CVE-2025-55443

Telpo MDM 1.4.6 thru 1.4.9 for Android contains sensitive administrator credentials and MQTT server connection details IP/port that are stored in plaintext within log files on the device's external storage. This allows attackers with access to these logs to: 1. Authenticate to the MDM web platfor...

PT-2025-34811 · Telpo · Telpo Mdm

Name of the Vulnerable Software and Affected Versions: Telpo MDM versions 1.4.6 through 1.4.9 Description: The Telpo MDM Android platform stores sensitive administrator credentials and MQTT server connection details IP/port in plaintext within log files on the device's external storage. This allo...

PT-2023-17126 · WordPress · Wp Coder

Name of the Vulnerable Software and Affected Versions: WPCode WordPress plugin versions prior to 2.0.9 Description: The issue is related to a flawed CSRF when deleting logs, and the plugin does not ensure that the file to be deleted is inside the expected folder. This could allow attackers to mak...