CVE-2020-23592

CVE-2020-23592 OPTILINK E-PON "MODEL NO: OP-XT71000N" with "HARDWARE VERSION: V2.2"; & "FIRMWARE VERSION: OPV3.3.1-191028" Found vulnerability in the "OPTILINK OP-XT71000N Hardware Version: V2.2 , Firmware Version: OPV3.3.1-191028" allow an unauthenticated, remote attacker to conduct a cross-site...

killcast

Manipola dispositivi Chromecast nella tua rete Disponibile in Ispirazione - Migliaia di dispositivi Google Chromecast dirottati per promuovere PewDiePie Questo strumento è un Proof of Concept e ha solo scopi di ricerca, killcast mostra come i dispositivi Chromecast possano essere facilmente...

CVE-2026-21006-Zigbee-Light-Link-Factory-Reset-Exploit

CVE-2026-21006 – Zigbee Light Link Factory Reset Exploit Program Code Python Zigbee simulation zigbeefactoryreset.py - Simulated Zigbee coordinator sending factory reset command import time class ZigbeeDevice: def initself: self.networkkey = b'secret' def receivecommandself, cmdid: if cmdid ==...

CVE-2025-15679

Under certain circumstances such as reset to factory default operation, the BMC root account is made active without a password on BullSequana XH3406 and XH3515...

CVE-2025-15679

CVE-2025-15679 affects the BMC (Baseboard Management Controller) root account , which can become active without a password under certain circumstances such as a reset to factory default operation. This grants unauthenticated local access with HIGH impact on confidentiality, integrity, and availab...

CVE-2025-15679 BMC root account active without password on BullSequana XH3406 and XH3515

Under certain circumstances such as reset to factory default operation, the BMC root account is made active without a password on BullSequana XH3406 and XH3515...

EUVD-2025-210890

Under certain circumstances such as reset to factory default operation, the BMC root account is made active without a password on BullSequana XH3406 and XH3515...

PT-2026-89807

Under certain circumstances such as reset to factory default operation, the BMC root account is made active without a password...

Tycon Systems TPDIN-Monitor-WEB3

ADVISORY SUMMARY Successful exploitation of these vulnerabilities could allow for an attacker to perform a man-in-the-middle MitM attack, cause a factory reset, wipe credentials, or retrieve sensitive information. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize...

PT-2026-85377

Tycon Systems TPDIN-Monitor-WEB3 versions 2.2.9 and prior are vulnerable to a use of hard-coded credential vulnerability. This could allow an attacker to intercept sensitive information or credentials...

PT-2026-85379

Tycon Systems TPDIN-Monitor-WEB3 versions 2.2.9 and prior are vulnerable to a cross-site request forgery vulnerability. This could allow an attacker to perform state changing operations on the device...

PT-2026-85378

CVE-2026-82684: Missing authorization in Tycon Systems TPDIN-Monitor-WEB3 ≤2.2.9 lets attackers dump system credentials, configs, or flash contents. CVSS 8.1. Unpatched—assume exposure. Isolate affected units and restrict access https://t.co/MztgdxQJ6F CVE CVEAlert infosec SysAdmin cybersecurity...

EUVD-2026-67295

Ebyte gateway product's vendor configuration utility does not require authentication before allowing certain disruptive administrative actions when default credentials remain configured. An unauthenticated attacker on the adjacent network could reboot the device or restore factory settings,...

CVE-2026-77977

Ebyte gateway product's vendor configuration utility does not require authentication before allowing certain disruptive administrative actions when default credentials remain configured. An unauthenticated attacker on the adjacent network could reboot the device or restore factory settings,...

CVE-2026-77977

Ebyte NE2-D11 is an industrial gateway whose vendor configuration utility lacks authentication before permitting disruptive administrative actions (reboot or factory reset) when default credentials remain configured. An unauthenticated attacker on the adjacent network can trigger these actions, c...

CVE-2026-77977 Ebyte NA111-M Missing Authentication for Critical Function

Ebyte gateway product's vendor configuration utility does not require authentication before allowing certain disruptive administrative actions when default credentials remain configured. An unauthenticated attacker on the adjacent network could reboot the device or restore factory settings,...

PT-2026-82797

Name of the Vulnerable Software and Affected Versions Ebyte gateway product affected versions not specified Description The vendor configuration utility fails to require authentication for certain disruptive administrative actions when default credentials are still in use. This allows an...

Exploit for Use After Free in Linux Linux_Kernel

Mi 8e5 Unlock Toolkit Automated bootloader unlock assistant f...

CVE-2026-36028

A protection mechanism failure in the Code 27 Companion Hub allows an attacker with physical access to completely bypass kiosk restrictions via a factory reset...

PT-2026-56535

Name of the Vulnerable Software and Affected Versions Code 27 Companion Hub affected versions not specified Description A protection mechanism failure allows an attacker with physical access to completely bypass kiosk restrictions by performing a factory reset. Recommendations At the moment, ther...