62 matches found
System_Connectivity_Wificond_CVE-2021-0392
このリポジトリには README がありません。...
CVE-2026-82958
In Eclipse Ditto versions 1.3.0, 3.9.6, the ImplicitThingCreationMessageMapper of the connectivity service builds a CreateThing command by substituting placeholder values e.g. header:deviceid resolved from inbound message headers into a pre-configured JSON "thing" template as raw, un-escaped...
CVE-2026-82958
In Eclipse Ditto versions 1.3.0, 3.9.6, the ImplicitThingCreationMessageMapper of the connectivity service builds a CreateThing command by substituting placeholder values e.g. header:deviceid resolved from inbound message headers into a pre-configured JSON "thing" template as raw, un-escaped...
CVE-2026-82958
Eclipse Ditto versions [1.3.0, 3.9.6] are affected by a JSON injection flaw in the ImplicitThingCreationMessageMapper of the connectivity service. When building a CreateThing command, placeholder values resolved from inbound message headers (e.g., MQTT 5 user properties, AMQP 1.0 application prop...
CVE-2026-82958
In Eclipse Ditto versions 1.3.0, 3.9.6, the ImplicitThingCreationMessageMapper of the connectivity service builds a CreateThing command by substituting placeholder values e.g. header:deviceid resolved from inbound message headers into a pre-configured JSON "thing" template as raw, un-escaped...
EUVD-2026-69896
In Eclipse Ditto versions 1.3.0, 3.9.6, the ImplicitThingCreationMessageMapper of the connectivity service builds a CreateThing command by substituting placeholder values e.g. header:deviceid resolved from inbound message headers into a pre-configured JSON "thing" template as raw, un-escaped...
CVE-2026-82958
In Eclipse Ditto versions 1.3.0, 3.9.6, the ImplicitThingCreationMessageMapper of the connectivity service builds a CreateThing command by substituting placeholder values e.g. header:deviceid resolved from inbound message headers into a pre-configured JSON "thing" template as raw, un-escaped...
CVE-2026-82958: Improper Neutralization of Special Elements Used in a Template Engine
In Eclipse Ditto versions 1.3.0, 3.9.6, the ImplicitThingCreationMessageMapper of the connectivity service builds a CreateThing command by substituting placeholder values e.g. header:deviceid resolved from inbound message headers into a pre-configured JSON "thing" template as raw, un-escaped...
PT-2026-84663
In Eclipse Ditto versions 1.3.0, 3.9.6, the ImplicitThingCreationMessageMapper of the connectivity service builds a CreateThing command by substituting placeholder values e.g. header:device id resolved from inbound message headers into a pre-configured JSON "thing" template as raw, un-escaped...
CVE-2021-0517
In updateCapabilities of ConnectivityService.java, there is a possible incorrect network state determination due to a logic error in the code. This could lead to biasing of networking tasks to occur on non-VPN networks, which could lead to remote information disclosure, with no additional executi...
EUVD-2025-203378
NetSupport Manager 14.12.0001 contains an arbitrary file write vulnerability in its Connectivity Server/Gateway PUTFILE request handler. An attacker with a valid Gateway Key can supply a crafted filename containing directory traversal sequences to write files to arbitrary locations on the server...
EUVD-2018-14264
Malware in sbrugna...
EUVD-2019-11312
Malware in sbrugna...
EUVD-2023-35204
Malicious code in bioql PyPI...
EUVD-2023-35205
Malicious code in bioql PyPI...
CVE-2025-26445
In offerNetwork of ConnectivityService.java, there is a possible leak of sensitive data due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2025-26445
In offerNetwork of ConnectivityService.java, there is a possible leak of sensitive data due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2025-26445
Google Android is vulnerable to a local information disclosure vulnerability due to a missing permission check in the offerNetwork function of ConnectivityService.java. An attacker can exploit this flaw to leak sensitive data without requiring additional execution privileges or user interaction. ...
PT-2025-36018
Name of the Vulnerable Software and Affected Versions: ConnectivityService affected versions not specified Description: A missing permission check in the offerNetwork function of ConnectivityService.java may lead to local information disclosure. Exploitation does not require user interaction or...