Lucene search
+L

10259 matches found

CNNVD
CNNVD
•added 2025/05/20 12:00 a.m.•22 views

Schweitzer Engineering Laboratories SEL Series 安全漏洞

Schweitzer Engineering Laboratories SEL Series is a series of software and firmware products from Schweitzer Engineering Laboratories, Inc. A security vulnerability exists in the Schweitzer Engineering Laboratories SEL Series that stems from an improper pathname restriction could lead to file...

9CVSS6.6AI score0.00442EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/05/20 12:00 a.m.•22 views

Schweitzer Engineering Laboratories SEL Series 安全漏洞

Schweitzer Engineering Laboratories SEL Series is a series of software and firmware products from Schweitzer Engineering Laboratories, Inc. A security vulnerability exists in the Schweitzer Engineering Laboratories SEL Series that stems from the OpenFlow discovery protocol that is not rate-limite...

4.3CVSS6.6AI score0.00217EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/05/20 12:00 a.m.•21 views

Schweitzer Engineering Laboratories SEL Series 安全漏洞

Schweitzer Engineering Laboratories SEL Series is a series of software and firmware products from Schweitzer Engineering Laboratories, Inc. A security vulnerability exists in the Schweitzer Engineering Laboratories SEL Series that stems from the possibility of bypassing password guessing...

7.5CVSS6.9AI score0.00421EPSS
SaveExploits0References1
NVD
NVD
•added 2025/05/19 4:15 p.m.•21 views

CVE-2025-4876

ConnectWise-Password-Encryption-Utility.exe in ConnectWise Risk Assessment allows an attacker to extract a hardcoded AES decryption key via reverse engineering. This key is embedded in plaintext within the binary and used in cryptographic operations without dynamic key management. Once obtained t...

6CVSS0.00102EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
•added 2025/05/19 4:04 p.m.•22 views

CVE-2025-4876 Hardcoded Key Revealed in ConnectWise Password Encryption Utility

ConnectWise-Password-Encryption-Utility.exe in ConnectWise Risk Assessment allows an attacker to extract a hardcoded AES decryption key via reverse engineering. This key is embedded in plaintext within the binary and used in cryptographic operations without dynamic key management. Once obtained t...

6CVSS5.9AI score0.00102EPSS
SaveExploits1References1
CVE
CVE
•added 2025/05/19 4:04 p.m.•78 views

CVE-2025-4876

The CVE-2025-4876 issue affects ConnectWise Risk Assessment’s ConnectWise-Password-Encryption-Utility.exe. Root cause: hardcoded AES decryption key embedded in plaintext in the binary, with no dynamic key management. Impact: an attacker with reverse-engineering capability could obtain the key and...

6CVSS5.9AI score0.00102EPSS
SaveExploits1References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/05/19 12:00 a.m.•4 views

CVE-2025-4876: Use of Hard-coded Cryptographic Key

ConnectWise-Password-Encryption-Utility.exe in ConnectWise Risk Assessment allows an attacker to extract a hardcoded AES decryption key via reverse engineering. This key is embedded in plaintext within the binary and used in cryptographic operations without dynamic key management. Once obtained t...

6CVSS5.8AI score0.00102EPSS
SaveExploits1References1
Packet Storm News
Packet Storm News
•added 2025/05/17 12:00 a.m.•14 views

The Impact of Emerging Phishing Threats: Assessing Quishing and LLM-Generated Phishing Emails against Organizations

Modern organizations are persistently targeted by phishing emails. Despite advances in detection systems and widespread employee training, attackers continue to innovate, posing ongoing threats. Two emerging vectors stand out in the current landscape: QR-code baits and LLM-enabled pretexting. Yet...

7AI score
SaveExploits0
Packet Storm News
Packet Storm News
•added 2025/05/16 12:00 a.m.•28 views

Privacy and Confidentiality Requirements Engineering for Process Data

The application and development of process mining techniques face significant challenges due to the lack of publicly available real-life event logs. One reason for companies to abstain from sharing their data are privacy and confidentiality concerns. Privacy concerns refer to personal data as...

6.9AI score
SaveExploits0
ICS
ICS
•added 2025/05/15 6:00 a.m.•28 views

ECOVACS DEEBOT Vacuum and Base Station (Update A)

RISK EVALUATION Successful exploitation of these vulnerabilities could allow an attacker to send malicious updates to the devices or execute code. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of these vulnerabilities, such as:...

7AI score
SaveExploits0References10
The Hacker News
The Hacker News
•added 2025/05/13 11:00 a.m.•26 views

Deepfake Defense in the Age of AI

The cybersecurity landscape has been dramatically reshaped by the advent of generative AI. Attackers now leverage large language models LLMs to impersonate trusted individuals and automate these social engineering tactics at scale. Let's review the status of these rising attacks, what's fueling...

7.3AI score
SaveExploits0
Positive Technologies
Positive Technologies
•added 2025/05/12 12:00 a.m.•27 views

PT-2025-20719 · Schweitzer Engineering Laboratories · Sel Blueframe Os

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: An authenticated user without user-management permissions could identify other user accounts. Recommendations: At the moment, there is no information about a newer version that contains a fi...

5.7CVSS6AI score0.00325EPSS
SaveExploits0References5
CNNVD
CNNVD
•added 2025/05/12 12:00 a.m.•25 views

Schweitzer Engineering Laboratories多款产品 安全漏洞

Schweitzer Engineering Laboratories SEL-5033 acSELerator RTAC Software and more are products of Schweitzer Engineering Laboratories, Inc. of the U.S.A. Schweitzer Engineering Laboratories SEL-5033 acSELerator RTAC Software is a graphical, easy-to-use tool that helps users quickly and easily...

4.4CVSS7AI score0.00172EPSS
SaveExploits0References2
Packet Storm News
Packet Storm News
•added 2025/05/12 12:00 a.m.•21 views

Machine Learning-Based Detection of DDoS Attacks in VANETs for Emergency Vehicle Communication

Vehicular Ad Hoc Networks VANETs play a key role in Intelligent Transportation Systems ITS, particularly in enabling real-time communication for emergency vehicles. However, Distributed Denial of Service DDoS attacks, which interfere with safety-critical communication channels, can severely impai...

6.9AI score
SaveExploits0
CNNVD
CNNVD
•added 2025/05/12 12:00 a.m.•18 views

SCHWEITZER ENGINEERING LABORATORIES多款产品 安全漏洞

Schweitzer Engineering Laboratories SEL-5033 acSELerator RTAC Software and more are products of Schweitzer Engineering Laboratories, Inc. of the U.S.A. Schweitzer Engineering Laboratories SEL-5033 acSELerator RTAC Software is a graphical, easy-to-use tool that helps users quickly and easily...

6.3CVSS6.6AI score0.00168EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/05/12 12:00 a.m.•16 views

Schweitzer Engineering Laboratories多款产品 安全漏洞

Schweitzer Engineering Laboratories SEL-5033 acSELerator RTAC Software and more are products of Schweitzer Engineering Laboratories, Inc. of the U.S.A. Schweitzer Engineering Laboratories SEL-5033 acSELerator RTAC Software is a graphical, easy-to-use tool that helps users quickly and easily...

4.3CVSS6.7AI score0.00243EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2025/05/12 12:00 a.m.•16 views

Schweitzer Engineering Laboratories多款产品 安全漏洞

Schweitzer Engineering Laboratories SEL-5033 acSELerator RTAC Software and more are products of Schweitzer Engineering Laboratories, Inc. of the U.S.A. Schweitzer Engineering Laboratories SEL-5033 acSELerator RTAC Software is a graphical, easy-to-use tool that helps users quickly and easily...

2.7CVSS6.7AI score0.00263EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2025/05/12 12:00 a.m.•22 views

PT-2025-20717

Name of the Vulnerable Software and Affected Versions The product name cannot be determined. Description An authenticated user without user-management permissions could view other users' account information. Recommendations At the moment, there is no information about a newer version that contain...

6.5CVSS6AI score0.0032EPSS
SaveExploits0References7
CNNVD
CNNVD
•added 2025/05/12 12:00 a.m.•18 views

Schweitzer Engineering Laboratories多款产品 安全漏洞

Schweitzer Engineering Laboratories SEL-5033 acSELerator RTAC Software and more are products of Schweitzer Engineering Laboratories, Inc. of the U.S.A. Schweitzer Engineering Laboratories SEL-5033 acSELerator RTAC Software is a graphical, easy-to-use tool that helps users quickly and easily...

5.7CVSS6.5AI score0.00148EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2025/05/12 12:00 a.m.•19 views

PT-2025-20712 · Schweitzer Engineering Laboratories · Sel Blueframe Os

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: An authenticated user without user administrative permissions could change the administrator Account Name. Recommendations: At the moment, there is no information about a newer version that...

7.5CVSS6.1AI score0.00329EPSS
SaveExploits0References7
Rows per page
Query Builder