EUVD-2022-48295

Malicious code in bioql PyPI...

SSH Protocol Code Execution

The vulnerability of the SSH protocol implementation in software for controlling traffic lights with Q-Free MaxTime lies in the use of strictly encrypted login credentials. Exploiting this vulnerability allows a malicious actor to increase their privileges and execute arbitrary code remotely...

PowerStore T OS Auth Bypass

The vulnerability of the microprogramming software in the PowerStore data storage system for T OS is related to the use of strictly encrypted authentication credentials. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...

Tenda AC20 Router Unauthorized Access

The vulnerability of Tenda AC20 router’s microprogramming software is related to the use of strictly encrypted authentication credentials. Exploiting this vulnerability can allow an attacker to gain unauthorized access to the device...

Draytek Vigor Access Point Web Interface Credential Encryption Issue

The vulnerability of the web interface of Draytek Vigor Access Point software lies in the use of strictly encrypted login credentials. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected information...

TP-Link Archer C50 config.xml Unauthorized Access

The vulnerability of the config.xml file in TP-Link Archer C50 Wi-Fi routers lies in the use of strictly encrypted credentials. Exploiting this vulnerability allows a malicious actor to gain unauthorized access to protected information from a remote location...

HPE Networking Instant On Privilege Escalation

The vulnerability of the HPE Networking Instant On configuration and access point management tool is related to the use of strictly encrypted credentials. Exploiting this vulnerability allows a malicious actor to bypass security restrictions and gain increased privileges...

ColdFusion Privilege Escalation

The vulnerability of the ColdFusion software platform is related to the use of strictly encrypted user credentials. Exploiting this vulnerability can allow an attacker to increase their privileges remotely...

Cisco Nexus Dashboard SSH Impersonation

The vulnerability of the SSH protocol implementation in the Cisco Nexus Dashboard Fabric Controller NDFC and the Cisco Nexus Dashboard cloud network analytics and automation platform is related to insufficient security checks for the protected connection. Exploiting this vulnerability allows a...

dtale Library Secret Key Bypass Code Execution

The vulnerability of the dtale library lies in the use of strictly encrypted user credentials during the processing of the SECRETKEY parameter. Exploiting this vulnerability allows an attacker to bypass existing security restrictions and execute arbitrary code on the server...

D-Link Router Telnet Code Execution

The vulnerability of the telnetd service in D-Link router microprogramming systems like DIR-605L and DIR-816L lies in the use of strictly encrypted login credentials. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by using the built-in login credentials...

Gladinet CentreStack Code Execution

The vulnerability of the Gladinet CentreStack file sharing software platform lies in the use of strictly encrypted user credentials. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

TOTOLINK A810R Telnet Disclosure

The vulnerability of the Telnet service in the microprogramming software of TOTOLINK A810R routers is related to the use of strictly encrypted login credentials. Exploiting this vulnerability can allow a malicious actor to disclose the protected information...

TOTOLINK CA300-PoE Disclosure

The vulnerability of the /etc/shadow file in TOTOLINK CA300-PoE router microprogramming systems is related to the use of strictly encrypted login credentials. Exploiting this vulnerability could allow an attacker to disclose the protected information...

PCDiff: Proactive Control for Ownership Protection in Diffusion Models with Watermark Compatibility

With the growing demand for protecting the intellectual property IP of text-to-image diffusion models, we propose PCDiff -- a proactive access control framework that redefines model authorization by regulating generation quality. At its core, PCDIFF integrates a trainable fuser module and...

uberAgent is unable to read encrypted credentials stored in Windows Credential Store

Customer is attempting to store encrypted credentials in the Windows Credentials Store as described in the uberAgent documentation https://docs.citrix.com/en-us/uberagent/7-3-1/uxm-features-configuration/username-and-configuration-setting-encryption-2.html, but uberAgent is unable to read the...

CVE-2025-25042

A vulnerability in the AOS-CX REST interface could allow an authenticated remote attacker with low privileges to view sensitive information. Successful exploitation could allow an attacker to read encrypted credentials of other users on the switch, potentially leading to further unauthorized acce...

PT-2025-11636

Name of the Vulnerable Software and Affected Versions AOS-CX affected versions not specified Description A vulnerability in the AOS-CX REST interface could allow an authenticated remote attacker with low privileges to view sensitive information. Successful exploitation could allow an attacker to...

JetBrains YouTrack Info Disclosure

The vulnerability of the JetBrains YouTrack project and task management software interface relates to the disclosure of information through registration files. Exploiting this vulnerability can allow attackers to obtain encrypted user credentials...

Yeti threat analysis platform Privilege Escalation

The vulnerability of the Yeti threat analysis platform is related to the use of strictly encrypted credentials. Exploiting this vulnerability allows a remote attacker to enhance their privileges by using a static JWT token...