PT-2025-29125

Name of the Vulnerable Software and Affected Versions End-of-Train EoT and Head-of-Train HoT devices affected versions not specified Description A critical vulnerability exists in the remote linking protocol used for End-of-Train EoT and Head-of-Train HoT devices, which rely on a BCH checksum for...

Trend Micro Worry-Free Business Security Services 访问控制错误漏洞

Trend Micro Worry-Free Business Security Services is an endpoint security solution from Trend Micro, Inc. A security vulnerability exists in Trend Micro Worry-Free Business Security Services that stems from a lack of authentication and could allow an unauthenticated attacker to remotely control a...

PT-2025-29084

Name of the Vulnerable Software and Affected Versions: OpenSynergy BlueSDK aka Blue SDK versions through 6.x Description: The vulnerability resides within the BlueSDK Bluetooth stack and is due to a use-after-free condition. This flaw occurs because of a lack of validation to confirm the existenc...

Malicious code in servula (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8505d9630f35be52fc05427d2e1cbc9e0fe1ec0de764803117447e8b0b8d265e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

📄 Hecate PC Remote Control 1.6.1.0 Remote System Control

Hecate PC Remote Control version 1.6.1.0 is vulnerable to unauthenticated system control. An attacker on the same network can send crafted UDP packets to the target without authentication, allowing them to remotely issue system-level commands such as lock, shutdown, restart, and sleep. Exploit...

📄 Hecate PC Remote Control 1.6.1.0 Remote Code Execution

Hecate PC Remote Control version 1.6.1.0 listens on UDP port 48436 and accepts unauthenticated JSON commands for keyboard and mouse input. This lack of authentication allows a remote attacker to simulate user interaction, open system dialogs, and execute arbitrary commands. Exploit Title: Hecate ...

CVE-2025-48466

Successful exploitation of the vulnerability could allow an unauthenticated, remote attacker to send Modbus TCP packets to manipulate Digital Outputs, potentially allowing remote control of relay channel which may lead to operational or safety risks...

📄 Mouselink 5.0.1 Remote System Control

Mouselink version 5.0.1 allows remote attackers to control system functions shutdown, restart, sleep, logout. By default, no password is configured, allowing an attacker to obtain a valid JWT token and invoke privileged /api/PCControl/ endpoints, leading to unauthorized system operations. Exploit...

PT-2025-26811

Name of the Vulnerable Software and Affected Versions: Brother printers affected versions not specified Fujifilm printers affected versions not specified Ricoh printers affected versions not specified Konica Minolta printers affected versions not specified Toshiba printers affected versions not...

PT-2025-26678

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: The issue allows an unauthenticated, remote attacker to send Modbus TCP packets to manipulate Digital Outputs. This could potentially allow remote control of the relay channel, leading to...

Schneider Electric EVLink WallBox Operating System Command Injection Vulnerability

The Schneider Electric EVLink WallBox is a home charging station from the French company Schneider Electric. The Schneider Electric EVLink WallBox suffers from an operating system command injection vulnerability that originates from improper neutralization of special elements in OS commands, whic...

The vulnerability of the Yealink Meeting Server lies in the lack of measures taken at the management level to ensure data hygiene, allowing attackers to execute arbitrary codes.

The vulnerability of the Yealink Meeting Server lies in the lack of measures taken at the management level to protect data. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands remotely...

📄 Mobile Mouse Server 3.6.3 Remote Code Execution

Mobile Mouse Server for macOS exposes a TCP control interface on port 9090, which accepts plaintext commands to simulate keyboard input and launch applications. By default, no authentication is required, allowing a remote attacker to fully control the target system. Version 3.6.3 is affected...

CISA Warns of Remote Control Flaws in SinoTrack GPS Trackers

The US CISA reports critical vulnerabilities in SinoTrack GPS devices that could let attackers remotely control vehicles and track locations. Discover the vulnerabilities and essential steps to secure your device...

CVE-2025-5743

CWE-78: Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability exists that could cause remote control over the charging station when an authenticated user modifies configuration parameters on the web server...

CVE-2025-5743

CWE-78: Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability exists that could cause remote control over the charging station when an authenticated user modifies configuration parameters on the web server...

CVE-2025-5743

The CVE-2025-5743 entry concerns Schneider Electric EVLink WallBox (home charging station) with an OS command injection flaw (CWE-78). The vulnerability arises from improper neutralization of OS command elements, enabling remote control of the charging station when an authenticated user changes c...

CVE-2025-5743

CWE-78: Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability exists that could cause remote control over the charging station when an authenticated user modifies configuration parameters on the web server...

PT-2025-24625 · Schneider Electric · Evlink Wallbox

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: A vulnerability exists that could cause remote control over the charging station when an authenticated user modifies configuration parameters on the web server. This issue is related to...

Schneider Electric EVLink WallBox 操作系统命令注入漏洞

The Schneider Electric EVLink WallBox is a home charging station from the French company Schneider Electric. The Schneider Electric EVLink WallBox suffers from an operating system command injection vulnerability that originates from improper neutralization of special elements in OS commands, whic...