Lucene search
K

447 matches found

RedhatCVE
RedhatCVE
added 2025/05/22 12:27 p.m.6 views

CVE-2010-4212

The USAA application 3.0 for Android stores a mirror image of each visited web page, which might allow physically proximate attackers to obtain sensitive banking information by reading application data...

1.9CVSS6.5AI score0.00069EPSS
Exploits0References1
NVD
NVD
added 2025/05/14 8:15 p.m.10 views

CVE-2025-25370

An issue in realme GT 2 RMX3311 running Android 14 with realme UI 5.0 allows a physically proximate attacker to obtain sensitive information via the show app only setting function...

4.6CVSS0.00126EPSS
Exploits0References2
CNNVD
CNNVD
added 2025/05/14 12:0 a.m.2 views

Realme GT 2 信息泄露漏洞

Realme GT 2 is a smartphone from the Chinese company Realme Realme. The Realme GT 2 RMX3311 suffers from a security vulnerability that originates from physical proximity Attackers may be able to gain access to sensitive information through the display-only app settings feature...

4.6CVSS6.2AI score0.00126EPSS
Exploits0References4
OSV
OSV
added 2025/05/09 4:15 p.m.0 views

CVE-2025-28201

An issue in Victure RX1800 ENV1.0.0r12110933 allows physically proximate attackers to execute arbitrary code or gain root access...

6.8CVSS6.1AI score
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/05/09 12:0 a.m.5 views

CVE-2025-28201

An issue in Victure RX1800 ENV1.0.0r12110933 allows physically proximate attackers to execute arbitrary code or gain root access...

8.3AI score0.00153EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2025/04/26 6:36 a.m.5 views

CVE-2025-25984

An issue in Macro-video Technologies Co.,Ltd V380E6C1 IP camera HwHsAKPIQpWFXHR 1020302 allows a physically proximate attacker to execute arbitrary code via UART component...

6.8CVSS7.8AI score0.00165EPSS
Exploits2References1
RedhatCVE
RedhatCVE
added 2025/04/26 6:2 a.m.3 views

CVE-2025-29316

An issue in DataPatrol Screenshot watermark, printing watermark agent v.3.5.2.0 allows a physically proximate attacker to obtain sensitive information. NOTE: the Supplier disputes the Print Job Watermark Bypass claim because the watermark is added by hooking into the OS printing mechanism, and th...

6.2CVSS6.2AI score0.00044EPSS
Exploits0References1
CVE
CVE
added 2025/04/25 12:0 a.m.47 views

CVE-2024-57375

Andamiro Pump It Up 20th Anniversary (aka Double X/XX/2019) is affected in versions 1.00.0 through 2.08.3. The issue allows a physically proximate attacker to trigger a denial of service (application crash) via certain deselect actions. No exploit code or in-the-wild exploitation details are prov...

2.4CVSS3.8AI score0.00127EPSS
Exploits0References2
OSV
OSV
added 2025/04/18 8:15 p.m.0 views

CVE-2025-25984

An issue in Macro-video Technologies Co.,Ltd V380E6C1 IP camera HwHsAKPIQpWFXHR 1020302 allows a physically proximate attacker to execute arbitrary code via UART component...

6.8CVSS6.1AI score0.00165EPSS
Exploits2References2
NVD
NVD
added 2025/04/17 7:16 p.m.6 views

CVE-2025-29316

An issue in DataPatrol Screenshot watermark, printing watermark agent v.3.5.2.0 allows a physically proximate attacker to obtain sensitive information. NOTE: the Supplier disputes the Print Job Watermark Bypass claim because the watermark is added by hooking into the OS printing mechanism, and th...

6.2CVSS0.00044EPSS
Exploits0References2
CNNVD
CNNVD
added 2025/04/17 12:0 a.m.2 views

DataPatrol 安全漏洞

DataPatrol is a data security software solution from DataPatrol, Inc. designed to help organizations prevent internal data leaks by implementing visible watermarks on files A security vulnerability exists in DataPatrol version 3.5.2.0 that originates in a physical neighbor where an attacker could...

6.2CVSS6.4AI score0.00044EPSS
Exploits0References3
GithubExploit
GithubExploit
added 2025/04/08 2:34 p.m.100 views

Exploit for Classic Buffer Overflow in Qualcomm Qca9367_Firmware

CVE-2024-53027-WIP Work in Progress for POC CVE-2024-53027:...

7.5CVSS8.2AI score0.00311EPSS
Exploits1
Cvelist
Cvelist
added 2025/02/28 12:0 a.m.6 views

CVE-2024-44754

Cryptographic key extraction from internal flash in Minut M2 with firmware version 15142 allows physically proximate attackers to inject modified firmware into any other Minut M2 product via USB...

0.00056EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2025/01/09 12:0 a.m.1 views

PT-2025-2803 · Unknown · Neat Board Nfc

Name of the Vulnerable Software and Affected Versions: Neat Board NFC version 1.20240620.0015 Description: A Buffer Overflow issue exists, allowing physically proximate attackers to escalate privileges via a crafted payload to the password field. This enables local privilege escalation...

6.8CVSS7.3AI score0.00247EPSS
Exploits0References5
NVD
NVD
added 2024/12/06 7:15 p.m.22 views

CVE-2024-47146

Ruijie Reyee OS versions 2.206.x up to but not including 2.320.x could allow an attacker to obtain the devices serial number if physically adjacent and sniffing the RAW WIFI signal...

7.1CVSS0.00074EPSS
Exploits0References1
NVD
NVD
added 2024/10/30 6:15 p.m.14 views

CVE-2024-31973

Hitron CODA-4582 2AHKM-CODA4589 7.2.4.5.1b8 devices allow a remote attacker within Wi-Fi proximity to conduct stored XSS attacks via the 'Network Name SSID' input fields to the /index.htmlwirelessbasic page...

5.2CVSS0.00105EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2024/10/30 12:0 a.m.13 views

CVE-2024-31973

Hitron CODA-4582 2AHKM-CODA4589 7.2.4.5.1b8 devices allow a remote attacker within Wi-Fi proximity to conduct stored XSS attacks via the 'Network Name SSID' input fields to the /index.htmlwirelessbasic page...

6AI score0.00105EPSS
Exploits0References1
Cvelist
Cvelist
added 2024/10/30 12:0 a.m.14 views

CVE-2024-31973

Hitron CODA-4582 2AHKM-CODA4589 7.2.4.5.1b8 devices allow a remote attacker within Wi-Fi proximity to conduct stored XSS attacks via the 'Network Name SSID' input fields to the /index.htmlwirelessbasic page...

0.00105EPSS
Exploits0References1
CVE
CVE
added 2024/10/30 12:0 a.m.54 views

CVE-2024-31973

Hitron CODA-4582 2AHKM-CODA4589 devices (firmware version 7.2.4.5.1b8) are affected by CVE-2024-31973, a stored XSS vulnerability in the SSID field of the /index.html#wireless_basic page. The issue allows a remote attacker within Wi‑Fi proximity to inject script via the Network Name (SSID) input,...

5.2CVSS5.8AI score0.00105EPSS
Exploits0References1
OSV
OSV
added 2024/10/03 6:15 p.m.0 views

CVE-2023-37822

The Eufy Homebase 2 before firmware version 3.3.4.1h creates a dedicated wireless network for its ecosystem, which serves as a proxy to the end user's primary network. The WPA2-PSK generation of this dedicated network is flawed and solely based on the serial number. Due to the flawed generation...

8.2CVSS5.8AI score0.0008EPSS
Exploits0References4
Rows per page
Query Builder