365 matches found
CVE-2025-30106
IROAD v9 dashcams are vulnerable to a security flaw involving hardcoded default credentials ("qwertyuiop"). Because these credentials cannot be changed by the user, an attacker within Wi-Fi range can connect to the device's network to perform sniffing and intercept network traffic. As a temporary...
CVE-2025-30111: Missing Authentication for Critical Function
On IROAD v9 devices, one can Remotely Dump Video Footage and the Live Video Stream. The dashcam exposes endpoints that allow unauthorized users, who gained access through other means, to list and download recorded videos, as well as access live video streams without proper authentication...
CVE-2025-30107
On IROAD V9 devices, Managing Settings and Obtaining Sensitive Data and Sabotaging the Car Battery can be performed by unauthorized parties. A vulnerability in the dashcam's configuration management allows unauthorized users to modify settings, disable critical functions, and turn off battery...
MAL-2025-653 Malicious code in eslint-v9 (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d46f607d02591ccf25f4bd27e192a7f99206ed9e37dba6c62189bf0945f600a6 Any computer that has this package installed or running should be considered...
UBUNTU-CVE-2024-56753
In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/gfx9: Add Cleaner Shader Deinitialization in gfxv90 Module This commit addresses an omission in the previous patch related to the cleaner shader support for GFX9 hardware. Specifically, it adds the necessary...
CVE-2024-56073
An issue was discovered in FastNetMon Community Edition through 1.2.7. Zero-length templates for Netflow v9 allow remote attackers to cause a denial of service divide-by-zero error and application crash...
CVE-2024-56073
An issue was discovered in FastNetMon Community Edition through 1.2.7. Zero-length templates for Netflow v9 allow remote attackers to cause a denial of service divide-by-zero error and application crash...
CVE-2024-56073
An issue was discovered in FastNetMon Community Edition through 1.2.7. Zero-length templates for Netflow v9 allow remote attackers to cause a denial of service divide-by-zero error and application crash...
CVE-2024-56073: Divide By Zero
An issue was discovered in FastNetMon Community Edition through 1.2.7. Zero-length templates for Netflow v9 allow remote attackers to cause a denial of service divide-by-zero error and application crash...
CVE-2024-56073
An issue was discovered in FastNetMon Community Edition through 1.2.7. Zero-length templates for Netflow v9 allow remote attackers to cause a denial of service divide-by-zero error and application crash...
CVE-2024-48070
An issue in Weaver E-cology v. attackers construct special requests to insert remote malicious code and to trigger malicious code execution, and control server privileges...
CVE-2024-48070
A security vulnerability exists in Weaver E-cology versions 9.x , where attackers can construct special requests to perform a SQL injection . This flaw allows for the insertion of remote malicious code, triggering malicious code execution and potentially leading to the control of server privilege...
CVE-2024-48072
The collaborative management platform Weaver Ecology v9. * is vulnerable to a SQL injection flaw. The vulnerability exists in the /mobilemode/Action.jsp component, specifically involving the com.weaver.formmodel.mobile.mec.servlet.MECAction invoker. An attacker can exploit the getFieldTriggerValu...
CVE-2024-48070
An issue in Weaver E-cology v. attackers construct special requests to insert remote malicious code and to trigger malicious code execution, and control server privileges...
CVE-2024-48072: Improper Neutralization of Special Elements used in an SQL Command
Weaver Ecology v9. was discovered to contain a SQL injection vulnerability via the component...
CVE-2024-50313
A vulnerability has been identified in Mendix Runtime V10 All versions V10.16.0 only if the basic authentication mechanism is used by the application, Mendix Runtime V10.12 All versions V10.12.7 only if the basic authentication mechanism is used by the application, Mendix Runtime V10.6 All versio...
CVE-2024-50313
A vulnerability has been identified in Mendix Runtime V10 All versions V10.16.0 only if the basic authentication mechanism is used by the application, Mendix Runtime V10.12 All versions V10.12.7 only if the basic authentication mechanism is used by the application, Mendix Runtime V10.6 All versio...
CVE-2024-9917
A vulnerability, which was classified as critical, was found in HuangDou UTCMS V9. This affects an unknown part of the file app/modules/ut-template/admin/templatecreat.php. The manipulation of the argument content leads to deserialization. It is possible to initiate the attack remotely. The explo...
CVE-2024-9918
A vulnerability has been found in HuangDou UTCMS V9 and classified as critical. This vulnerability affects the function RunSql of the file app/modules/ut-data/admin/sql.php. The manipulation of the argument sql leads to sql injection. The attack can be initiated remotely. The exploit has been...
CVE-2024-9918
A vulnerability has been found in HuangDou UTCMS V9 and classified as critical. This vulnerability affects the function RunSql of the file app/modules/ut-data/admin/sql.php. The manipulation of the argument sql leads to sql injection. The attack can be initiated remotely. The exploit has been...