6 October 2025

49 results · Clear filters · Feed

• Medium 4.7
  CVE-2025-59448

  Components of the YoSmart YoLink ecosystem through 2025-10-02 leverage unencrypted MQTT to communicate over the interne…

  YoSmart YoLink ecosystem
  Oct 6, 2025
• Medium 4.9
  CVE-2025-59449

  The YoSmart YoLink MQTT broker through 2025-10-02 does not enforce sufficient authorization controls to prevent cross-a…

  YoSmart YoLink MQTT broker
  Oct 6, 2025
• Medium 5.8
  CVE-2025-59452

  The YoSmart YoLink API through 2025-10-02 uses an endpoint URL that is derived from a device's MAC address along with a…

  YoSmart YoLink API
  Oct 6, 2025
• Medium 4.3
  CVE-2025-59450

  The YoSmart YoLink Smart Hub firmware 0382 is unencrypted, and data extracted from it can be used to determine network …

  YoSmart YoLink Smart Hub
  Oct 6, 2025
• Medium 6.5
  CVE-2025-61224 Scanner template

  Cross Site Scripting vulnerability in DokuWiki 2025-05-14a 'Librarian'[56.1] allows a remote attacker to execute arbitr…

  dokuwiki dokuwiki Debian Ubuntu
  Oct 6, 2025
• Medium 5.4
  CVE-2025-61198

  A stored cross-site scripting (XSS) vulnerability in Optimod 5950 - Optimod 5950HD - Optimod 5750 - Optimod 5750HD - Op…

  Oct 6, 2025
• Medium 5.7
  CVE-2025-60969

  Directory Traversal vulnerability in EndRun Technologies Sonoma D12 Network Time Server (GPS) F/W 6010-0076-000 Ver 4.0…

  Oct 6, 2025
• Medium 6.1
  CVE-2025-60961

  Cross Site Scripting (XSS) vulnerability in EndRun Technologies Sonoma D12 Network Time Server (GPS) F/W 6010-0071-000 …

  Oct 6, 2025
• Medium 6.1
  CVE-2025-56382

  A stored Cross-site scripting (XSS) vulnerability exists in the Customer Management Module of LionCoders SalePro POS 5.…

  Oct 6, 2025