EUVD-2025-30796

Malicious code in bioql PyPI...

EUVD-2025-23805

Malicious code in bioql PyPI...

MINI-862C-M2G8-96VC

Bulletin has no description...

MINI-4M32-M46X-6GGW

Bulletin has no description...

CVE-2025-57441

The Blackmagic ATEM Mini Pro 2.7 exposes sensitive device and stream configuration information via an unauthenticated Telnet service on port 9990. Upon connection, the attacker can access a protocol preamble that leaks the video mode, routing configuration, input/output labels, device model, and...

PT-2025-38751

Name of the Vulnerable Software and Affected Versions Blackmagic Web Presenter HD firmware version 3.3 Description The Blackmagic Web Presenter HD firmware version 3.3 has an unauthenticated Telnet service accessible on port 9977 that exposes sensitive information. Connecting to this service...

PT-2025-38762

Name of the Vulnerable Software and Affected Versions Blackmagic ATEM Mini Pro version 2.7 Description The software exposes sensitive device and stream configuration information through an unauthenticated Telnet service on port 9990. Connecting to this service allows access to a protocol preamble...

CVE-2025-57441

The Blackmagic ATEM Mini Pro 2.7 exposes sensitive device and stream configuration information via an unauthenticated Telnet service on port 9990. Upon connection, the attacker can access a protocol preamble that leaks the video mode, routing configuration, input/output labels, device model, and...

CVE-2025-57437

The Blackmagic Web Presenter HD firmware version 3.3 exposes sensitive information via an unauthenticated Telnet service on port 9977. When connected, the service reveals extensive device configuration data including: - Model, version, and unique identifiers - Network settings including IP, MAC,...

MINI-X96M-X3WX-RJ39

Bulletin has no description...

CGA-999H-WMC7-7QQ3

Bulletin has no description...

CGA-X48F-9PV5-5GHV

Bulletin has no description...

MINI-VC3M-J836-4RWM

Bulletin has no description...

CVE-2025-9769 D-Link DI-7400G+ mng_platform.asp sub_478D28 command injection

A security flaw has been discovered in D-Link DI-7400G+ 19.12.25A1. Affected is the function sub478D28 of the file /mngplatform.asp. The manipulation of the argument addr with the input echo 12345 poc.txt results in command injection. An attack on the physical device is feasible. The exploit has...

PT-2025-35469

Name of the Vulnerable Software and Affected Versions: D-Link DI-7400G+ version 19.12.25A1 Description: A security flaw exists in the D-Link DI-7400G+ router. The issue is located in the sub 478D28 function of the /mng platform.asp file. Manipulation of the addr argument with the input echo 12345...

CVE-2025-52054

An issue was discovered in Tenda AC8 v4.0 AC1200 Dual-band Gigabit Wireless Router AC8v4.0 Firmware 16.03.33.05. The root password of the device is calculated with a static string and the last two octets of the MAC address of the device. This allows an unauthenticated attacker to authenticate wit...

PT-2025-35091

Name of the Vulnerable Software and Affected Versions: Tenda AC8 v4.0 AC1200 Dual-band Gigabit Wireless Router versions 16.03.33.05 Description: An issue exists where the root password of the device is calculated using a static string and the last two octets of the device's MAC address. This allo...

CVE-2025-29517

D-Link DSL-7740C with firmware DSL7740C.V6.TR069.20211230 was discovered to contain a command injection vulnerability via the traceroute6 function...

CVE-2025-29519

A command injection vulnerability in the EXE parameter of D-Link DSL-7740C with firmware DSL7740C.V6.TR069.20211230 allows attackers to execute arbitrary commands via supplying a crafted GET request...

CVE-2025-29516

CVE-2025-29516 affects D-Link DSL-7740C with firmware DSL7740C.V6.TR069.20211230. A command injection flaw exists in the backup function, enabling execution of arbitrary commands. CVSS 3.1 base metrics indicate Network attack vector, high impact on confidentiality, integrity, and availability, wi...