Flock Safety Android Collins 安全漏洞

Flock Safety Android Collins is an application module for managing cameras from Flock Safety USA. A security vulnerability exists in Flock Safety Android Collins version 6.35.31, which stems from a lack of authentication and could lead to denial of service, information disclosure, and remote code...

CVE-2025-59405

The Flock Safety Peripheral Android application (version 7.38.3 ) installed on Falcon and Sparrow License Plate Readers and Bravo Edge AI Compute Devices contains a cleartext DataDog API key embedded within its codebase. Due to the ability to trivially decompile or inspect application binaries, a...

CVE-2025-59407: Use of Hard-coded Cryptographic Key

The Flock Safety DetectionProcessing com.flocksafety.android.objects application 6.35.33 for Android installed on Falcon and Sparrow License Plate Readers and Bravo Edge AI Compute Devices bundles a Java Keystore flockrye.bks along with its hardcoded password flockhibiki17 in its code. The keysto...

Flock Safety Peripheral 安全漏洞

Flock Safety Peripheral is a device edge software from Flock Safety USA. A security vulnerability exists in Flock Safety Peripheral version 7.38.3, which stems from the inclusion of a plaintext DataDog API key in the code base, which could lead to key disclosure...

CVE-2025-59406: Cleartext Transmission of Sensitive Information

The Flock Safety Pisco com.flocksafety.android.pisco application 6.21.11 for Android installed on Falcon and Sparrow License Plate Readers and Bravo Edge AI Compute Devices has a cleartext Auth0 client secret in its codebase. Because application binaries can be trivially decompiled or inspected,...

CVE-2025-59409

Flock Safety Falcon and Sparrow License Plate Readers (version OPM1.171019.026 ) are vulnerable because development Wi-Fi credentials (specifically test_flck) are stored in cleartext within the production firmware. This vulnerability, identified as CWE-312 , could allow an attacker to gain unauth...

CVE-2025-59406

The Flock Safety Pisco application (com.flocksafety.android.pisco ) version 6.21.11 for Android contains a cleartext Auth0 client secret embedded directly in its codebase. This application is installed on Falcon and Sparrow License Plate Readers and Bravo Edge AI Compute Devices . Due to the ease...

CVE-2025-59407

The Flock Safety DetectionProcessing application (version 6.35.33 ) for Android, used on Falcon and Sparrow License Plate Readers and Bravo Edge AI Compute Devices, contains a hardcoded password (flockhibiki17) for a bundled Java Keystore (flock_rye.bks). This vulnerability allows for the disclos...

PT-2025-40414

Name of the Vulnerable Software and Affected Versions Flock Safety Falcon and Sparrow License Plate Readers version OPM1.171019.026 Description The devices ship with development Wi-Fi credentials specifically, test flck stored in cleartext within the production firmware. This could allow...

CVE-2025-59403: Exposed Dangerous Method or Function

The Flock Safety Android Collins application aka com.flocksafety.android.collins 6.35.31 for Android lacks authentication. It is responsible for the camera feed on Falcon, Sparrow, and Bravo devices, but exposes administrative API endpoints on port 8080 without authentication. Endpoints include b...

CVE-2025-59403

The Flock Safety Android Collins application (com.flocksafety.android.collins) version 6.35.31 for Android contains a critical authentication bypass vulnerability. The application, which manages camera feeds for Falcon , Sparrow , and Bravo devices, exposes administrative API endpoints on port 80...

CVE-2025-59407

The Flock Safety DetectionProcessing com.flocksafety.android.objects application 6.35.33 for Android installed on Falcon and Sparrow License Plate Readers and Bravo Edge AI Compute Devices bundles a Java Keystore flockrye.bks along with its hardcoded password flockhibiki17 in its code. The keysto...

Flock Safety Pisco 安全漏洞

Flock Safety Pisco is a backend authentication module from Flock Safety USA. A security vulnerability exists in Flock Safety Pisco version 6.21.11, which stems from the inclusion of plaintext Auth0 client keys in the codebase, which could lead to key disclosure...

CVE-2025-59403

The Flock Safety Android Collins application aka com.flocksafety.android.collins 6.35.31 for Android lacks authentication. It is responsible for the camera feed on Falcon, Sparrow, and Bravo devices, but exposes administrative API endpoints on port 8080 without authentication. Endpoints include b...

PT-2025-40412

Name of the Vulnerable Software and Affected Versions Flock Safety Pisco application version 6.21.11 Description The Flock Safety Pisco application for Android contains a cleartext Auth0 client secret within its codebase. Attackers can recover this OAuth secret without elevated privileges by...

CVE-2025-59405

The Flock Safety Peripheral com.flocksafety.android.peripheral application 7.38.3 for Android installed on Falcon and Sparrow License Plate Readers and Bravo Edge AI Compute Devices contains a cleartext DataDog API key within in its codebase. Because application binaries can be trivially decompil...

CVE-2025-59405

The Flock Safety Peripheral com.flocksafety.android.peripheral application 7.38.3 for Android installed on Falcon and Sparrow License Plate Readers and Bravo Edge AI Compute Devices contains a cleartext DataDog API key within in its codebase. Because application binaries can be trivially decompil...

SUSE CVE-2022-50460

In the Linux kernel, the following vulnerability has been resolved: cifs: Fix xid leak in cifsflock If not flock, before return -ENOLCK, should free the xid, otherwise, the xid will be leaked...

CVE-2022-50460

In the Linux kernel, the following vulnerability has been resolved: cifs: Fix xid leak in cifsflock If not flock, before return -ENOLCK, should free the xid, otherwise, the xid will be leaked...

UBUNTU-CVE-2022-50460

In the Linux kernel, the following vulnerability has been resolved: cifs: Fix xid leak in cifsflock If not flock, before return -ENOLCK, should free the xid, otherwise, the xid will be leaked...