Agatsa-EasyTouch-Plus---CVE-2025-56019

This report is for CVE-2025-56019 reserved for easytouch+ product BLE authentication assigned to Discoverer Yashodhan Vivek Mandke. Please download the report pdf in this repositoy...

CVE-2025-56019

An insecure permission vulnerability exists in the Agasta Easytouch+ version 9.3.97 The device allows unauthorized mobile applications to connect via Bluetooth Low Energy BLE without authentication. Once an unauthorized connection is established, legitimate applications are unable to connect,...

EUVD-2025-32192

Malicious code in bioql PyPI...

CVE-2025-56019

An insecure permission vulnerability exists in the Agasta Easytouch+ version 9.3.97 The device allows unauthorized mobile applications to connect via Bluetooth Low Energy BLE without authentication. Once an unauthorized connection is established, legitimate applications are unable to connect,...

CVE-2025-56019

An insecure permission vulnerability exists in the Agasta Easytouch+ version 9.3.97 The device allows unauthorized mobile applications to connect via Bluetooth Low Energy BLE without authentication. Once an unauthorized connection is established, legitimate applications are unable to connect,...

PT-2025-40409

Name of the Vulnerable Software and Affected Versions Agasta Easytouch+ version 9.3.97 Description The device has an insecure permission issue that allows unauthorized mobile applications to connect via Bluetooth Low Energy BLE without authentication. Establishing an unauthorized connection...

CVE-2025-56019

An insecure permission vulnerability exists in the Agasta Easytouch+ health monitoring device, specifically in version 9.3.97 . The root cause is a lack of authentication, which allows unauthorized mobile applications to establish a connection via Bluetooth Low Energy (BLE) . Once an unauthorized...

Agasta Easytouch Plus security vulnerabilities

Agasta Easytouch Plus is a touch-based health monitoring device from Agasta India. A security vulnerability exists in Agasta Easytouch Plus version 9.3.97, which originates from allowing unauthorized mobile applications to connect without authentication via Bluetooth Low Power, which may result i...

CVE-2025-56019

An insecure permission vulnerability exists in the Agasta Easytouch+ version 9.3.97 The device allows unauthorized mobile applications to connect via Bluetooth Low Energy BLE without authentication. Once an unauthorized connection is established, legitimate applications are unable to connect,...

CVE-2025-56019: Insecure Inherited Permissions

An insecure permission vulnerability exists in the Agasta Easytouch+ version 9.3.97 The device allows unauthorized mobile applications to connect via Bluetooth Low Energy BLE without authentication. Once an unauthorized connection is established, legitimate applications are unable to connect,...

CVE-2025-56019

An insecure permission vulnerability exists in the Agasta Easytouch+ version 9.3.97 The device allows unauthorized mobile applications to connect via Bluetooth Low Energy BLE without authentication. Once an unauthorized connection is established, legitimate applications are unable to connect,...

CVE-2017-1002000

Vulnerability in wordpress plugin mobile-friendly-app-builder-by-easytouch v3.0, The code in file ./mobile-friendly-app-builder-by-easytouch/server/images.php doesn't require authentication or check that the user is allowed to upload content...

CVE-2017-1002000

CVE-2017-1002000 is an unauthenticated file-upload vulnerability in the WordPress plugin mobile-friendly-app-builder-by-easytouch v3.0. The issue is in ./mobile-friendly-app-builder-by-easytouch/server/images.php, where authentication/authorization checks are not performed, enabling content uploa...

CVE-2017-1002000: Unrestricted Upload of File with Dangerous Type

Vulnerability in wordpress plugin mobile-friendly-app-builder-by-easytouch v3.0, The code in file ./mobile-friendly-app-builder-by-easytouch/server/images.php doesn't require authentication or check that the user is allowed to upload content...

PT-2017-10989

Name of the Vulnerable Software and Affected Versions mobile-friendly-app-builder-by-easytouch version 3.0 Description The issue concerns a lack of authentication or access control in the mobile-friendly-app-builder-by-easytouch plugin for WordPress, specifically in the file...

mobile-friendly-app-builder-by-easytouch 3.0 - Unauthenticated File Upload

Plugin is still affected and has been closed...

EasyTouch-Classic Version - Customized SSL, Dangerous filesystem permissions, Runtime privilege escalation vulnerabilities

HackApp vulnerability scanner discovered that application EasyTouch-Classic Version published at the 'play' market has multiple vulnerabilities...