CVE-2025-60856: Missing Authentication for Critical Function

Reolink Video Doorbell WiFi DB566128M5MPW allows root shell access through an unsecured UART/serial console. An attacker with physical access can connect to the exposed interface and execute arbitrary commands with root privileges. NOTE: this is disputed by the Supplier because of "certain...

EUVD-2021-21372

Malware in sbrugna...

EUVD-2018-7249

Malware in sbrugna...

EUVD-2019-7072

Malware in sbrugna...

EUVD-2017-5832

Malware in sbrugna...

EUVD-2017-5833

Malware in sbrugna...

EUVD-2020-2717

Malware in sbrugna...

EUVD-2020-24688

Malware in sbrugna...

EUVD-2019-18527

Malware in sbrugna...

EUVD-2016-0919

Malware in sbrugna...

EUVD-2020-24487

Malware in sbrugna...

EUVD-2018-12585

Malware in sbrugna...

EUVD-2022-40958

Malicious code in bioql PyPI...

EUVD-2021-32714

Malicious code in bioql PyPI...

EUVD-2022-29916

Malicious code in bioql PyPI...

EUVD-2025-27005

Malicious code in bioql PyPI...

EUVD-2023-34487

Malicious code in bioql PyPI...

EUVD-2025-23188

Malicious code in bioql PyPI...

CVE-2025-36729

A non-primary administrator user with admin rights to the web interface but without shell access permissions can display configuration of the device including the master admin password. This vulnerability also allows the user to give themselves shell access with the root gid...

CVE-2025-36729

The connected sources confirm CVE-2025-36729 concerns RACOM M!DGE2 devices where a non-primary administrator with web-interface rights (no shell access) can view device configuration, exposing the master admin password, and can escalate to shell access with root gid. The root cause is improper pe...