EUVD-2025-7896

Malicious code in bioql PyPI...

EUVD-2025-6686

Malicious code in bioql PyPI...

EUVD-2025-22906

Malicious code in bioql PyPI...

CVE-2025-30125

An issue was discovered on Marbella KR8s Dashcam FF 2.0.8 devices. All dashcams were shipped with the same default credentials of 12345678, which creates an insecure-by-default condition. For users who change their passwords, it's limited to 8 characters. These short passwords can be cracked in 8...

CVE-2025-30125

The Marbella KR8s Dashcam FF (version 2.0.8 ) is vulnerable to an insecure-by-default condition because all units are shipped with the same default credentials of 12345678 . Furthermore, the device imposes an 8-character limit on custom passwords, which can be cracked in approximately 8 hours usi...

CVE-2025-30106

On IROAD v9 devices, the dashcam has hardcoded default credentials "qwertyuiop" that cannot be changed by the user. This allows an attacker within Wi-Fi range to connect to the device's network to perform sniffing...

CVE-2025-30141

An issue was discovered on G-Net Dashcam BB GONX devices. One can Remotely Dump Video Footage and the Live Video Stream. It exposes API endpoints on ports 9091 and 9092 that allow remote access to recorded and live video feeds. An attacker who connects to the dashcam's network can retrieve all...

CVE-2025-30113

An issue was discovered on the Forvia Hella HELLA Driving Recorder DR 820. Hardcoded Credentials exist in the APK for Ports 9091 and 9092. The dashcam's Android application contains hardcoded credentials that allow unauthorized access to device settings through ports 9091 and 9092. These...

CVE-2025-30113

The Forvia Hella HELLA Driving Recorder DR 820 is affected by a vulnerability involving hardcoded credentials within its Android application (APK). These credentials, stored in cleartext , are used for Ports 9091 and 9092 . An attacker who gains access to the dashcam's network can exploit these c...