algernon 安全漏洞

Algernon is a web server developed by Alexander F. Rødseth. Versions of Algernon prior to 1.17.7 contained security vulnerabilities. These vulnerabilities stemmed from the forced activation of debugging mode in single-file mode, allowing the leakage of the file’s absolute path and complete byte...

The vulnerability of microprogrammed software in embedded access controllers of Dell iDRAC9 lies in the insufficient protection of service data when transitioning to debugging mode, allowing a intruder to gain unauthorized access to protected information.

The vulnerability of microprogramming software in embedded access controllers of Dell iDRAC9 relates to insufficient protection of service data when entering debugging mode. Exploiting this vulnerability can allow an attacker operating remotely to gain unauthorized access to protected information...

CVE-2026-33280

Hidden functionality issue exists in BUFFALO Wi-Fi router products, which may allow an attacker to gain access to the product’s debugging functionality, resulting in the execution of arbitrary OS commands...

EUVD-2010-1671

Malware in sbrugna...

EUVD-2023-45034

Malicious code in bioql PyPI...

EUVD-2025-3056

Malicious code in bioql PyPI...

Improper Output Neutralization for Logs

Overview litestar is a Litestar - A production-ready, highly performant, extensible ASGI API Framework Affected versions of this package are vulnerable to Improper Output Neutralization for Logs via the exception logging process. An attacker can manipulate log files and forge log entries by...

CVE-2025-0071

SAP Web Dispatcher and SAP Internet Communication Manager contain a vulnerability where an attacker with administrative privileges can enable debugging trace mode via a specific parameter, leading to unencrypted passwords being written to logs. This affects confidentiality (C) with high impact, w...

PT-2025-9030 · Motorola Mobility · Droid Razr Hd

Name of the Vulnerable Software and Affected Versions: Motorola Mobility Droid Razr HD version 9.18.94.XT926.Verizon.en.US Description: An issue in the device allows physically proximate unauthorized attackers to access USB debugging, leading to control of the host device itself. This issue can b...

CVE-2025-22962

A critical remote code execution RCE vulnerability exists in the web-based management interface of GatesAir Maxiva UAXT, VAXT transmitters when debugging mode is enabled. An attacker with a valid session ID sessid can send specially crafted POST requests to the /json endpoint, enabling arbitrary...

CVE-2025-22962

A critical remote code execution RCE vulnerability exists in the web-based management interface of GatesAir Maxiva UAXT, VAXT transmitters when debugging mode is enabled. An attacker with a valid session ID sessid can send specially crafted POST requests to the /json endpoint, enabling arbitrary...

CVE-2025-22962

A critical remote code execution (RCE) vulnerability exists in the web-based management interface of GatesAir Maxiva UAXT and VAXT transmitters . The flaw is triggered when debugging mode is enabled , allowing an attacker with a valid session ID (sess_id) to send specially crafted POST requests t...

CVE-2025-22962: Improper Neutralization of Special Elements used in a Command

A critical remote code execution RCE vulnerability exists in the web-based management interface of GatesAir Maxiva UAXT, VAXT transmitters when debugging mode is enabled. An attacker with a valid session ID sessid can send specially crafted POST requests to the /json endpoint, enabling arbitrary...

CVE-2025-22962

A critical remote code execution RCE vulnerability exists in the web-based management interface of GatesAir Maxiva UAXT, VAXT transmitters when debugging mode is enabled. An attacker with a valid session ID sessid can send specially crafted POST requests to the /json endpoint, enabling arbitrary...

PT-2024-10860 · Applock · Applock

Name of the Vulnerable Software and Affected Versions: Smartphones affected versions not specified Description: The system has a logic judging error under certain scenarios, allowing an attacker to gain certain information from apps locked by Applock if they obtain permission to execute commands ...

CVE-2022-43936: Insertion of Sensitive Information into Log File

Brocade SANnav versions before 2.2.2 log Brocade Fabric OS switch passwords when debugging is enabled...

The vulnerability of the ALEOS operating system’s debugging mode in wireless routers from Sierra Wireless—MP70, RV50x, RV55, LX40, LX60 ES450, GX450—allows a hacker to gain unauthorized access to protected information.

The vulnerability of the ALEOS operating system’s debugging mode for Sierra Wireless’ wireless routers—MP70, RV50x, RV55, LX40, LX60 ES450, GX450—is related to the use of strictly encrypted credentials. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected...

CVE-2023-40463

When configured in debugging mode by an authenticated user with administrative privileges, ALEOS 4.16 and earlier store the SHA512 hash of the common root password for that version in a directory accessible to a user with root privileges or equivalent access...

Design/Logic Flaw

When configured in debugging mode by an authenticated user with administrative privileges, ALEOS 4.16 and earlier store the SHA512 hash of the common root password for that version in a directory accessible to a user with root privileges or equivalent access...

CVE-2023-40463 Use of Hard-Coded Credentials

When configured in debugging mode by an authenticated user with administrative privileges, ALEOS 4.16 and earlier store the SHA512 hash of the common root password for that version in a directory accessible to a user with root privileges or equivalent access...