PT-2025-48474

Name of the Vulnerable Software and Affected Versions Socomec DIRIS Digiware M-70 version 1.6.9 Description A denial of service condition can occur in the Modbus RTU over TCP functionality. Sending a crafted network packet can cause a denial of service and potentially weaken device credentials,...

Socomec DIRIS Digiware M-70 Modbus RTU over TCP factory reset denial of service vulnerability

Talos Vulnerability Report TALOS-2025-2138 Socomec DIRIS Digiware M-70 Modbus RTU over TCP factory reset denial of service vulnerability December 1, 2025 CVE Number CVE-2025-20085 SUMMARY A denial of service vulnerability exists in the Modbus RTU over TCP functionality of Socomec DIRIS Digiware...

CVE-2025-12592

Legacy Vivotek Device firmware uses default credetials for the root and user login accounts...

EUVD-2025-198160

Legacy Vivotek Device firmware uses default credetials for the root and user login accounts...

CVE-2025-12592

Legacy Vivotek Device firmware uses default credetials for the root and user login accounts...

CVE-2025-12592 Use of default login credentials in Legacy Vivotek Devices

Legacy Vivotek Device firmware uses default credetials for the root and user login accounts...

CVE-2025-12592

Consolidated data confirms CVE-2025-12592 affects legacy Vivotek device firmware, where default credentials for root and user logins grant unauthorized access. The vulnerability is characterized by high-impact metrics (confidentiality, integrity, availability all High) with network-exploitability...

CVE-2025-12592 Use of default login credentials in Legacy Vivotek Devices

Legacy Vivotek Device firmware uses default credetials for the root and user login accounts...

PT-2025-47453

Legacy Vivotek Device firmware uses default credetials for the root and user login accounts...

Vivotek Camera 安全漏洞

Vivotek Camera is a webcam from China VIVOTEK Communications Vivotek. A security vulnerability exists in Vivotek Camera that stems from the firmware using default credentials to log into the root and user accounts...

CVE-2025-63747

QaTraq 6.9.2 ships with administrative account credentials which are enabled in default installations and permit immediate login via the web application login page. Because the account provides administrative privileges in the default configuration, an attacker who can reach the login page can ga...

EUVD-2025-197815

QaTraq 6.9.2 ships with administrative account credentials which are enabled in default installations and permit immediate login via the web application login page. Because the account provides administrative privileges in the default configuration, an attacker who can reach the login page can ga...

CVE-2025-63747

QaTraq 6.9.2 ships with administrative account credentials which are enabled in default installations and permit immediate login via the web application login page. Because the account provides administrative privileges in the default configuration, an attacker who can reach the login page can ga...

CVE-2025-63747

QaTraq 6.9.2 ships with administrative account credentials which are enabled in default installations and permit immediate login via the web application login page. Because the account provides administrative privileges in the default configuration, an attacker who can reach the login page can ga...

CVE-2025-63747

QaTraq 6.9.2 ships with administrative account credentials which are enabled in default installations and permit immediate login via the web application login page. Because the account provides administrative privileges in the default configuration, an attacker who can reach the login page can ga...

CVE-2025-63747

CVE-2025-63747 affects QaTraq 6.9.2. The issue arises from default-enabled administrative credentials, allowing immediate login through the web app login page and granting administrative access if reachable. The vulnerability is present in the default configuration, so an attacker who can access ...

PT-2025-47157

Name of the Vulnerable Software and Affected Versions QaTraq version 6.9.2 Description The software ships with default administrative account credentials enabled, allowing immediate login via the web application login page. An attacker reaching the login page can gain administrative access due to...

SourceForge QaTraq 安全漏洞

SourceForge QaTraq is an open source test management tool from SourceForge. A security vulnerability exists in SourceForge QaTraq version 6.9.2 that stems from enabling administrative account credentials by default, which could result in gaining administrative privileges...

CVE-2025-63747

QaTraq 6.9.2 ships with administrative account credentials which are enabled in default installations and permit immediate login via the web application login page. Because the account provides administrative privileges in the default configuration, an attacker who can reach the login page can ga...

Lucee Default Credentials

Lucee web application server may be configured with default or predictable credentials for its accounts. If an attacker can guess the credentials, they may be able to gain unauthorized access to the application and perform arbitrary actions on it. No source data...