11773 matches found
goTenna V1 安全漏洞
goTenna V1 is a portable offline communication device from goTenna, Inc. that enables long-distance peer-to-peer communication between smartphones via mesh network technology. A security vulnerability exists in goTenna V1, which originates from hard-coded authentication tokens, which could lead t...
Commvault Web Server unspecified vulnerability
RISK EVALUATION According to Commvault: "The Web Server is a component in CommCell environments that provides a RESTful interface to the software where users can perform various tasks using available APIs". A remote, authenticated attacker can exploit an unspecified vulnerability to compromise a...
Security Bulletin: Potential Oracle Outside In Technology Vulnerabilities Exposed in ECM Products (CVE-2011-2264, CVE-2011-0794, and CVE-2011-0808)
Question Oracle Outside In Technology contains exploitable vulnerabilities in the CorelDRAW CVE-2011-2264 file parser, the File ID SDK CVE-2011-0794, and file filters CVE-2011-0808. Each of these vulnerabilities may allow a remote, unauthenticated user to execute arbitrary code on a vulnerable...
Logic Flaw Vulnerability in MSS Streaming Media Server at Suzhou Kodak Technology Co.
Ltd. is a leading provider of video and security products and solutions. A logic flaw vulnerability exists in the MSS streaming media server of Suzhou Kedar Technology Co. Ltd. that can be exploited by an attacker to illegally create a new user account and elevate privileges during login...
Faster, more personalized service begins at the frontline with Microsoft Intune
In healthcare, patient trust often begins at the frontline with people who deliver care, respond to questions, and manage crucial in-the-moment decisions. Increasingly, those experiences are shaped by the tools frontline workers use. When devices are secure, responsive, and tailored to clinical...
Faster, more personalized service begins at the frontline with Microsoft Intune
In healthcare, patient trust often begins at the frontline with people who deliver care, respond to questions, and manage crucial in-the-moment decisions. Increasingly, those experiences are shaped by the tools frontline workers use. When devices are secure, responsive, and tailored to clinical...
SQL Injection Vulnerability in Smart Reporting Online Business Hall of Xintian Technology Co.
Xintian Technology Co., Ltd. is a professional manufacturer and supplier of water meters, energy meters and gas meters. A SQL injection vulnerability exists in the Smart Reporting Online Business Office of Xintian Technology Company Limited, which can be exploited by attackers to obtain sensitive...
SIOS Technology Quick Agent 安全漏洞
SIOS Technology Quick Agent is a component of a high availability and disaster recovery solution from SIOS Technology, Inc. that is used to monitor and protect business-critical applications. A security vulnerability exists in SIOS Technology Quick Agent V3 and V2, which stems from an improperly...
Planet Technology Industrial Switch Flaws Risk Full Takeover – Patch Now
Immersive security researchers discovered critical vulnerabilities in Planet Technology network management and switch products, allowing full device control.…...
CVE-2025-46275 Planet Technology Network Products Missing Authentication for Critical Function
WGS-80HPT-V2 and WGS-4215-8T2S are missing authentication that could allow an attacker to create an administrator account without knowing any existing credentials...
CVE-2025-46275
Affected products: PLANET WGS-80HPT-V2 and PLANET WGS-4215-8T2S. Description confirms a missing authentication flaw that could allow an attacker to create an administrator account without existing credentials. The issue is a control-access vulnerability on these PLANET devices; no specific exploi...
CVE-2025-46275 Planet Technology Network Products Missing Authentication for Critical Function
WGS-80HPT-V2 and WGS-4215-8T2S are missing authentication that could allow an attacker to create an administrator account without knowing any existing credentials...
CVE-2025-46274 Planet Technology Network Products Use of Hard-coded Credentials
UNI-NMS-Lite uses hard-coded credentials that could allow an unauthenticated attacker to read, manipulate and create entries in the managed database...
CVE-2025-46273 Planet Technology Network Products Use of Hard-coded Credentials
UNI-NMS-Lite uses hard-coded credentials that could allow an unauthenticated attacker to gain administrative privileges to all UNI-NMS managed devices...
CVE-2025-46272 Planet Technology Network Products OS Command Injection
WGS-80HPT-V2 and WGS-4215-8T2S are vulnerable to a command injection attack that could allow an unauthenticated attacker to execute OS commands on the host system...
CVE-2025-46272 Planet Technology Network Products OS Command Injection
WGS-80HPT-V2 and WGS-4215-8T2S are vulnerable to a command injection attack that could allow an unauthenticated attacker to execute OS commands on the host system...
CVE-2025-46271 Planet Technology Network Products OS Command Injection
UNI-NMS-Lite is vulnerable to a command injection attack that could allow an unauthenticated attacker to read or manipulate device data...
CISA Releases Seven Industrial Control Systems Advisories
CISA released seven Industrial Control Systems ICS advisories on April 24, 2025. These advisories provide timely information about current security issues, vulnerabilities, and exploits surrounding ICS. ICSA-25-114-01 Schneider Electric Modicon Controllers ICSA-25-114-02 ALBEDO Telecom Net.Time -...
Arbitrary File Read Vulnerability in Linkworks Collaborative Office Management Platform at Quanta Technology Co.
Linkworks Collaboration Management Platform is a collaborative office management platform designed to provide collaboration and information sharing among members of an organization. An arbitrary file read vulnerability exists in Linkworks Collaborative Office Management Platform of Quanta...
