Lucene search
K

11 matches found

RedhatCVE
RedhatCVE
added 2025/10/13 12:22 p.m.3 views

CVE-2025-11633

A vulnerability was identified in Tomofun Furbo 360 and Furbo Mini. Affected by this issue is the function uploadfiletos3 of the file collectlogs.sh of the component HTTP Traffic Handler. The manipulation leads to improper certificate validation. The attack may be initiated remotely. The attack i...

6.3CVSS4.5AI score0.00235EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/12 12:30 p.m.3 views

EUVD-2025-33892

A vulnerability was identified in Tomofun Furbo 360 and Furbo Mini. Affected by this issue is some unknown functionality of the component HTTP Traffic Handler. The manipulation leads to improper certificate validation. The attack may be initiated remotely. The attack is considered to have high...

6.3CVSS6AI score0.00235EPSS
Exploits0References4
NVD
NVD
added 2025/10/12 12:15 p.m.3 views

CVE-2025-11633

A vulnerability was identified in Tomofun Furbo 360 and Furbo Mini. Affected by this issue is the function uploadfiletos3 of the file collectlogs.sh of the component HTTP Traffic Handler. The manipulation leads to improper certificate validation. The attack may be initiated remotely. The attack i...

6.3CVSS0.00235EPSS
Exploits0References3
Cvelist
Cvelist
added 2025/10/12 12:2 p.m.8 views

CVE-2025-11633 Tomofun Furbo 360/Furbo Mini HTTP Traffic collect_logs.sh upload_file_to_s3 certificate validation

A vulnerability was identified in Tomofun Furbo 360 and Furbo Mini. Affected by this issue is the function uploadfiletos3 of the file collectlogs.sh of the component HTTP Traffic Handler. The manipulation leads to improper certificate validation. The attack may be initiated remotely. The attack i...

6.3CVSS0.00235EPSS
Exploits0References3
Vulnrichment
Vulnrichment
added 2025/10/12 12:2 p.m.4 views

CVE-2025-11633 Tomofun Furbo 360/Furbo Mini HTTP Traffic collect_logs.sh upload_file_to_s3 certificate validation

A vulnerability was identified in Tomofun Furbo 360 and Furbo Mini. Affected by this issue is the function uploadfiletos3 of the file collectlogs.sh of the component HTTP Traffic Handler. The manipulation leads to improper certificate validation. The attack may be initiated remotely. The attack i...

6.3CVSS4.5AI score0.00235EPSS
Exploits0References3
CVE
CVE
added 2025/10/12 12:2 p.m.12 views

CVE-2025-11633

The CVE describes a trust-management issue in Tomofun Furbo 360 and Furbo Mini stemming from improper certificate validation in the HTTP Traffic Handler component, specifically the collect_logs.sh upload_file_to_s3 function. Affected firmware: Furbo 360 up to FB0035_FW_036 and Furbo Mini up to MC...

6.3CVSS4.5AI score0.00235EPSS
Exploits0References3Affected Software1
CNNVD
CNNVD
added 2025/10/12 12:0 a.m.3 views

Tomofun Furbo 360和Tomofun Furbo Mini 信任管理问题漏洞

Tomofun Furbo 360 and Tomofun Furbo Mini are both smart pet cameras from Tomofun Corporation of Taiwan, China. A trust management issue vulnerability exists in Tomofun Furbo 360 FB0035FW036 and earlier versions and Tomofun Furbo Mini MC0020FW074 and earlier versions, which stems from improper...

6.3CVSS4.8AI score0.00235EPSS
Exploits0References4
BDU FSTEC
BDU FSTEC
added 2019/10/24 12:0 a.m.1 views

The vulnerability of the ZingBox Inspector, a network traffic handler, arises due to the lack of measures to neutralize special elements. This allows attackers to execute arbitrary code.

The vulnerability of the ZingBox Inspector network traffic processor exists due to the lack of measures taken to neutralize special elements. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

9CVSS5.9AI score0.02294EPSS
Exploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/10/24 12:0 a.m.3 views

The vulnerability of the ZingBox Inspector, a network traffic handler, arises from the use of pre-installed credentials. This allows attackers to gain unauthorized access to the system.

The vulnerability of the ZingBox Inspector network traffic processor is related to the use of pre-set credentials. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to the system...

8.8CVSS5.5AI score0.00356EPSS
Exploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/10/24 12:0 a.m.4 views

The vulnerability of the ZingBox Inspector, a network traffic handler, arises due to insufficient validation of input data. This vulnerability allows attackers to execute a type of “man-in-the-middle” attack.

The vulnerability of the ZingBox Inspector network traffic processor exists due to insufficient checking of input data. Exploiting this vulnerability can allow a remote attacker to execute a “man-in-the-middle” type attack...

7.5CVSS5.7AI score0.02845EPSS
Exploits0References2Affected Software1
Positive Technologies
Positive Technologies
added 2019/10/01 12:0 a.m.2 views

PT-2019-3537 · Zingbox · Zingbox Inspector

Name of the Vulnerable Software and Affected Versions: Zingbox Inspector versions 1.286 and earlier Description: A command injection issue exists, allowing an authenticated user to execute arbitrary system commands in the CLI. The vulnerability is also related to the network traffic handler, whic...

9CVSS9AI score0.02294EPSS
Exploits0References4
Rows per page
Query Builder