Lucene search
+L

6283 matches found

Cvelist
Cvelist
added 2025/10/12 10:32 p.m.29 views

CVE-2025-11649 Tomofun Furbo 360/Furbo Mini Root Account hard-coded password

A vulnerability was found in Tomofun Furbo 360 and Furbo Mini. The affected element is an unknown function of the component Root Account Handler. Performing manipulation results in use of hard-coded password. The attack must be initiated from a local position. The attack is considered to have hig...

7.3CVSS0.00133EPSS
SaveExploits0References4
EUVD
EUVD
added 2025/10/12 6:30 p.m.22 views

EUVD-2025-33902

A vulnerability has been found in Tomofun Furbo 360 and Furbo Mini. The impacted element is an unknown function of the file collectlogs.sh of the component Debug Log S3 Bucket Handler. The manipulation leads to insecure storage of sensitive information. An attack has to be approached locally. The...

4.8CVSS5.9AI score0.00216EPSS
SaveExploits1References5
Cvelist
Cvelist
added 2025/10/12 5:32 p.m.16 views

CVE-2025-11639 Tomofun Furbo 360/Furbo Mini Debug Log S3 Bucket collect_logs.sh sensitive information

A vulnerability has been found in Tomofun Furbo 360 and Furbo Mini. The impacted element is an unknown function of the file collectlogs.sh of the component Debug Log S3 Bucket Handler. The manipulation leads to insecure storage of sensitive information. An attack has to be approached locally. The...

4.8CVSS0.00216EPSS
SaveExploits1References4
Vulnrichment
Vulnrichment
added 2025/10/12 5:32 p.m.5 views

CVE-2025-11639 Tomofun Furbo 360/Furbo Mini Debug Log S3 Bucket collect_logs.sh sensitive information

A vulnerability has been found in Tomofun Furbo 360 and Furbo Mini. The impacted element is an unknown function of the file collectlogs.sh of the component Debug Log S3 Bucket Handler. The manipulation leads to insecure storage of sensitive information. An attack has to be approached locally. The...

4.8CVSS6.1AI score0.00216EPSS
SaveExploits1References4
CNNVD
CNNVD
added 2025/10/12 12:00 a.m.9 views

Tomofun Furbo 360和Tomofun Furbo Mini 安全漏洞

Tomofun Furbo 360 and Tomofun Furbo Mini are both smart pet cameras from Tomofun, a company based in Taiwan, China. A security vulnerability exists in Tomofun Furbo 360 FB0035FW036 and earlier versions and Tomofun Furbo Mini MC0020FW074 and earlier versions, which stems from the insecure storage ...

5.5CVSS4AI score0.00216EPSS
SaveExploits1References5
CNNVD
CNNVD
added 2025/10/12 12:00 a.m.15 views

Tomofun Furbo 360和Tomofun Furbo Mini 安全漏洞

Tomofun Furbo 360 and Tomofun Furbo Mini are both smart pet cameras from Tomofun Corporation of Taiwan, China. A security vulnerability exists in Tomofun Furbo 360 and Tomofun Furbo Mini, which stems from the use of hard-coded passwords in the Root Account Handler component, which could lead to a...

7.3CVSS6.7AI score0.00133EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2025/10/12 12:00 a.m.12 views

PT-2025-41737

Name of the Vulnerable Software and Affected Versions Tomofun Furbo 360 versions prior to FB0035 FW 036 Tomofun Furbo Mini versions prior to MC0020 FW 074 Description A security flaw exists in Tomofun Furbo 360 and Furbo Mini devices. The issue involves an unknown function within the Root Account...

7.3CVSS6.4AI score0.00133EPSS
SaveExploits0References9
Tenable Nessus
Tenable Nessus
added 2025/10/11 12:00 a.m.7 views

EulerOS 2.0 SP11 : libtiff (EulerOS-SA-2025-2202)

According to the versions of the libtiff package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A vulnerability was found in LibTIFF up to 4.7.0. It has been rated as critical. This issue affects the function setrow of the file...

7.8CVSS4.1AI score0.00278EPSS
SaveExploits2References3
Tenable Nessus
Tenable Nessus
added 2025/10/11 12:00 a.m.9 views

EulerOS 2.0 SP11 : ncurses (EulerOS-SA-2025-2206)

According to the versions of the ncurses packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A vulnerability has been found in GNU ncurses up to 6.5-20250322 and classified as problematic. This vulnerability affects the function...

4.8CVSS4.1AI score0.00172EPSS
SaveExploits0References2
SUSE CVE
SUSE CVE
added 2025/10/08 11:28 p.m.7 views

SUSE CVE-2025-11413

A vulnerability was found in GNU Binutils 2.45. Affected is the function elflinkaddobjectsymbols of the file bfd/elflink.c of the component Linker. The manipulation results in out-of-bounds read. The attack needs to be approached locally. The exploit has been made public and could be used...

6.1CVSS4.2AI score0.00203EPSS
SaveExploits1References6
OSV
OSV
added 2025/10/08 7:32 p.m.6 views

CVE-2025-11494 GNU Binutils Linker elfxx-x86.c _bfd_x86_elf_late_size_sections out-of-bounds

A vulnerability was found in GNU Binutils 2.45. Impacted is the function bfdx86elflatesizesections of the file bfd/elfxx-x86.c of the component Linker. The manipulation results in out-of-bounds read. The attack needs to be approached locally. The exploit has been made public and could be used. Th...

4.8CVSS5.3AI score
SaveExploits0References11
NVD
NVD
added 2025/10/08 6:15 p.m.8 views

CVE-2025-11489

A security vulnerability has been detected in wonderwhy-er DesktopCommanderMCP up to 0.2.13. This vulnerability affects the function isPathAllowed of the file src/tools/filesystem.ts. The manipulation leads to symlink following. The attack can only be performed from a local environment. The...

7CVSS0.00228EPSS
SaveExploits1References6
EUVD
EUVD
added 2025/10/08 6:02 p.m.10 views

EUVD-2025-33304

A security vulnerability has been detected in wonderwhy-er DesktopCommanderMCP up to 0.2.13. This vulnerability affects the function isPathAllowed of the file src/tools/filesystem.ts. The manipulation leads to symlink following. The attack can only be performed from a local environment. The...

4.5CVSS5.3AI score0.00228EPSS
SaveExploits1References7
Debian CVE
Debian CVE
added 2025/10/07 10:02 p.m.12 views

CVE-2025-11413

A vulnerability was found in GNU Binutils 2.45. Affected is the function elflinkaddobjectsymbols of the file bfd/elflink.c of the component Linker. The manipulation results in out-of-bounds read. The attack needs to be approached locally. The exploit has been made public and could be used...

5.5CVSS4.7AI score0.00203EPSS
SaveExploits1
CVE
CVE
added 2025/10/07 7:16 p.m.18 views

CVE-2025-43910

Dell PowerProtect Data Domain products running DD OS Feature Release 7.7.1.0–8.3.0.15, LTS2025 8.3.1.0, LTS2024 7.13.1.0–7.13.1.30, and LTS 2023 7.10.1.0–7.10.1.60 contain a Stack-based Buffer Overflow in the DDSH CLI. The vulnerability allows a high-privileged, local attacker to trigger a Denial...

4.4CVSS5.8AI score0.0012EPSS
SaveExploits0References1Affected Software1
EUVD
EUVD
added 2025/10/07 12:30 a.m.10 views

EUVD-2021-21634

Malware in sbrugna...

8.2CVSS8.3AI score0.00341EPSS
SaveExploits0References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.8 views

EUVD-2001-0585

Malware in sbrugna...

4.6CVSS6.4AI score0.00953EPSS
SaveExploits3References6
EUVD
EUVD
added 2025/10/07 12:30 a.m.14 views

EUVD-2020-24726

Malware in sbrugna...

7.8CVSS6.8AI score0.00348EPSS
SaveExploits0References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.8 views

EUVD-2017-5600

Malware in sbrugna...

7CVSS7.2AI score0.00668EPSS
SaveExploits0References6
EUVD
EUVD
added 2025/10/07 12:30 a.m.8 views

EUVD-2001-0562

Malware in sbrugna...

7.2CVSS6.4AI score0.00517EPSS
SaveExploits1References7
Rows per page
Query Builder