EUVD-2025-22906

Malicious code in bioql PyPI...

EUVD-2025-22907

Malicious code in bioql PyPI...

EUVD-2025-22909

Malicious code in bioql PyPI...

EUVD-2025-23864

Malicious code in bioql PyPI...

CVE-2025-30127

An issue was discovered on Marbella KR8s Dashcam FF 2.0.8 devices. Once access is gained either by default, common, or cracked passwords, the video recordings containing sensitive routes, conversations, and footage are open for downloading by creating a socket to command port 7777, and then...

CVE-2025-30127

An issue was discovered on Marbella KR8s Dashcam FF 2.0.8 devices. Once access is gained either by default, common, or cracked passwords, the video recordings containing sensitive routes, conversations, and footage are open for downloading by creating a socket to command port 7777, and then...

CVE-2025-30127

An issue was discovered on Marbella KR8s Dashcam FF 2.0.8 devices. Once access is gained either by default, common, or cracked passwords, the video recordings containing sensitive routes, conversations, and footage are open for downloading by creating a socket to command port 7777, and then...

CVE-2025-30127

The Marbella KR8s Dashcam FF (version 2.0.8) is vulnerable to unauthorized access to sensitive recordings. Attackers can gain access using default, common, or cracked passwords to download video and audio data. The root cause involves the ability to create a socket to command port 7777 , subseque...

CVE-2025-30127

An issue was discovered on Marbella KR8s Dashcam FF 2.0.8 devices. Once access is gained either by default, common, or cracked passwords, the video recordings containing sensitive routes, conversations, and footage are open for downloading by creating a socket to command port 7777, and then...

PT-2025-32198 · Marbella · Marbella Kr8S Dashcam Ff

Name of the Vulnerable Software and Affected Versions: Marbella KR8s Dashcam FF version 2.0.8 Description: An issue exists on Marbella KR8s Dashcam FF 2.0.8 devices where video recordings, containing sensitive data such as routes, conversations, and footage, are accessible for download. This is...

CVE-2025-30127: Exposure of Sensitive Information to an Unauthorized Actor

An issue was discovered on Marbella KR8s Dashcam FF 2.0.8 devices. Once access is gained either by default, common, or cracked passwords, the video recordings containing sensitive routes, conversations, and footage are open for downloading by creating a socket to command port 7777, and then...

CVE-2025-30124

An issue was discovered on Marbella KR8s Dashcam FF 2.0.8 devices. When a new SD card is inserted into the dashcam, the existing password is written onto the SD card in cleartext automatically. An attacker with temporary access to the dashcam can switch the SD card to steal this password...

CVE-2025-30126

An issue was discovered on Marbella KR8s Dashcam FF 2.0.8 devices. Via port 7777 without any need to pair or press a physical button, a remote attacker can disable recording, delete recordings, or even disable battery protection to cause a flat battery to essentially disable the car from being...

CVE-2025-30126

An issue was discovered on Marbella KR8s Dashcam FF 2.0.8 devices. Via port 7777 without any need to pair or press a physical button, a remote attacker can disable recording, delete recordings, or even disable battery protection to cause a flat battery to essentially disable the car from being...

CVE-2025-30126

An issue was discovered on Marbella KR8s Dashcam FF 2.0.8 devices. Via port 7777 without any need to pair or press a physical button, a remote attacker can disable recording, delete recordings, or even disable battery protection to cause a flat battery to essentially disable the car from being...

CVE-2025-30126

The Marbella KR8s Dashcam FF version 2.0.8 is vulnerable to an unauthorized operation via port 7777 . A remote attacker can exploit this missing authentication to disable recording, delete existing recordings, or disable battery protection without requiring pairing or physical button interaction....

CVE-2025-30124

An issue was discovered on Marbella KR8s Dashcam FF 2.0.8 devices. When a new SD card is inserted into the dashcam, the existing password is written onto the SD card in cleartext automatically. An attacker with temporary access to the dashcam can switch the SD card to steal this password...

CVE-2025-30124

The Marbella KR8s Dashcam FF version 2.0.8 is vulnerable to the cleartext storage of sensitive information (CWE-312 ). When a new SD card is inserted into the device, the system automatically writes the existing password onto the card in cleartext . An attacker with temporary physical access to t...

CVE-2025-30125

The Marbella KR8s Dashcam FF (version 2.0.8 ) is vulnerable to an insecure-by-default condition because all units are shipped with the same default credentials of 12345678 . Furthermore, the device imposes an 8-character limit on custom passwords, which can be cracked in approximately 8 hours usi...

PT-2025-31106 · Marbella · Marbella Kr8S Dashcam Ff

Name of the Vulnerable Software and Affected Versions: Marbella KR8s Dashcam FF version 2.0.8 Description: Marbella KR8s Dashcam FF 2.0.8 devices are shipped with default credentials of 12345678, creating an insecure-by-default condition. Passwords can be limited to 8 characters, which can be...