PT-2026-43700

In Slican telephone exchanges secure key is generated in a predictable manner using properties of the telephone exchange which can be obtained without authentication. An unauthenticated attacker can deduce the secure key and obtain admin credentials. This issue was fixed in versions below: - IPx...

Use of GET Request Method With Sensitive Query Strings

Overview openclaw is a 🦞 OpenClaw — Personal AI Assistant Affected versions of this package are vulnerable to Use of GET Request Method With Sensitive Query Strings via the process that appends authentication material to the browser URL query string and persists it in browser localStorage. An...

PT-2022-23256 · Fiberhome · Fiberhome Vdsl2 Modem Hg150-Ub

Name of the Vulnerable Software and Affected Versions: FiberHome VDSL2 Modem HG150-Ub version V3.0 Description: The issue concerns the submission of admin credentials in URLs, which can be logged or sniffed. This poses a risk as sensitive information can be captured and exploited. Recommendations...