JeeWMS security vulnerabilities

JeeWMS is a JAVA-based warehouse management system from China Huayi JeeWMS. A security vulnerability exists in JeeWMS 20250504 and earlier versions, which originates from improper access control in the function filedeal in the file /systemController/filedeal.do...

JeeWMS path traversal vulnerability

JeeWMS is a JAVA-based warehouse management system from China Huayi JeeWMS. JeeWMS 20250504 and previous versions of path traversal vulnerability, the vulnerability stems from the file /cgformTemplateController.do?doAdd function doAdd there is a path traversal...

CVE-2025-44619

Tinxy WiFi Lock Controller v1 RF was discovered to be configured to transmit on an open Wi-Fi network, allowing attackers to join the network without authentication...

CVE-2025-44614

Tinxy WiFi Lock Controller v1 RF was discovered to store users' sensitive information, including credentials and mobile phone numbers, in plaintext...

CVE-2025-44619

Tinxy WiFi Lock Controller v1 RF was discovered to be configured to transmit on an open Wi-Fi network, allowing attackers to join the network without authentication...

CVE-2025-44614: Cleartext Storage of Sensitive Information

Tinxy WiFi Lock Controller v1 RF was discovered to store users' sensitive information, including credentials and mobile phone numbers, in plaintext...

Tinxy WiFi Lock Controller v1 has a RF security vulnerability

Tinxy WiFi Lock Controller v1 RF is a smart door lock from Tinxy. A security vulnerability exists in Tinxy WiFi Lock Controller v1 RF, which originates from transmitting sensitive information in clear text and could lead to a man-in-the-middle attack...

CVE-2025-44612

Tinxy WiFi Lock Controller v1 RF was discovered to transmit sensitive information in plaintext, including control information and device credentials, allowing attackers to possibly intercept and access sensitive information via a man-in-the-middle attack...

CVE-2025-44614

The Tinxy WiFi Lock Controller v1 RF is vulnerable to cleartext storage of sensitive information . The device stores user credentials and mobile phone numbers in plaintext, which may lead to information leakage. To mitigate this risk, it is recommended to restrict access to the device, avoid usin...

CVE-2025-44619

Tinxy WiFi Lock Controller v1 RF was discovered to be configured to transmit on an open Wi-Fi network, allowing attackers to join the network without authentication...

PT-2025-23235

Name of the Vulnerable Software and Affected Versions Tinxy WiFi Lock Controller version v1 RF Description The issue allows attackers to join the network without authentication because the device is configured to transmit on an open Wi-Fi network. Recommendations For Tinxy WiFi Lock Controller...

PT-2025-23234 · Unknown · Tinxy Wifi Lock Controller

Name of the Vulnerable Software and Affected Versions: Tinxy WiFi Lock Controller version v1 RF Description: The issue concerns the storage of sensitive user information, including credentials and mobile phone numbers, in plaintext. Recommendations: For Tinxy WiFi Lock Controller version v1 RF,...

CVE-2025-44614

Tinxy WiFi Lock Controller v1 RF was discovered to store users' sensitive information, including credentials and mobile phone numbers, in plaintext...

CVE-2025-44619

The Tinxy WiFi Lock Controller v1 RF is vulnerable due to a configuration flaw that causes it to transmit on an open Wi-Fi network . This improper access control allows unauthorized attackers to join the network without any authentication. To mitigate this risk, it is recommended to configure the...

Tinxy WiFi Lock Controller v1 has a RF access control vulnerability

Tinxy WiFi Lock Controller v1 RF is a smart door lock from Tinxy. A security vulnerability exists in the Tinxy WiFi Lock Controller v1 RF, which originates from being configured for an open Wi-Fi network and could lead to unauthenticated network access...

CVE-2025-44612: Cleartext Transmission of Sensitive Information

Tinxy WiFi Lock Controller v1 RF was discovered to transmit sensitive information in plaintext, including control information and device credentials, allowing attackers to possibly intercept and access sensitive information via a man-in-the-middle attack...

CVE-2025-44619: Improper Access Control

Tinxy WiFi Lock Controller v1 RF was discovered to be configured to transmit on an open Wi-Fi network, allowing attackers to join the network without authentication...

CVE-2025-44612

The Tinxy WiFi Lock Controller v1 RF is vulnerable to a security flaw where it transmits sensitive information, such as device credentials and control information , in plaintext . This lack of encryption allows an attacker to perform a man-in-the-middle attack to intercept and access this data. A...

CVE-2025-44614

Tinxy WiFi Lock Controller v1 RF was discovered to store users' sensitive information, including credentials and mobile phone numbers, in plaintext...

USN-7516-9 linux-aws vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - PowerPC architecture; - Block layer subsystem; - Drivers core; - Network block device driver;...