CVE-2025-48706 – Coros PACE 3 BLE Out-of-Bounds Read Reboot Vulnerability

June 20, 2025

CVE ID : CVE-2025-48706

Published : June 20, 2025, 2:15 p.m. | 28 minutes ago

Description : An issue was discovered in COROS PACE 3 through 3.0808.0. Due to an out-of-bounds read vulnerability, sending a crafted BLE message forces the device to reboot.

Severity: 0.0 | NA

Visit the link for more details, such as CVSS details, affected products, timeline, and more…

Source: Read More

Previous ArticleCVE-2025-6342 – Code-projects Online Shoe Store SQL Injection Vulnerability

Next Article CVE-2025-48705 – Coros PACE 3 BLE NULL Pointer Dereference Vulnerability

Highlights

CVE-2025-47811 – Wing FTP Server Privilege Escalation Vulnerability

July 10, 2025

CVE ID : CVE-2025-47811

Published : July 10, 2025, 5:15 p.m. | 2 hours, 3 minutes ago

Description : In Wing FTP Server through 7.4.4, the administrative web interface (listening by default on port 5466) runs as root or SYSTEM by default. The web application itself offers several legitimate ways to execute arbitrary system commands (i.e., through the web console or the task scheduler), and they are automatically executed in the highest possible privilege context. Because administrative users of the web interface are not necessarily also system administrators, one might argue that this is a privilege escalation. (If a privileged application role is not available to an attacker, CVE-2025-47812 can be leveraged.) NOTE: the vendor reportedly considers this behavior “fine to keep.”

Severity: 4.1 | MEDIUM

Visit the link for more details, such as CVSS details, affected products, timeline, and more…

CodeSOD: A Unique Way to Primary Key

BrowserStack launches Figma plugin for detecting accessibility issues in design phase

Parasoft brings agentic AI to service virtualization in latest release

Node.js vs. Python for Backend: 7 Reasons C-Level Leaders Choose Node.js Talent

The best CRM software with email marketing in 2025: Expert tested and reviewed

This multi-port car charger can power 4 gadgets at once – and it’s surprisingly cheap

I’m a wearables editor and here are the 7 Pixel Watch 4 rumors I’m most curious about

8 ways I quickly leveled up my Linux skills – and you can too

The Intersection of Agile and Accessibility – A Series on Designing for Everyone

The Intersection of Agile and Accessibility – A Series on Designing for Everyone

Zero Trust & Cybersecurity Mesh: Your Org’s Survival Guide

Execute Ping Commands and Get Back Structured Data in PHP

A Tomb Raider composer has been jailed — His legacy overshadowed by $75k+ in loan fraud

A Tomb Raider composer has been jailed — His legacy overshadowed by $75k+ in loan fraud

“I don’t think I changed his mind” — NVIDIA CEO comments on H20 AI GPU sales resuming in China following a meeting with President Trump

Galaxy Z Fold 7 review: Six years later — Samsung finally cracks the foldable code

CVE-2025-48706 – Coros PACE 3 BLE Out-of-Bounds Read Reboot Vulnerability

CVE-2025-44658 – Netgear RAX30 PHP-FPM Misconfigured Extension Bypass Vulnerability

CVE-2025-7393 – Drupal Mail Login Authentication Bypass

AI for Sustainability: How Smart Technology Is Powering the Green Revolution🌱

CVE-2024-38822 – Salt Minion Token Validation Bypass

CVE-2025-20163 – Cisco Nexus Dashboard Fabric Controller SSH Host Key Validation Impersonation Vulnerability

Implement user-level access control for multi-tenant ML platforms on Amazon SageMaker AI

CVE-2025-47811 – Wing FTP Server Privilege Escalation Vulnerability

CVE-2025-5472 – Llama Index JSONReader Stack Overflow Denial of Service Vulnerability

CVE-2025-6613 – PHPGurukul Hospital Management System Cross-Site Scripting Vulnerability

Critical Unpatched SharePoint Zero-Day Actively Exploited, Breaches 75+ Company Servers

CVE-2025-48706 – Coros PACE 3 BLE Out-of-Bounds Read Reboot Vulnerability

Related Posts