NVD disclosure day
CVE-2024-46484
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
A critical OS command injection vulnerability exists in the TRENDnet TV-IP410 camera. Attackers can exploit this over the network to inject commands, potentially leading to device compromise and control. Organizations should verify if this device is in use and exposed to the network.
CVE-2025-9377
Halo Surface Signal: 2 out of 5 — less likely to be public-facing.
An authenticated remote command execution vulnerability impacts specific TP-Link router models. This could allow attackers to gain unauthorized control over affected devices, posing a business risk, especially as the products are end-of-life and no longer supported by the vendor.
CVE-2025-52856
Halo Surface Signal: 5 out of 5 — more likely to be public-facing.
An improper authentication vulnerability in VioStor allows remote attackers to compromise system security. Since VioStor systems are often internet-facing for remote access, unauthorized access to surveillance systems is a concern.
CVE-2025-55177
Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.
An issue within WhatsApp synchronization messages could allow an unauthorized user to trigger content processing from any URL on a target device. This poses a risk to affected organizations and their employees, as it may enable targeted attacks. The business risk involves potential unauthorized access to user data and
CVE-2024-13342
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
The Booster for WooCommerce WordPress plugin has a vulnerability allowing unauthenticated attackers to upload arbitrary files. This could enable remote code execution if the server is configured to execute files based on their first extension, posing a risk to public-facing e-commerce sites.
CVE-2025-8861
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
A critical missing authentication vulnerability in TSA software allows unauthenticated remote attackers to read, modify, and delete database contents. This externally exposed issue poses a significant risk to data integrity and confidentiality.
CVE-2025-8857
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
The Clinic Image System has a critical vulnerability where hard-coded administrator credentials allow unauthenticated remote attackers to gain full system access. This means an attacker could log in as an administrator without needing any credentials if the system is reachable. This is important because it could lead t