CVE-2025-34067: Deserialization of Untrusted Data

An unauthenticated remote command execution vulnerability exists in the applyCT component of the Hikvision Integrated Security Management Platform due to the use of a vulnerable version of the Fastjson library. The endpoint /bic/ssoService/v1/applyCT deserializes untrusted user input, allowing an...

Weak Password Vulnerability in VAN AURORA V6000

Based on hybrid biometrics and computer vision technology, V6000 provides an integrated security management platform for pedestrian, vehicle and object inspection. A weak password vulnerability exists in Vantage V6000, which can be exploited by attackers to obtain sensitive information...