Lucene search
+L

5875 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/10/03 12:00 a.m.•6 views

CVE-2025-10609: Use of Hard-coded Credentials

Use of Hard-coded Credentials vulnerability in Logo Software Inc. TigerWings ERP allows Read Sensitive Constants Within an Executable. This issue affects TigerWings ERP: from 01.01.00 before 3.03.00...

5.9CVSS5.8AI score0.00148EPSS
SaveExploits0References2
NVD
NVD
•added 2025/10/02 1:15 p.m.•13 views

CVE-2025-0642

Use of Hard-coded Credentials, Authorization Bypass Through User-Controlled Key vulnerability in PosCube Hardware Software and Consulting Ltd. Co. Assist allows Excavation, Authentication Bypass. This issue affects Assist: through 10.02.2025...

6.3CVSS0.00256EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2025/10/02 12:37 p.m.•25 views

CVE-2025-0642 Hard-coded Credentials in PosCube's Assist

Use of Hard-coded Credentials, Authorization Bypass Through User-Controlled Key vulnerability in PosCube Hardware Software and Consulting Ltd. Co. Assist allows Excavation, Authentication Bypass. This issue affects Assist: through 10.02.2025...

6.3CVSS0.00256EPSS
SaveExploits0References2
CVE
CVE
•added 2025/10/02 12:37 p.m.•26 views

CVE-2025-0642

PosCube Assist (PosCube Hardware Software and Consulting Ltd. Co.) is affected up to version 10.02.2025. The issue combines hard-coded credentials with an authorization bypass via user‑controlled keys, enabling authentication bypass and potentially arbitrary access (described as exploitation/ Exc...

6.3CVSS5.4AI score0.00256EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2025/10/02 12:37 p.m.•11 views

CVE-2025-0642

Use of Hard-coded Credentials, Authorization Bypass Through User-Controlled Key vulnerability in PosCube Hardware Software and Consulting Ltd. Co. Assist allows Excavation, Authentication Bypass. This issue affects Assist: through 10.02.2025...

6.3CVSS5.4AI score0.00256EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2025/10/02 12:37 p.m.•3 views

CVE-2025-0642 Hard-coded Credentials in PosCube's Assist

Use of Hard-coded Credentials, Authorization Bypass Through User-Controlled Key vulnerability in PosCube Hardware Software and Consulting Ltd. Co. Assist allows Excavation, Authentication Bypass. This issue affects Assist: through 10.02.2025...

6.3CVSS5.4AI score0.00256EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2025/10/02 12:00 a.m.•18 views

PT-2025-40342

Name of the Vulnerable Software and Affected Versions PosCube Assist versions through 10.02.2025 Description The software contains hard-coded credentials and allows authorization bypass through user-controlled keys, potentially enabling excavation and authentication bypass. Recommendations Update...

6.3CVSS6.9AI score0.00256EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/10/02 12:00 a.m.•4 views

CVE-2025-0642: Use of Hard-coded Credentials

Use of Hard-coded Credentials, Authorization Bypass Through User-Controlled Key vulnerability in PosCube Hardware Software and Consulting Ltd. Co. Assist allows Excavation, Authentication Bypass. This issue affects Assist: through 10.02.2025...

6.3CVSS5.8AI score0.00256EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2025/09/30 6:41 p.m.•35 views

CVE-2025-11126

A security flaw has been discovered in Apeman ID71 218.53.203.117. This vulnerability affects unknown code of the file /system/www/system.ini. The manipulation results in hard-coded credentials. The attack may be performed from remote. The exploit has been released to the public and may be...

10CVSS6.5AI score0.00625EPSS
SaveExploits0References1
NVD
NVD
•added 2025/09/29 12:15 a.m.•16 views

CVE-2025-11126

A security flaw has been discovered in Apeman ID71 218.53.203.117. This vulnerability affects unknown code of the file /system/www/system.ini. The manipulation results in hard-coded credentials. The attack may be performed from remote. The exploit has been released to the public and may be...

10CVSS0.00625EPSS
SaveExploits0References3
CVE
CVE
•added 2025/09/29 12:02 a.m.•44 views

CVE-2025-11126

Vulnerability CVE-2025-11126 affects Apeman ID71. A flaw in unknown code within /system/www/system.ini enables hard-coded credentials, allowing remote takeover. Exploit has been released publicly; vendor response is not provided in the documents. Described impact includes total compromise with re...

10CVSS6.3AI score0.00625EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2025/09/29 12:02 a.m.•8 views

CVE-2025-11126 Apeman ID71 system.ini hard-coded credentials

A security flaw has been discovered in Apeman ID71 218.53.203.117. This vulnerability affects unknown code of the file /system/www/system.ini. The manipulation results in hard-coded credentials. The attack may be performed from remote. The exploit has been released to the public and may be...

10CVSS6.3AI score0.00625EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2025/09/29 12:02 a.m.•29 views

CVE-2025-11126 Apeman ID71 system.ini hard-coded credentials

A security flaw has been discovered in Apeman ID71 218.53.203.117. This vulnerability affects unknown code of the file /system/www/system.ini. The manipulation results in hard-coded credentials. The attack may be performed from remote. The exploit has been released to the public and may be...

10CVSS0.00625EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2025/09/29 12:00 a.m.•21 views

Apeman ID71 信任管理问题漏洞

Apeman ID71 is a webcam from Apeman. The Apeman ID71 suffers from a trust management issue vulnerability that stems from the presence of hard-coded credentials in the file /system/www/system.ini, which could lead to a remote attack...

10CVSS9.3AI score0.00625EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/09/29 12:00 a.m.•3 views

CVE-2025-34223: Use of Hard-coded Credentials

Vasion Print formerly PrinterLogic Virtual Appliance Host prior to version 22.0.1049 and Application prior to version 20.0.2786 VA/SaaS deployments contain a default admin account and an installation‑time endpoint at /admin/query/updatedatabase.php that can be accessed without authentication. An...

10CVSS6AI score0.01225EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/09/29 12:00 a.m.•4 views

CVE-2025-11126: Use of Hard-coded Credentials

A security flaw has been discovered in Apeman ID71 218.53.203.117. This vulnerability affects unknown code of the file /system/www/system.ini. The manipulation results in hard-coded credentials. The attack may be performed from remote. The exploit has been released to the public and may be...

10CVSS5.4AI score0.00625EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/09/29 12:00 a.m.•19 views

Vasion Print Virtual Appliance Host 安全漏洞

Vasion Print Virtual Appliance Host is a print management software from Vasion USA. A security vulnerability exists in Vasion Print Virtual Appliance Host versions prior to 22.0.1026 that stems from an unauthenticated firmware upload process and hard-coded credentials, which could lead to remote...

9.8CVSS7.9AI score0.01136EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
•added 2025/09/28 12:00 a.m.•22 views

PT-2025-39797

Name of the Vulnerable Software and Affected Versions Apeman ID71 affected versions not specified Description A security flaw exists in Apeman ID71 that involves hard-coded credentials. This allows for remote takeover of the device. The vulnerability resides in unknown code within the...

10CVSS9.4AI score0.00625EPSS
SaveExploits0References12
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/09/26 12:00 a.m.•5 views

CVE-2025-58385: Use of Hard-coded Credentials

In DOXENSE WATCHDOC before 6.1.0.5094, private user puk codes can be disclosed for Active Directory registered users there is hard-coded and predictable data...

7.1CVSS5.7AI score0.00145EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/09/24 6:32 p.m.•15 views

CVE-2025-58656

Use of Hard-coded Credentials vulnerability in Risto Niinemets Estonian Shipping Methods for WooCommerce estonian-shipping-methods-for-woocommerce allows Retrieve Embedded Sensitive Data.This issue affects Estonian Shipping Methods for WooCommerce: from n/a through = 1.7.2...

5.3CVSS5.9AI score0.0029EPSS
SaveExploits0References1
Rows per page
Query Builder