CVE-2025-57440

CVE-2025-57440 affects Blackmagic ATEM Mini Pro 2.7. The vulnerability is an undocumented Telnet service exposed on TCP port 9993, referred to as the “ATEM Ethernet Protocol 1.0,” which accepts unauthenticated plaintext commands for controlling streaming, recording, storage formatting, and system...

CVE-2025-34197

Vasion Print formerly PrinterLogic Virtual Appliance Host versions prior to 22.0.951, Application prior to 20.0.2368 VA and SaaS deployments contain an undocumented local user account named ubuntu with a preset password and a sudoers entry granting that account passwordless root privileges ubuntu...

CVE-2025-34197

Vasion Print formerly PrinterLogic Virtual Appliance Host versions prior to 22.0.951, Application prior to 20.0.2368 VA and SaaS deployments contain an undocumented local user account named ubuntu with a preset password and a sudoers entry granting that account passwordless root privileges ubuntu...

CVE-2025-34197

Vasion Print formerly PrinterLogic Virtual Appliance Host versions prior to 22.0.951, Application prior to 20.0.2368 VA and SaaS deployments contain an undocumented local user account named ubuntu with a preset password and a sudoers entry granting that account passwordless root privileges ubuntu...

CVE-2025-34197 Vasion Print (formerly PrinterLogic) Undocumented Local Account with Hardcoded Password and Passwordless sudo

Vasion Print formerly PrinterLogic Virtual Appliance Host versions prior to 22.0.951, Application prior to 20.0.2368 VA and SaaS deployments contain an undocumented local user account named ubuntu with a preset password and a sudoers entry granting that account passwordless root privileges ubuntu...

CVE-2025-34197

CVE-2025-34197 affects Vasion Print Virtual Appliance Host < 22.0.951 and Vasion Print Application

CVE-2025-34197 Vasion Print (formerly PrinterLogic) Undocumented Local Account with Hardcoded Password and Passwordless sudo

Vasion Print formerly PrinterLogic Virtual Appliance Host versions prior to 22.0.951, Application prior to 20.0.2368 VA and SaaS deployments contain an undocumented local user account named ubuntu with a preset password and a sudoers entry granting that account passwordless root privileges ubuntu...

CVE-2025-55050

CWE-1242: Inclusion of Undocumented Features...

CVE-2025-55050

CWE-1242: Inclusion of Undocumented Features...

CVE-2025-55050

CVE-2025-55050 is tied to multiple Baicells products (Nova 227, NOVA436Q, NOVA430e/430i, NEUTRINO430, NOVA846) where the root cause is the inclusion of undocumented functionality that could bypass security features. The connected sources explicitly enumerate affected devices and state the vulnera...

CVE-2025-55050

CWE-1242: Inclusion of Undocumented Features...

CVE-2025-55050

CWE-1242: Inclusion of Undocumented Features...

PT-2025-36924

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. affected versions not specified Description: The software includes undocumented features. Recommendations: At the moment, there is no information about a newer version that contains a fix for this...

Baicells多款产品 安全漏洞

Baicells Nova 436Q and others are products of Baicells, Inc.Baicells Nova 436Q is an advanced dual-carrier outdoor eNodeB eNB. Baicells Nova 227 and others are products of the company.Baicells Nova 227 is a miniature base station.Baicells NEUTRINO430 is an LTE base station. A security vulnerabili...

📄 Piciorgros TMO-100 Information Disclosure

Piciorgros TMO-100 suffers from an issue where it provides unauthorized log data access. It affects versions prior to 4.20. PDF advisory: https://rt-solutions.de/piciorgros/PiciorgrosTMO-100IP-Loggeren.pdf Classification -------------- - CWE-200: Exposure of Sensitive Information to an Unauthoriz...

The vulnerability of the programmable logic controller DELTA AS320T, related to the presence of undocumented configuration commands, allows a intruder to cause malfunctions during maintenance.

The vulnerability of the programmable logic controller DELTA AS320T is related to the presence of undocumented configuration commands. Exploiting this vulnerability could allow a malicious actor to remotely cause a device to fail, forcing it to enter a standby mode...

ParkingDoor 安全漏洞

ParkingDoor is a garage control system from ParkingDoor. ParkingDoor has a security vulnerability that stems from incorrect authentication, which could result in undocumented device operations and bypassed privileges...

Netis Netcore Router 安全漏洞

Netis Netcore Router is a series of routers from Netis. A security vulnerability exists in Netis Netcore Router that stems from the presence of an undocumented backdoor listener on UDP port 53413, which could lead to remote execution of arbitrary code...

📄 SIMCom SIM7600G Modem Undocumented Root Shell Access

The SIMCom SIM7600G modem supports an undocumented AT command, which allows an attacker to execute system commands with root permission on the modem. An attacker needs either physical access or remote shell access to a device that interacts directly with the modem via AT commands. SEC Consult...

RFK Jr. Orders HHS to Give Undocumented Migrants’ Medicaid Data to DHS

Plus: Spyware is found on two Italian journalists’ phones, Ukraine claims to have hacked a Russian aircraft maker, police take down major infostealer infrastructure, and more...