123 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 027b467c811b36f60dc7589ccd8251ffc56de7f40345d6a471a3a550a2a8df7e The package vue2-amis-custom-widget123 was found to contain malicious code. Source: ossf-package-analysis...

MAL-2025-192421 Malicious code in vue2-amis-custom-widget123 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 027b467c811b36f60dc7589ccd8251ffc56de7f40345d6a471a3a550a2a8df7e The package vue2-amis-custom-widget123 was found to contain malicious code. Source: ossf-package-analysis...

PT-2025-50323

Due to improper BLE security configurations on the device's GATT server, an adjacent unauthenticated attacker can read and write device control commands through the mobile app service wich could render the device unusable...

PT-2025-50532

WBCE CMS version 1.6.2 contains a remote code execution vulnerability that allows authenticated attackers to upload malicious PHP files through the Elfinder file manager. Attackers can exploit the file upload functionality in the elfinder connector to upload a web shell and execute arbitrary syst...

Meatmeet Pro BBQ Thermometer 安全漏洞

Meatmeet Pro BBQ Thermometer is an advanced smart thermometer from Meatmeet. A security vulnerability exists in Meatmeet Pro BBQ Thermometer version v1.0.34.4, which originates from unauthenticated BLE commands and could lead to a denial of service attack...

PT-2025-50531

Name of the Vulnerable Software and Affected Versions Serendipity version 2.5.0 Description An authenticated administrator can upload malicious PHP files through the media upload functionality, leading to remote code execution. An attacker can create a PHP shell with a command execution form,...

JBL LIVE PRO 2 TWS 访问控制错误漏洞

The JBL LIVE PRO 2 TWS is a wireless noise-canceling headset from JBL USA. An access control error vulnerability exists in the JBL LIVE PRO 2 TWS, which stems from a BLE security misconfiguration that could allow a neighboring unauthenticated attacker to read or write device control commands...

📄 Redash Authenticated Remote Command Execution

Redash’s default setup uses PostgreSQL superuser credentials for its primary data source. Because users can run SQL through Redash, any authenticated account gains excessive control over the database. This allows executing system commands on the database server through PostgreSQL’s COPY FROM...

CVE-2023-53774

MiniDVBLinux 5.4 contains a remote code execution vulnerability in the SVDRP protocol that allows remote attackers to send commands to manipulate TV systems. Attackers can send crafted SVDRP commands through the svdrpsend.sh script to execute messages and potentially control the video disk record...

MAL-2025-192427 Malicious code in libxmlussr1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53a26137f4b62749b9f491cb82c0c0f9d95f0fa03f7dcd2e8067b39b5de0e005 The package libxmlussr1 was found to contain malicious code. Source: ossf-package-analysis...

Malicious code in libxmlussr1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53a26137f4b62749b9f491cb82c0c0f9d95f0fa03f7dcd2e8067b39b5de0e005 The package libxmlussr1 was found to contain malicious code. Source: ossf-package-analysis...