Lucene search
+L

1795 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/11/29 12:00 a.m.•7 views

CVE-2025-6666: Use of Hard-coded Cryptographic Key

A vulnerability was determined in motogadget mo.lock Ignition Lock up to 20251125. Affected by this vulnerability is an unknown functionality of the component NFC Handler. Executing a manipulation can lead to use of hard-coded cryptographic key . The physical device can be targeted for the attack...

2CVSS4.7AI score0.00146EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/11/25 12:00 a.m.•6 views

CVE-2025-64304: Use of Hard-coded Cryptographic Key

"FOD" App uses hard-coded cryptographic keys, which may allow a local unauthenticated attacker to retrieve the cryptographic keys...

5.1CVSS5.7AI score0.00126EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/11/24 12:00 a.m.•7 views

CVE-2025-65998: Use of Hard-coded Cryptographic Key

Apache Syncope can be configured to store the user password values in the internal database with AES encryption, though this is not the default option. When AES is configured, the default key value, hard-coded in the source code, is always used. This allows a malicious attacker, once obtained...

7.5CVSS6AI score0.0051EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/11/24 12:00 a.m.•7 views

CVE-2025-63433: Use of Hard-coded Credentials

Xtooltech Xtool AnyScan Android Application 4.40.40 and prior uses a hardcoded cryptographic key and IV to decrypt update metadata. The key is stored as a static value within the application's code. An attacker with the ability to intercept network traffic can use this hardcoded key to decrypt,...

4.6CVSS5.9AI score0.00192EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/11/19 12:00 a.m.•4 views

CVE-2025-13316: Use of Hard-coded Cryptographic Key

Twonky Server 8.5.2 on Linux and Windows is vulnerable to a cryptographic flaw, use of hard-coded cryptographic keys. An attacker with knowledge of the encrypted administrator password can decrypt the value with static keys to view the plain text password and gain administrator-level access to...

8.2CVSS6.1AI score0.0268EPSS
SaveExploits5References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/11/12 12:00 a.m.•7 views

CVE-2025-63289: Use of Hard-coded Cryptographic Key

Sogexia Android App Compile Affected SDK v35, Max SDK 32 and fixed in v36, was discovered to contain hardcoded encryption keys in the encryptionhelper.dart file...

9.1CVSS5.8AI score0.00198EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/11/08 12:00 a.m.•5 views

CVE-2025-12177: Use of Hard-coded Cryptographic Key

The Download Manager plugin for WordPress is vulnerable to unauthorized access due to a hardcoded Cron key used in the deleteExpired and clearTempDataCPCron functions in all versions up to, and including, 3.3.30. This makes it possible for unauthenticated attackers to trigger these cron jobs...

5.3CVSS5.8AI score0.0024EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/11/03 12:00 a.m.•7 views

CVE-2025-12615: Use of Hard-coded Cryptographic Key

A security vulnerability has been detected in PHPGurukul News Portal 1.0. The affected element is an unknown function of the file /onps/settings.py. Such manipulation of the argument SECRETKEY leads to use of hard-coded cryptographic key . The attack may be performed from remote. The attack...

8.1CVSS4.9AI score0.00417EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/11/01 12:00 a.m.•6 views

CVE-2025-12599: Use of Hard-coded Cryptographic Key

Multiple Devices are Sharing the Same Secrets for SDKSocket TCP/5000.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5...

10CVSS5.8AI score0.00426EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/10/31 10:10 a.m.•32 views

CVE-2025-54471

NeuVector used a hard-coded cryptographic key embedded in the source code. At compilation time, the key value was replaced with the secret key value and used to encrypt sensitive configurations when NeuVector stores the data...

6.5CVSS8AI score0.00268EPSS
SaveExploits0References1
NVD
NVD
•added 2025/10/30 10:15 a.m.•20 views

CVE-2025-54471

NeuVector used a hard-coded cryptographic key embedded in the source code. At compilation time, the key value was replaced with the secret key value and used to encrypt sensitive configurations when NeuVector stores the data...

6.5CVSS0.00268EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2025/10/30 9:45 a.m.•31 views

CVE-2025-54471 NeuVector is shipping cryptographic material into its binary

NeuVector used a hard-coded cryptographic key embedded in the source code. At compilation time, the key value was replaced with the secret key value and used to encrypt sensitive configurations when NeuVector stores the data...

6.5CVSS0.00268EPSS
SaveExploits0References2
osv_cve
osv_cve
•added 2025/10/30 9:45 a.m.•10 views

CVE-2025-54471 NeuVector is shipping cryptographic material into its binary

NeuVector used a hard-coded cryptographic key embedded in the source code. At compilation time, the key value was replaced with the secret key value and used to encrypt sensitive configurations when NeuVector stores the data...

6.5CVSS6AI score
SaveExploits0References4
CVE
CVE
•added 2025/10/30 9:45 a.m.•40 views

CVE-2025-54471

The CVE-2025-54471 entry concerns NeuVector where a hard-coded cryptographic key was embedded in the source and replaced at compile time, then used to encrypt sensitive configurations stored by NeuVector. Affected data and configurations could be exposed due to the improper key handling. The prov...

6.5CVSS8AI score0.00268EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2025/10/30 9:45 a.m.•3 views

CVE-2025-54471 NeuVector is shipping cryptographic material into its binary

NeuVector used a hard-coded cryptographic key embedded in the source code. At compilation time, the key value was replaced with the secret key value and used to encrypt sensitive configurations when NeuVector stores the data...

6.5CVSS8AI score0.00268EPSS
SaveExploits0References2
Mend
Mend
•added 2025/10/30 9:45 a.m.•4 views

CVE-2025-54471

NeuVector used a hard-coded cryptographic key embedded in the source code. At compilation time, the key value was replaced with the secret key value and used to encrypt sensitive configurations when NeuVector stores the data...

7.1CVSS8AI score0.00268EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/10/30 12:00 a.m.•2 views

CVE-2025-54471: Use of Hard-coded Cryptographic Key

NeuVector used a hard-coded cryptographic key embedded in the source code. At compilation time, the key value was replaced with the secret key value and used to encrypt sensitive configurations when NeuVector stores the data...

6.5CVSS8AI score0.00268EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
•added 2025/10/29 12:00 a.m.•26 views

ZTE ZXMP M721 Disclosure

The vulnerability of the microprogramming software of ZTE ZXMP M721 optical transport network devices, which stems from the use of a rigidly encrypted cryptographic key, can be exploited to disclose protected information...

7.7CVSS5.7AI score0.00341EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
•added 2025/10/29 12:00 a.m.•22 views

Poly Clariti Manager Hard-coded Key Unauthorized Access

The vulnerability of the Poly Clariti Manager platform for managing, planning, and maintaining audio-visual systems is related to the use of a strictly encrypted cryptographic key. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected...

6.8CVSS5.8AI score0.00171EPSS
SaveExploits0References2Affected Software1
SUSE CVE
SUSE CVE
•added 2025/10/22 11:23 p.m.•16 views

SUSE CVE-2025-54471

NeuVector used a hard-coded cryptographic key embedded in the source code. At compilation time, the key value was replaced with the secret key value and used to encrypt sensitive configurations when NeuVector stores the data...

6.5CVSS8AI score0.00268EPSS
SaveExploits0References4
Rows per page
Query Builder