CVE-2025-41098 Insecure Direct Object Reference in GPS BOLD Workplanner

Insecure Direct Object Reference IDOR vulnerability in BOLD Workplanner in versions prior to 2.5.25 4935b438f9b, consisting of a misuse of the general enquiry web service...

CVE-2025-41098 Insecure Direct Object Reference in GPS BOLD Workplanner

Insecure Direct Object Reference IDOR vulnerability in BOLD Workplanner in versions prior to 2.5.25 4935b438f9b, consisting of a misuse of the general enquiry web service...

CVE-2025-41099

CVE-2025-41099 describes an insecure direct object reference in Bold Workplanner before version 2.5.25 (build 4935b438f9b). The issue arises from insufficient input validation, allowing an authenticated user to access the internal list of permissions using unauthorized internal identifiers, with ...

CVE-2025-41097

CVE-2025-41097 affects Bold Workplanner, an enterprise HR software. The issue is an insecure direct object reference (IDOR) caused by insufficient validation of user input, allowing an authenticated user to access basic employee details using unauthorized internal identifiers. This vulnerability ...

CVE-2025-41095

CVE-2025-41095 affects Bold Workplanner. Affected: versions prior to 2.5.25 (4935b438f9b). Issue: insecure direct object reference (IDOR) due to insufficient validation of user input, enabling an authenticated user to access planning counter details via unauthorized internal identifiers. Impact d...

CVE-2025-41094 Insecure Direct Object Reference in GPS BOLD Workplanner

Insecure Direct Object Reference IDOR vulnerability in BOLD Workplanner in versions prior to 2.5.25 4935b438f9b, consisting of a lack of adequate validation of user input, allowing an authenticated user to access to functional contract details using unauthorised internal identifiers...

CVE-2025-41093

CVE-2025-41093 affects Bold Workplanner prior to version 2.5.25. The issue is an insecure direct object reference (IDOR) caused by inadequate validation of user input, allowing an authenticated user to access basic contract details via unauthorized internal identifiers. Remediation: update to ver...

CVE-2025-43993: Unquoted Search Path or Element

Dell Wireless 5932e and Qualcomm Snapdragon X62 Firmware and GNSS/GPS Driver, versions prior to 3.2.0.22 contain an Unquoted Search Path or Element vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Code Execution...

The vulnerability of the GPS component of Qualcomm’s embedded software allows a perpetrator to compromise the confidentiality and integrity of the protected information.

The vulnerability of the GPS component of Qualcomm’s embedded software lies in improper authentication. Exploiting this vulnerability could allow a remote attacker to compromise the confidentiality and integrity of the protected information...

Linux Distros Unpatched Vulnerability : CVE-2016-5348

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The GPS component in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, 6.x before 2016-10-01, and 7.0 before 2016-10-01 allows man-in-the-middle...

Integrated Simulation Framework for Adversarial Attacks on Autonomous Vehicles

Autonomous vehicles AVs rely on complex perception and communication systems, making them vulnerable to adversarial attacks that can compromise safety. While simulation offers a scalable and safe environment for robustness testing, existing frameworks typically lack comprehensive supportfor...

CVE-2025-51643

Meitrack T366G-L GPS Tracker devices contain an SPI flash chip Winbond 25Q64JVSIQ that is accessible without authentication or tamper protection. An attacker with physical access to the device can use a standard SPI programmer to extract the firmware using flashrom. This results in exposure of...

Meitrack T366G-L GPS Tracker 安全漏洞

Meitrack T366G-L GPS Tracker is a vehicle GPT locator from Meitrack China. A security vulnerability exists in the Meitrack T366G-L GPS Tracker, which originates from improper access control of the SPI flash memory chip and could lead to the disclosure of sensitive configuration data...

CVE-2025-51643: Exposure of Sensitive Information to an Unauthorized Actor

Meitrack T366G-L GPS Tracker devices contain an SPI flash chip Winbond 25Q64JVSIQ that is accessible without authentication or tamper protection. An attacker with physical access to the device can use a standard SPI programmer to extract the firmware using flashrom. This results in exposure of...

Malicious code in red-contrib-enable-gps (npm)

The package red-contrib-enable-gps was found to contain malicious code...

MAL-2025-31914 Malicious code in red-contrib-enable-gps (npm)

The package red-contrib-enable-gps was found to contain malicious code...

Maka GPS Marbella KR8s 安全漏洞

Maka GPS Marbella KR8s is a car recorder from Maka GPS, Singapore. A security vulnerability exists in Maka GPS Marbella KR8s version 2.0.8, which stems from a default or weak password that could result in video recordings being downloaded...

Maka GPS Marbella KR8s 安全漏洞

Maka GPS Marbella KR8s is a car recorder from Maka GPS Singapore. A security vulnerability exists in Maka GPS Marbella KR8s version 2.0.8, which stems from default credentials and short password restrictions...

Maka GPS Marbella KR8s 安全漏洞

Maka GPS Marbella KR8s is a car recorder from Maka GPS Singapore. A security vulnerability exists in Maka GPS Marbella KR8s version 2.0.8, which originates from a password written in clear text to the SD card...

Maka GPS Marbella KR8s 安全漏洞

Maka GPS Marbella KR8s is a car recorder from Maka GPS Singapore. A security vulnerability exists in Maka GPS Marbella KR8s version 2.0.8, which originates from an unauthorized operation on port 7777...