Lucene search
K

1110 matches found

ATTACKERKB
ATTACKERKB
added 2026/04/20 6:0 a.m.0 views

CVE-2026-6611

A vulnerability was found in liangliangyy DjangoBlog up to 2.1.0.0. This affects an unknown function of the file djangoblog/settings.py of the component File Upload Endpoint. Performing a manipulation of the argument SECRETKEY results in use of hard-coded cryptographic key . Remote exploitation o...

3.1CVSS5AI score0.00248EPSS
Exploits0References4Affected Software1
NVD
NVD
added 2026/04/20 4:16 a.m.0 views

CVE-2026-32958

SD-330AC and AMC Manager provided by silex technology, Inc. use a hard-coded cryptographic key. An administrative user may be directed to apply a fake firmware update...

6.9CVSS0.00228EPSS
Exploits0References3
Cvelist
Cvelist
added 2026/04/20 3:19 a.m.32 views

CVE-2026-32958

SD-330AC and AMC Manager provided by silex technology, Inc. use a hard-coded cryptographic key. An administrative user may be directed to apply a fake firmware update...

6.9CVSS0.00228EPSS
Exploits0References3
CVE
CVE
added 2026/04/20 3:19 a.m.8 views

CVE-2026-32958

Affected products: SD-330AC and AMC Manager by silex technology, Inc. The issue stems from a hard-coded cryptographic key, enabling an administrative user to be directed to apply a fake firmware update. According to the provided data, impact is high on integrity, with no confidentiality impact, a...

6.9CVSS5.7AI score0.00228EPSS
Exploits0References3Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/04/20 3:19 a.m.0 views

CVE-2026-32958

SD-330AC and AMC Manager provided by silex technology, Inc. use a hard-coded cryptographic key. An administrative user may be directed to apply a fake firmware update...

6.9CVSS5.7AI score0.00228EPSS
Exploits0References4Affected Software2
Vulnrichment
Vulnrichment
added 2026/04/20 3:19 a.m.2 views

CVE-2026-32958

SD-330AC and AMC Manager provided by silex technology, Inc. use a hard-coded cryptographic key. An administrative user may be directed to apply a fake firmware update...

6.9CVSS5.7AI score0.00228EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2026/04/20 12:0 a.m.3 views

PT-2026-33718

A vulnerability was found in liangliangyy DjangoBlog up to 2.1.0.0. This affects an unknown function of the file djangoblog/settings.py of the component File Upload Endpoint. Performing a manipulation of the argument SECRET KEY results in use of hard-coded cryptographic key . Remote exploitation ...

3.1CVSS4.9AI score0.00248EPSS
Exploits0References5
Positive Technologies
Positive Technologies
added 2026/04/20 12:0 a.m.2 views

PT-2026-33696

SD-330AC and AMC Manager provided by silex technology, Inc. use a hard-coded cryptographic key. An administrative user may be directed to apply a fake firmware update...

6.9CVSS5.7AI score0.00228EPSS
Exploits0References4
NVD
NVD
added 2026/04/19 11:16 p.m.2 views

CVE-2026-6580

A security vulnerability has been detected in liangliangyy DjangoBlog up to 2.1.0.0. Affected is an unknown function of the file owntracks/views.py of the component Amap API Call Handler. Such manipulation of the argument key leads to use of hard-coded cryptographic key . The attack may be launch...

7.5CVSS0.00284EPSS
Exploits0References4
Cvelist
Cvelist
added 2026/04/19 10:15 p.m.19 views

CVE-2026-6580 liangliangyy DjangoBlog Amap API Call views.py hard-coded key

A security vulnerability has been detected in liangliangyy DjangoBlog up to 2.1.0.0. Affected is an unknown function of the file owntracks/views.py of the component Amap API Call Handler. Such manipulation of the argument key leads to use of hard-coded cryptographic key . The attack may be launch...

7.5CVSS0.00284EPSS
Exploits0References4
ATTACKERKB
ATTACKERKB
added 2026/04/19 10:15 p.m.1 views

CVE-2026-6580

A security vulnerability has been detected in liangliangyy DjangoBlog up to 2.1.0.0. Affected is an unknown function of the file owntracks/views.py of the component Amap API Call Handler. Such manipulation of the argument key leads to use of hard-coded cryptographic key . The attack may be launch...

7.5CVSS5.3AI score0.00284EPSS
Exploits0References4Affected Software1
Vulnrichment
Vulnrichment
added 2026/04/19 10:15 p.m.1 views

CVE-2026-6580 liangliangyy DjangoBlog Amap API Call views.py hard-coded key

A security vulnerability has been detected in liangliangyy DjangoBlog up to 2.1.0.0. Affected is an unknown function of the file owntracks/views.py of the component Amap API Call Handler. Such manipulation of the argument key leads to use of hard-coded cryptographic key . The attack may be launch...

7.5CVSS6.6AI score0.00284EPSS
Exploits0References4
CVE
CVE
added 2026/04/19 10:15 p.m.10 views

CVE-2026-6580

The CVE describes a vulnerability in liangliangyy DjangoBlog (up to 2.1.0.0) affecting an unknown function in owntracks/views.py within the Amap API Call Handler. The issue arises from manipulation of the argument key that causes the use of a hard-coded cryptographic key. It can be exploited remo...

7.5CVSS6.6AI score0.00284EPSS
Exploits0References4
Positive Technologies
Positive Technologies
added 2026/04/19 12:0 a.m.3 views

PT-2026-33650

Name of the Vulnerable Software and Affected Versions liangliangyy DjangoBlog versions prior to 2.1.0.0 Description An issue exists in the Amap API Call Handler component within the file 'owntracks/views.py'. Manipulation of the key argument leads to the use of a hard-coded cryptographic key. Thi...

7.5CVSS7.3AI score0.00284EPSS
Exploits0References7
Cvelist
Cvelist
added 2026/04/17 7:22 p.m.19 views

CVE-2026-32324 Anviz CX7 Firmware Use of Hard-coded Cryptographic Key

Anviz CX7 Firmware is vulnerable because the application embeds reusable certificate/key material, enabling decryption of MQTT traffic and potential interaction with device messaging channels at scale...

7.7CVSS0.00087EPSS
Exploits0References3
CVE
CVE
added 2026/04/17 7:22 p.m.15 views

CVE-2026-32324

The CVE-2026-32324 entry concerns Anviz CX7 Firmware. The affected software is the CX7 firmware’s application, which is reported to embed reusable certificate/key material. This configuration enables decryption of MQTT traffic and could allow interaction with device messaging channels at scale. T...

7.7CVSS5.8AI score0.00087EPSS
Exploits0References3Affected Software1
EUVD
EUVD
added 2026/04/14 6:30 p.m.3 views

EUVD-2026-22339

A use of hard-coded cryptographic key vulnerability in Fortinet FortiClientEMS 7.4.0 through 7.4.5 may allow attacker to information disclosure via...

6CVSS5.8AI score0.001EPSS
Exploits0References2
NVD
NVD
added 2026/04/14 4:16 p.m.0 views

CVE-2026-39810

A use of hard-coded cryptographic key vulnerability in Fortinet FortiClientEMS 7.4.0 through 7.4.5 may allow attacker to information disclosure via decrypting database dump...

6CVSS0.001EPSS
Exploits0References1
Cvelist
Cvelist
added 2026/04/14 3:38 p.m.23 views

CVE-2026-39810

A use of hard-coded cryptographic key vulnerability in Fortinet FortiClientEMS 7.4.0 through 7.4.5 may allow attacker to information disclosure via decrypting database dump...

6CVSS0.001EPSS
Exploits0References1
CVE
CVE
added 2026/04/14 3:38 p.m.6 views

CVE-2026-39810

CVE-2026-39810 describes a vulnerability in Fortinet FortiClientEMS 7.4.0–7.4.5 where a hard‑coded cryptographic key may lead to information disclosure. The affected component is FortiClient EMS, and the root cause is a hard-coded key compromising confidentiality (C>H/I>H). The document set...

6CVSS5.8AI score0.001EPSS
Exploits0References1Affected Software1
Rows per page
Query Builder