672 matches found
CVE-2019-11014
The VStarCam vstc.vscam.client library and vstc.vscam shared object, as used in the Eye4 application for Android, iOS, and Windows, do not prevent spoofing of the camera server. An attacker can create a fake camera server that listens for the client looking for a camera on the local network. When...
CVE-2019-12820
A vulnerability was found in the app 2.0 of the Shenzhen Jisiwei i3 robot vacuum cleaner. Actions performed on the app such as changing a password, and personal information it communicates with the server, use unencrypted HTTP. As an example, while logging in through the app to a Jisiwei account,...
CVE-2025-66489
Cal.com is open-source scheduling software. Prior to 5.9.8, A flaw in the login credentials provider allows an attacker to bypass password verification when a TOTP code is provided, potentially gaining unauthorized access to user accounts. This issue exists due to problematic conditional logic in...
CVE-2025-12940
Login credentials are inadvertently recorded in logs if a Syslog Server is configured in NETGEAR WAX610 and WAX610Y AX1800 Dual Band PoE Multi-Gig Insight Managed WiFi 6 Access Points. An user having access to the syslog server can read the logs containing these credentials. This issue affects...
EUVD-2025-93540
Login credentials are inadvertently recorded in logs if a Syslog Server is configured in NETGEAR WAX610 and WAX610Y AX1800 Dual Band PoE Multi-Gig Insight Managed WiFi 6 Access Points. An user having access to the syslog server can read the logs containing these credentials. This issue affects...
PT-2025-46351
Name of the Vulnerable Software and Affected Versions NETGEAR WAX610 versions prior to 11.8.0.10 NETGEAR WAX610Y versions prior to 11.8.0.10 Description A configuration issue can lead to login credentials being inadvertently recorded in logs when a Syslog Server is configured. An attacker with...
CVE-2025-41718
A cleartext transmission of sensitive information vulnerability in the affected products allows an unauthorized remote attacker to gain login credentials and access the Web-UI...
TikTok scam sells you access to your own fake money
This scam starts in your TikTok DMs. A brand-new account drops a melodramatic message—terminal illness, last goodbye, “I left you some assets.” At the bottom: a ready-made username and password for a crypto site you’ve never used. It’s designed to feel urgent and personal so you tap before you...
CVE-2025-41718
A cleartext transmission of sensitive information vulnerability in the affected products allows an unauthorized remote attacker to gain login credentials and access the Web-UI...
EUVD-2025-34145
A cleartext transmission of sensitive information vulnerability in the affected products allows an unauthorized remote attacker to gain login credentials and access the Web-UI...
CVE-2025-41705
An unauthenticated remote attacker MITM can intercept the websocket messages to gain access to the login credentials for the Webfrontend...
EUVD-2025-34146
An unauthenticated remote attacker MITM can intercept the websocket messages to gain access to the login credentials for the Webfrontend...
Phoenix Contact QUINT4-UPS/24DC/24DC/10/EIP 安全漏洞
The Phoenix Contact QUINT4-UPS/24DC/24DC/10/EIP is an industrial grade DC uninterruptible power supply module from Phoenix Contact, Germany. A security vulnerability exists in the Phoenix Contact QUINT4-UPS/24DC/24DC/10/EIP that originates from an unauthenticated, remote attacker who can obtain...
Murrelektronik Firmware Impact67 安全漏洞
Murrelektronik Firmware Impact67 is a series of field module firmware from Murrelektronik, Germany. A security vulnerability exists in Murrelektronik Firmware Impact67 Pro 54630, which originates from the transmission of sensitive information in clear text and could allow an unauthorized remote...
PT-2025-41860
Name of the Vulnerable Software and Affected Versions Affected versions not specified Description A cleartext transmission of sensitive information allows an unauthorized remote attacker to gain login credentials and access the Web-UI. The vulnerability is due to the absence of proper encryption ...
EUVD-2011-3319
Malware in sbrugna...
EUVD-2017-3316
Malware in sbrugna...
EUVD-2018-10372
Malware in sbrugna...