414 matches found
CVE-2025-41731 Jumo: Insufficient entropy in PRNG may lead to root access
A vulnerability was identified in the password generation algorithm when accessing the debug-interface. An unauthenticated local attacker with knowledge of the password generation timeframe might be able to brute force the password in a timely manner and thus gain root access to the device if the...
PT-2025-45604
Name of the Vulnerable Software and Affected Versions Jumo variTRON300 affected versions not specified Description A flaw exists in the password generation algorithm when accessing the debug interface. An unauthenticated local attacker who knows the password generation timeframe may be able to...
CVE-2025-41731: Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)
A vulnerability was identified in the password generation algorithm when accessing the debug-interface. An unauthenticated local attacker with knowledge of the password generation timeframe might be able to brute force the password in a timely manner and thus gain root access to the device if the...
Vulnerabilities fixed in Arista Networks products
Arista Networks has fixed vulnerabilities in DANZ. The vulnerabilities include several ways for authenticated users with limited privileges to gain access to sensitive systems and data. These include escaping the CLI sandbox, exploiting SSH port forwarding, and making operating system operations...
EUVD-2025-36725
On affected platforms, restricted users could view sensitive portions of the config database via a debug API e.g., user password hashes...
Exploit for CVE-2025-57428
My security advisories CVE-2025-57428 - Telnet debug interf...
Security Advisory 0124
Security Advisory 0124 PDF Date: October 22, 2025 Revision | Date | Changes ---|---|--- 1.0 | October 22, 2025 | Initial release The following issues were discovered in Arista DANZ Monitoring Fabric DMF. These issues affect DMF, Converged Cloud Fabric CCF, CloudVision Appliance CVA, and Multi-Clo...
CVE-2025-59447
The YoSmart YoLink Smart Hub device 0382 exposes a UART debug interface. An attacker with direct physical access can leverage this interface to read a boot log, which includes network access credentials...
EUVD-2017-17219
Malware in sbrugna...
EUVD-2017-18076
Malware in sbrugna...
EUVD-2015-4002
Malware in sbrugna...
EUVD-2017-3878
Malware in sbrugna...
EUVD-2019-9181
Malware in sbrugna...
EUVD-2020-18398
Malware in sbrugna...
EUVD-2020-5714
Malware in sbrugna...
EUVD-2020-5716
Malware in sbrugna...
EUVD-2020-5719
Malware in sbrugna...
EUVD-2020-5720
Malware in sbrugna...