Remote Control Server 安全漏洞

Remote Control Server is a remote control server by Stephan Schultz, an individual developer. A security vulnerability exists in Remote Control Server version 3.1.1.12 that originates from unauthenticated remote code execution and could lead to complete system compromise...

CVE-2025-53378

A missing authentication vulnerability in Trend Micro Worry-Free Business Security Services WFBSS agent could have allowed an unauthenticated attacker to remotely take control of the agent on affected installations. Also note: this vulnerability only affected the SaaS client version of WFBSS only...

CVE-2025-53378

A missing authentication vulnerability in Trend Micro Worry-Free Business Security Services WFBSS agent could have allowed an unauthenticated attacker to remotely take control of the agent on affected installations. Also note: this vulnerability only affected the SaaS client version of WFBSS only...

CVE-2025-53378

A missing authentication vulnerability in Trend Micro Worry-Free Business Security Services WFBSS agent could have allowed an unauthenticated attacker to remotely take control of the agent on affected installations. Also note: this vulnerability only affected the SaaS client version of WFBSS only...

CVE-2025-53378

A missing authentication vulnerability in Trend Micro Worry-Free Business Security Services WFBSS agent could have allowed an unauthenticated attacker to remotely take control of the agent on affected installations. Also note: this vulnerability only affected the SaaS client version of WFBSS only...

CVE-2025-53378

CVE-2025-53378 concerns Trend Micro Worry-Free Business Security Services (WFBSS) agent. The issue is a missing authentication vulnerability that could allow an unauthenticated attacker to remotely take control of the agent on affected installations. Affected product scope is limited to the SaaS ...

Trend Micro Worry-Free Business Security Services 访问控制错误漏洞

Trend Micro Worry-Free Business Security Services is an endpoint security solution from Trend Micro, Inc. A security vulnerability exists in Trend Micro Worry-Free Business Security Services that stems from a lack of authentication and could allow an unauthenticated attacker to remotely control a...

PT-2025-29125

Name of the Vulnerable Software and Affected Versions End-of-Train EoT and Head-of-Train HoT devices affected versions not specified Description A critical vulnerability exists in the remote linking protocol used for End-of-Train EoT and Head-of-Train HoT devices, which rely on a BCH checksum for...

PT-2025-29084

Name of the Vulnerable Software and Affected Versions: OpenSynergy BlueSDK aka Blue SDK versions through 6.x Description: The vulnerability resides within the BlueSDK Bluetooth stack and is due to a use-after-free condition. This flaw occurs because of a lack of validation to confirm the existenc...

Malicious code in servula (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8505d9630f35be52fc05427d2e1cbc9e0fe1ec0de764803117447e8b0b8d265e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

📄 Hecate PC Remote Control 1.6.1.0 Remote Code Execution

Hecate PC Remote Control version 1.6.1.0 listens on UDP port 48436 and accepts unauthenticated JSON commands for keyboard and mouse input. This lack of authentication allows a remote attacker to simulate user interaction, open system dialogs, and execute arbitrary commands. Exploit Title: Hecate ...

📄 Hecate PC Remote Control 1.6.1.0 Remote System Control

Hecate PC Remote Control version 1.6.1.0 is vulnerable to unauthenticated system control. An attacker on the same network can send crafted UDP packets to the target without authentication, allowing them to remotely issue system-level commands such as lock, shutdown, restart, and sleep. Exploit...

CVE-2025-48466

Successful exploitation of the vulnerability could allow an unauthenticated, remote attacker to send Modbus TCP packets to manipulate Digital Outputs, potentially allowing remote control of relay channel which may lead to operational or safety risks...

📄 Mouselink 5.0.1 Remote System Control

Mouselink version 5.0.1 allows remote attackers to control system functions shutdown, restart, sleep, logout. By default, no password is configured, allowing an attacker to obtain a valid JWT token and invoke privileged /api/PCControl/ endpoints, leading to unauthorized system operations. Exploit...

PT-2025-26811

Name of the Vulnerable Software and Affected Versions: Brother printers affected versions not specified Fujifilm printers affected versions not specified Ricoh printers affected versions not specified Konica Minolta printers affected versions not specified Toshiba printers affected versions not...

PT-2025-26678

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: The issue allows an unauthenticated, remote attacker to send Modbus TCP packets to manipulate Digital Outputs. This could potentially allow remote control of the relay channel, leading to...

Schneider Electric EVLink WallBox Operating System Command Injection Vulnerability

The Schneider Electric EVLink WallBox is a home charging station from the French company Schneider Electric. The Schneider Electric EVLink WallBox suffers from an operating system command injection vulnerability that originates from improper neutralization of special elements in OS commands, whic...

The vulnerability of the Yealink Meeting Server lies in the lack of measures taken at the management level to ensure data hygiene, allowing attackers to execute arbitrary codes.

The vulnerability of the Yealink Meeting Server lies in the lack of measures taken at the management level to protect data. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands remotely...

📄 Mobile Mouse Server 3.6.3 Remote Code Execution

Mobile Mouse Server for macOS exposes a TCP control interface on port 9090, which accepts plaintext commands to simulate keyboard input and launch applications. By default, no authentication is required, allowing a remote attacker to fully control the target system. Version 3.6.3 is affected...

CISA Warns of Remote Control Flaws in SinoTrack GPS Trackers

The US CISA reports critical vulnerabilities in SinoTrack GPS devices that could let attackers remotely control vehicles and track locations. Discover the vulnerabilities and essential steps to secure your device...