58 matches found
CVE-2026-77960 Use of Hard-coded Credentials in Bransys ELD
Bransys ELD is shipped with hardcoded MQTT credentials, which will grant read access to real-time data for every active device across a subset of carriers that were connected to the affected MQTT broker...
CVE-2026-86689 Cleartext Transmission of Sensitive Information in Bransys ELD
Bransys ELD is shipped with hardcoded MQTT credentials, which will grant read access to real-time data for every active device across a subset of carriers that were connected to the affected MQTT broker...
CVE-2026-86689 Cleartext Transmission of Sensitive Information in Bransys ELD
Bransys ELD is shipped with hardcoded MQTT credentials, which will grant read access to real-time data for every active device across a subset of carriers that were connected to the affected MQTT broker...
EUVD-2026-83127
Bransys ELD is shipped with hardcoded MQTT credentials, which will grant read access to real-time data for every active device across a subset of carriers that were connected to the affected MQTT broker...
CVE-2026-86689: Cleartext Transmission of Sensitive Information
Bransys ELD is shipped with hardcoded MQTT credentials, which will grant read access to real-time data for every active device across a subset of carriers that were connected to the affected MQTT broker...
PT-2026-95456
Bransys ELD is shipped with hardcoded MQTT credentials, which will grant read access to real-time data for every active device across a subset of carriers that were connected to the affected MQTT broker...
CVE-2026-69658 Ebyte NA111-M Cleartext Transmission of Sensitive Information
MQTT credentials and control traffic are transmitted in cleartext, exposing sensitive information to network-level attackers. This may enable unauthorized device impersonation and disruption of messaging functions...
CVE-2026-69658
Ebyte NE2-D11 is vulnerable to cleartext transmission of MQTT credentials and control traffic , allowing network-level attackers to intercept sensitive data. The exposed information may enable unauthorized device impersonation and disruption of messaging functions . The vulnerability is rated CRI...
CVE-2026-69658 Ebyte NA111-M Cleartext Transmission of Sensitive Information
MQTT credentials and control traffic are transmitted in cleartext, exposing sensitive information to network-level attackers. This may enable unauthorized device impersonation and disruption of messaging functions...
Frigate NVR - API Exposure Detection
Detected an exposed Frigate NVR API, potentially allowing unauthorized access to camera feeds, internal network configuration, and MQTT credentials. !/usr/bin/env python3 -- coding: utf-8 -- """Detected an exposed Frigate NVR API, potentially allowing unauthorized access to camera feeds, internal...
PT-2026-48876
Name of the Vulnerable Software and Affected Versions Yarbo Android and iOS applications affected versions not specified Description The Android and iOS applications contain hard-coded MQTT broker credentials that are identical across all users and devices. These credentials, embedded in the...
wendor_labs_exploitation
Wendor Vending Machine Exploitation & Security Research Lab T...
Netmaker does not verify JWT signatures for host tokens
Netmaker by Gravitl is an open-source WireGuard-based networking platform for creating and managing virtual overlay networks. The VerifyHostToken function in logic/jwts.go does not validate the JWT signature when verifying host tokens. After calling jwt.ParseWithClaims, the function only checks...
EUVD-2021-27049
Malware in sbrugna...
EUVD-2023-26736
Malicious code in bioql PyPI...
EUVD-2024-16186
Malicious code in bioql PyPI...
EUVD-2023-26734
Malicious code in bioql PyPI...
EUVD-2025-5284
Malicious code in bioql PyPI...