https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 05 Oct 2026 11:27:25 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-217719 EUVD-2026-217719 https://cve.radiocsirt.org/vuln/euvd-2026-217719 https://cve.radiocsirt.org/vuln/fkie_cve-2025-24836 <p>With a specially crafted Python script, an attacker could send continuous startMeasurement commands over an unencrypted Bluetooth connection to the affected device. This would prevent the device from connecting to a clinician&#39;s app to take patient readings and ostensibly flood it with requests, resulting in a denial-of-service condition.</p> <p>With a specially crafted Python script, an attacker could send continuous startMeasurement commands over an unencrypted Bluetooth connection to the affected device. This would prevent the device from connecting to a clinician&#39;s app to take patient readings and ostensibly flood it with requests, resulting in a denial-of-service condition.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-24836 https://cve.radiocsirt.org/vuln/ghsa-pvvp-cjfg-4jv4 <p>With a specially crafted Python script, an attacker could send continuous startMeasurement commands over an unencrypted Bluetooth connection to the affected device. This would prevent the device from connecting to a clinician&#39;s app to take patient readings and ostensibly flood it with requests, resulting in a denial-of-service condition.</p> <p>With a specially crafted Python script, an attacker could send continuous startMeasurement commands over an unencrypted Bluetooth connection to the affected device. This would prevent the device from connecting to a clinician&#39;s app to take patient readings and ostensibly flood it with requests, resulting in a denial-of-service condition.</p> https://cve.radiocsirt.org/vuln/ghsa-pvvp-cjfg-4jv4 https://cve.radiocsirt.org/vuln/icsma-25-044-01 <p>The Qardio Arm iOS application exposes sensitive data such as usernames and passwords in a plist file. This allows an attacker to log in to production-level development accounts and access an engineering backdoor in the application. The engineering backdoor allows the attacker to send hex-based commands over a UI-based terminal. With a specially crafted Python script, an attacker could send continuous startMeasurement commands over an unencrypted Bluetooth connection to the affected device. This would prevent the device from connecting to a clinician&#39;s app to take patient readings and ostensibly flood it with requests, resulting in a denial-of-service condition. An attacker could obtain firmware files and reverse engineer their intended use leading to loss of confidentiality and integrity of the hardware devices enabled by the Qardio iOS and Android applications.</p> <p>The Qardio Arm iOS application exposes sensitive data such as usernames and passwords in a plist file. This allows an attacker to log in to production-level development accounts and access an engineering backdoor in the application. The engineering backdoor allows the attacker to send hex-based commands over a UI-based terminal. With a specially crafted Python script, an attacker could send continuous startMeasurement commands over an unencrypted Bluetooth connection to the affected device. This would prevent the device from connecting to a clinician&#39;s app to take patient readings and ostensibly flood it with requests, resulting in a denial-of-service condition. An attacker could obtain firmware files and reverse engineer their intended use leading to loss of confidentiality and integrity of the hardware devices enabled by the Qardio iOS and Android applications.</p> https://cve.radiocsirt.org/vuln/icsma-25-044-01