Monthly
A weakness has been identified in La Nacion App 10.2.25 on Android.
Authentication bypass in TaleLin Lin-CMS up to version 0.6.0 allows remote attackers to manipulate username and password arguments in the /tests/config.py Tests Folder component, potentially exposing credentials stored in the configuration file. The attack requires high complexity and has been publicly disclosed, but exploitation is considered difficult with an EPSS score of 0.04% indicating very low real-world exploitation probability.
Unauthenticated remote access to ZKTeco BioTime's /base/safe_setting/ endpoint exposes stored credential material via manipulable backup_encryption_password_decrypt and export_encryption_password_decrypt parameters, affecting versions 9.0.3, 9.0.4, and 9.5.2. The CVSS 4.0 vector (PR:N/UI:N) and an 'Authentication Bypass' tag confirm no credentials or user interaction are required, enabling any network-reachable attacker to retrieve encryption passwords from the application. A public proof-of-concept exploit is available on GitHub, directly lowering the skill barrier for exploitation, though the vulnerability is not yet listed in CISA KEV.
Credential exposure in SGAI Space1 NAS N1211DS allows low-privileged remote attackers to retrieve stored credentials via the /cgi-bin/JSONAPI endpoint. Publicly available exploit code leverages unprotected credential storage (CWE-255) in the gsaiagent component to leak sensitive data from firmware up to version 1.0.915. The vendor has not responded to disclosure, and no patch is available.
A weakness has been identified in Intelbras UnniTI 24.07.11. Rated medium severity (CVSS 5.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
A security vulnerability has been detected in Intelbras ICIP 2.0.20. Rated medium severity (CVSS 5.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
Hard-coded credentials in Tenda RP3 Pro firmware (versions up to 22.5.7.93) allow local high-privilege attackers to bypass authentication during firmware updates via the force_upgrade.sh script. Public exploit code exists on GitHub. CVSS 7.0 (High) reflects local access requirement with high privileges, making this a lower real-world priority despite the severity rating - exploitation requires an attacker to already have administrative console access to the device.
A hard-coded root password in the Tomofun Furbo 360 and Furbo Mini pet cameras allows local attackers with low privileges to achieve full device compromise (confidentiality, integrity, and availability impact). Exploitation requires local access and high attack complexity, and a public proof-of-concept exists on GitHub. At the time of analysis, EPSS estimates a 0.02% probability of exploitation, and no active exploitation has been reported.
Hard-coded password vulnerability in Zytec Dalian Zhuoyun Technology Central Authentication Service version 3 allows remote unauthenticated attackers to bypass authentication for the Git endpoint via a crafted Authorization header. Publicly available exploit code exists, but no patch has been released and the vendor has not responded. Despite a moderate CVSS base score, the EPSS probability is low (0.05%) and there is no evidence of active exploitation in CISA KEV.
A vulnerability was identified in Cudy LT500E up to 2.3.12. Rated low severity (CVSS 2.0). Public exploit code available and no vendor patch available.
A weakness has been identified in La Nacion App 10.2.25 on Android.
Authentication bypass in TaleLin Lin-CMS up to version 0.6.0 allows remote attackers to manipulate username and password arguments in the /tests/config.py Tests Folder component, potentially exposing credentials stored in the configuration file. The attack requires high complexity and has been publicly disclosed, but exploitation is considered difficult with an EPSS score of 0.04% indicating very low real-world exploitation probability.
Unauthenticated remote access to ZKTeco BioTime's /base/safe_setting/ endpoint exposes stored credential material via manipulable backup_encryption_password_decrypt and export_encryption_password_decrypt parameters, affecting versions 9.0.3, 9.0.4, and 9.5.2. The CVSS 4.0 vector (PR:N/UI:N) and an 'Authentication Bypass' tag confirm no credentials or user interaction are required, enabling any network-reachable attacker to retrieve encryption passwords from the application. A public proof-of-concept exploit is available on GitHub, directly lowering the skill barrier for exploitation, though the vulnerability is not yet listed in CISA KEV.
Credential exposure in SGAI Space1 NAS N1211DS allows low-privileged remote attackers to retrieve stored credentials via the /cgi-bin/JSONAPI endpoint. Publicly available exploit code leverages unprotected credential storage (CWE-255) in the gsaiagent component to leak sensitive data from firmware up to version 1.0.915. The vendor has not responded to disclosure, and no patch is available.
A weakness has been identified in Intelbras UnniTI 24.07.11. Rated medium severity (CVSS 5.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
A security vulnerability has been detected in Intelbras ICIP 2.0.20. Rated medium severity (CVSS 5.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
Hard-coded credentials in Tenda RP3 Pro firmware (versions up to 22.5.7.93) allow local high-privilege attackers to bypass authentication during firmware updates via the force_upgrade.sh script. Public exploit code exists on GitHub. CVSS 7.0 (High) reflects local access requirement with high privileges, making this a lower real-world priority despite the severity rating - exploitation requires an attacker to already have administrative console access to the device.
A hard-coded root password in the Tomofun Furbo 360 and Furbo Mini pet cameras allows local attackers with low privileges to achieve full device compromise (confidentiality, integrity, and availability impact). Exploitation requires local access and high attack complexity, and a public proof-of-concept exists on GitHub. At the time of analysis, EPSS estimates a 0.02% probability of exploitation, and no active exploitation has been reported.
Hard-coded password vulnerability in Zytec Dalian Zhuoyun Technology Central Authentication Service version 3 allows remote unauthenticated attackers to bypass authentication for the Git endpoint via a crafted Authorization header. Publicly available exploit code exists, but no patch has been released and the vendor has not responded. Despite a moderate CVSS base score, the EPSS probability is low (0.05%) and there is no evidence of active exploitation in CISA KEV.
A vulnerability was identified in Cudy LT500E up to 2.3.12. Rated low severity (CVSS 2.0). Public exploit code available and no vendor patch available.