<?xml version="1.0" encoding="UTF-8"?><?xml-stylesheet type="text/xsl" href="../assets/feed.xsl"?><rss version="2.0"><channel><title>PatchTheCVE: uffizio</title><link>https://patchthecve.com/</link><description>CVEs with upgrade or downgrade fix steps</description><item><title>CVE-2020-17485: A Remote Code Execution vulnerability exist in Uffizio&#x27;s GPS Tracker all versions</title><link>https://patchthecve.com/cve/CVE-2020-17485.html</link><guid>https://patchthecve.com/cve/CVE-2020-17485.html</guid><pubDate>Wed, 17 Jun 2026 02:59:00 +0000</pubDate><description>CRITICAL 9.8: A Remote Code Execution vulnerability exist in Uffizio&#x27;s GPS Tracker all versions. The web server can be compromised by uploading and executing a web/reverse shell. An attacker could then run commands, browse system files, and browse local resources</description></item><item><title>CVE-2020-17484: An Open Redirection vulnerability exists in Uffizio&#x27;s GPS Tracker all versions allows an attacker to construct</title><link>https://patchthecve.com/cve/CVE-2020-17484.html</link><guid>https://patchthecve.com/cve/CVE-2020-17484.html</guid><pubDate>Wed, 17 Jun 2026 02:59:00 +0000</pubDate><description>MEDIUM 6.1: An Open Redirection vulnerability exists in Uffizio&#x27;s GPS Tracker all versions allows an attacker to construct a URL within the application that causes a redirection to an arbitrary external domain.</description></item><item><title>CVE-2020-17483: An improper access control vulnerability exists in Uffizio&#x27;s GPS Tracker all versions that lead to sensitive i</title><link>https://patchthecve.com/cve/CVE-2020-17483.html</link><guid>https://patchthecve.com/cve/CVE-2020-17483.html</guid><pubDate>Wed, 17 Jun 2026 02:59:00 +0000</pubDate><description>HIGH 7.5: An improper access control vulnerability exists in Uffizio&#x27;s GPS Tracker all versions that lead to sensitive information disclosure of all the connected devices. By visiting the vulnerable host at port 9000, we see it responds with a JSON body that has all the details about the devices which have be</description></item></channel></rss>