CVE-2025-49162 – Arris VIP1113 TFTP File Overwrite Vulnerability

June 2, 2025

CVE ID : CVE-2025-49162

Published : June 3, 2025, 12:15 a.m. | 1 hour, 21 minutes ago

Description : Arris VIP1113 devices through 2025-05-30 with KreaTV SDK allow file overwrite via TFTP because a remote filename with a space character allows an attacker to control the local filename.

Severity: 6.4 | MEDIUM

Visit the link for more details, such as CVSS details, affected products, timeline, and more…

Source: Read More

Previous ArticleCVE-2025-49163 – Arris VIP1113 Boot Image Injection Vulnerability

Next Article CVE-2025-3919 – WordPress Comments Import & Export Plugin Unauthenticated Cross-Site Scripting (XSS) Vulnerability

Highlights

CVE-2025-6524 – “70mai 1S Video Services Authentication Bypass”

June 23, 2025

CVE ID : CVE-2025-6524

Published : June 23, 2025, 9:15 p.m. | 4 hours, 46 minutes ago

Description : A vulnerability classified as problematic has been found in 70mai 1S up to 20250611. This affects an unknown part of the component Video Services. The manipulation leads to improper authentication. Access to the local network is required for this attack to succeed. The complexity of an attack is rather high. The exploitability is told to be difficult. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

Severity: 3.1 | LOW

Visit the link for more details, such as CVSS details, affected products, timeline, and more…

Top 10 Use Cases of Vibe Coding in Large-Scale Node.js Applications

Cloudsmith launches ML Model Registry to provide a single source of truth for AI models and datasets

Kong Acquires OpenMeter to Unlock AI and API Monetization for the Agentic Era

Microsoft Graph CLI to be retired

‘Cronos: The New Dawn’ was by far my favorite experience at Gamescom 2025 — Bloober might have cooked an Xbox / PC horror masterpiece

ASUS built a desktop gaming PC around a mobile CPU — it’s an interesting, if flawed, idea

Hollow Knight: Silksong arrives on Xbox Game Pass this week — and Xbox’s September 1–7 lineup also packs in the horror. Here’s every new game.

The Xbox remaster that brought Gears to PlayStation just passed a huge milestone — “ending the console war” and proving the series still has serious pulling power

Magento (Adobe Commerce) or Optimizely Configured Commerce: Which One to Choose

Magento (Adobe Commerce) or Optimizely Configured Commerce: Which One to Choose

Updates from N|Solid Runtime: The Best Open-Source Node.js RT Just Got Better

Scale Your Business with AI-Powered Solutions Built for Singapore’s Digital Economy

‘Cronos: The New Dawn’ was by far my favorite experience at Gamescom 2025 — Bloober might have cooked an Xbox / PC horror masterpiece

‘Cronos: The New Dawn’ was by far my favorite experience at Gamescom 2025 — Bloober might have cooked an Xbox / PC horror masterpiece

ASUS built a desktop gaming PC around a mobile CPU — it’s an interesting, if flawed, idea

Hollow Knight: Silksong arrives on Xbox Game Pass this week — and Xbox’s September 1–7 lineup also packs in the horror. Here’s every new game.

CVE-2025-49162 – Arris VIP1113 TFTP File Overwrite Vulnerability

CISA Adds TP-Link and WhatsApp Flaws to KEV Catalog Amid Active Exploitation

Pennsylvania Attorney General’s Office Recovers from Ransomware Attack

CVE-2025-32738 – IO DATA HDL-T Series Authentication Bypass

CVE-2025-49895 – PluginBuddy.Com ServerBuddy CSRF Object Injection Vulnerability

CVE-2025-32106 – Audiocodes Mediapack Remote Code Execution Vulnerability

CVE-2025-44003 – Gallagher T-Series Reader Resource Exhaustion Denial of Service

CVE-2025-6524 – “70mai 1S Video Services Authentication Bypass”

CVE-2025-5940 – Osom Blocks – WordPress Stored Cross-Site Scripting

Abandoned Sogou Zhuyin Update Server Hijacked, Weaponized in Taiwan Espionage Campaign

Why the CDKeys rebrand to Loaded raises eyebrows among gamers

CVE-2025-49162 – Arris VIP1113 TFTP File Overwrite Vulnerability

Related Posts