Agatsa-EasyTouch-Plus---CVE-2025-56019

本报告涉及CVE-2025-56019，该漏洞为easytouch+产品BLE认证预留，由发现者Yashodhan Vivek Mandke分配。请下载本仓库中的报告PDF。...

CVE-2025-56019

An insecure permission vulnerability exists in the Agasta Easytouch+ version 9.3.97 The device allows unauthorized mobile applications to connect via Bluetooth Low Energy BLE without authentication. Once an unauthorized connection is established, legitimate applications are unable to connect,...

EUVD-2025-32192

Malicious code in bioql PyPI...

CVE-2025-56019

An insecure permission vulnerability exists in the Agasta Easytouch+ version 9.3.97 The device allows unauthorized mobile applications to connect via Bluetooth Low Energy BLE without authentication. Once an unauthorized connection is established, legitimate applications are unable to connect,...

CVE-2025-56019

An insecure permission vulnerability exists in the Agasta Easytouch+ version 9.3.97 The device allows unauthorized mobile applications to connect via Bluetooth Low Energy BLE without authentication. Once an unauthorized connection is established, legitimate applications are unable to connect,...

PT-2025-40409

Name of the Vulnerable Software and Affected Versions Agasta Easytouch+ version 9.3.97 Description The device has an insecure permission issue that allows unauthorized mobile applications to connect via Bluetooth Low Energy BLE without authentication. Establishing an unauthorized connection...

CVE-2025-56019: Insecure Inherited Permissions

An insecure permission vulnerability exists in the Agasta Easytouch+ version 9.3.97 The device allows unauthorized mobile applications to connect via Bluetooth Low Energy BLE without authentication. Once an unauthorized connection is established, legitimate applications are unable to connect,...

CVE-2025-56019

An insecure permission vulnerability exists in the Agasta Easytouch+ version 9.3.97 The device allows unauthorized mobile applications to connect via Bluetooth Low Energy BLE without authentication. Once an unauthorized connection is established, legitimate applications are unable to connect,...

Agasta Easytouch Plus 安全漏洞

Agasta Easytouch Plus is a touch-based health monitoring device from Agasta India. A security vulnerability exists in Agasta Easytouch Plus version 9.3.97, which originates from allowing unauthorized mobile applications to connect without authentication via Bluetooth Low Power, which may result i...

CVE-2025-56019

An insecure permission vulnerability exists in the Agasta Easytouch+ version 9.3.97 The device allows unauthorized mobile applications to connect via Bluetooth Low Energy BLE without authentication. Once an unauthorized connection is established, legitimate applications are unable to connect,...

CVE-2025-56019

An insecure permission vulnerability exists in the Agasta Easytouch+ version 9.3.97 health monitoring device. The flaw allows unauthorized mobile applications to establish a connection via Bluetooth Low Energy (BLE) without authentication. Once an unauthorized connection is secured, legitimate ap...

CVE-2017-1002000

Vulnerability in wordpress plugin mobile-friendly-app-builder-by-easytouch v3.0, The code in file ./mobile-friendly-app-builder-by-easytouch/server/images.php doesn't require authentication or check that the user is allowed to upload content...

CVE-2017-1002000

CVE-2017-1002000 is an unauthenticated file-upload vulnerability in the WordPress plugin mobile-friendly-app-builder-by-easytouch v3.0. The issue is in ./mobile-friendly-app-builder-by-easytouch/server/images.php, where authentication/authorization checks are not performed, enabling content uploa...

CVE-2017-1002000: Unrestricted Upload of File with Dangerous Type

Vulnerability in wordpress plugin mobile-friendly-app-builder-by-easytouch v3.0, The code in file ./mobile-friendly-app-builder-by-easytouch/server/images.php doesn't require authentication or check that the user is allowed to upload content...

mobile-friendly-app-builder-by-easytouch 3.0 - Unauthenticated File Upload

Plugin is still affected and has been closed...

EasyTouch-Classic Version - Customized SSL, Dangerous filesystem permissions, Runtime privilege escalation vulnerabilities

HackApp vulnerability scanner discovered that application EasyTouch-Classic Version published at the 'play' market has multiple vulnerabilities...