Design/Logic Flaw

A specific file on the sERP server if KyungrinaraERP solution has a fixed password with the SYSTEM authority. This vulnerability could allow attackers to leak or steal sensitive information or execute malicious commands...

PT-2022-25686 · Unknown · Kyungrinara

Name of the Vulnerable Software and Affected Versions: Kyungrinara affected versions not specified Description: The issue concerns a specific file on the sERP server of Kyungrinara, an ERP solution, which has a fixed password with SYSTEM authority. This could allow attackers to leak or steal...

CVE-2022-41157

CVE-2022-41157 affects the sERP Server (Kyungrinara ERP solution) where a fixed password with SYSTEM authority creates a risk allowing leakage of sensitive data or execution of malicious commands. The connected documents confirm the vulnerability exists in the sERP server and describe the impact ...

sERP Server 信任管理问题漏洞

sERP Server is an enterprise management application from the Korean company sERP. A security vulnerability exists in sERP Server version 2.0 prior to 20.2.170, which stems from a fixed password that could allow an attacker to disclose/steal sensitive information or execute malicious commands if...

VulnCheck KEV: CVE-2020-29583

Zyxel firewalls ATP, USG, VM and AP Controllers NXC2500 and NXC5500 contain a use of hard-coded credentials vulnerability in an undocumented account "zyfwp" with an unchangeable password...

The vulnerability of the Moxa MXView network control software, related to the use of rigid password encoding, allows a intruder to gain unauthorized access to protected information.

The vulnerability of the Moxa MXView network control software lies in the use of fixed password encoding schemes. Exploiting this vulnerability could allow an unauthorized attacker to gain unauthorized access to protected information by using the default passwords...

CVE-2019-14309

Ricoh SP C250DN 1.05 devices have a fixed password. FTP service credential were found to be hardcoded within the printer firmware. This would allow to an attacker to access and read information stored on the shared FTP folders...

CVE-2017-18470

cPanel before 62.0.4 has a fixed password for the Munin MySQL test account SEC-196...

CVE-2017-18470

cPanel before 62.0.4 has a fixed password for the Munin MySQL test account SEC-196...

CVE-2017-18470

cPanel before 62.0.4 has a fixed password for the Munin MySQL test account SEC-196...

Technicolor TC7200 Modem / Router STD6.02.11 - Multiple Vulnerabilities

Exploit for hardware platform in category web applications ''' Technicolor TC7200 modem/router multiple vulnerabilities -------------------------------------------------------- Platforms / Firmware confirmed affected: - Technicolor TC7200, STD6.02.11 - Product page:...

Technicolor TC7200 Modem / Router Session Management / Fixed Password

Technicolor TC7200 modem/router multiple vulnerabilities -------------------------------------------------------- Platforms / Firmware confirmed affected: - Technicolor TC7200, STD6.02.11 - Product page:...

Vulnerabilities in SimpGB

Hello 3APA3A! I want to warn you about security vulnerabilities in SimpGB. These are Full path disclosure, Insufficient Anti-automation and Cross-Site Scripting vulnerabilities. Full path disclosure: http://site/admin/index.php?lang=1 http://site/admin/pwlost.php?lang=1...