Lucene search
+L

8255 matches found

ATTACKERKB
ATTACKERKB
added 2025/12/22 12:32 a.m.6 views

CVE-2025-15005

A security flaw has been discovered in CouchCMS up to 2.4. Affected is an unknown function of the file couch/config.example.php of the component reCAPTCHA Handler. The manipulation of the argument KRECAPTCHASITEKEY/KRECAPTCHASECRETKEY results in use of hard-coded cryptographic key . It is possibl...

6.3CVSS4.5AI score0.00413EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
added 2025/12/22 12:0 a.m.11 views

PT-2025-52618

Name of the Vulnerable Software and Affected Versions CouchCMS versions up to 2.4 Description A security issue exists in CouchCMS related to the reCAPTCHA Handler component. The issue resides in an unknown function within the couch/config.example.php file. Manipulation of the arguments K RECAPTCH...

6.3CVSS6AI score0.00413EPSS
SaveExploits1References12
CNNVD
CNNVD
added 2025/12/22 12:0 a.m.12 views

Ragic Enterprise Cloud Database 安全漏洞

Ragic Enterprise Cloud Database is an enterprise cloud database from China Immediate Technology Ragic. A security vulnerability exists in Ragic Enterprise Cloud Database that stems from the use of hard-coded encryption keys, which could allow an unauthenticated, remote attacker to utilize a fixed...

9.8CVSS6.8AI score0.00469EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2025/12/22 12:0 a.m.8 views

Webzyme CouchCMS 安全漏洞

Webzyme CouchCMS is a content management system from Webzyme India. A security vulnerability exists in Webzyme CouchCMS 2.4 and earlier versions, which stems from the use of hard-coded encryption keys in the file couch/config.example.php in the component reCAPTCHA Handler, which could lead to a...

6.3CVSS4.7AI score0.00413EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
added 2025/12/22 12:0 a.m.14 views

PT-2025-52626

Name of the Vulnerable Software and Affected Versions Ragic Enterprise Cloud Database affected versions not specified Description The Ragic Enterprise Cloud Database contains a hard-coded cryptographic key issue. This allows unauthenticated remote attackers to exploit the fixed key to generate...

9.8CVSS6.9AI score0.00469EPSS
SaveExploits0References13
RedhatCVE
RedhatCVE
added 2025/12/19 3:16 p.m.7 views

CVE-2025-7358

Use of Hard-coded Credentials vulnerability in Utarit Informatics Services Inc. SoliClub allows Authentication Abuse.This issue affects SoliClub: before 5.3.7...

7.5CVSS7AI score0.00343EPSS
SaveExploits0References1
CVE
CVE
added 2025/12/18 8:32 p.m.20 views

CVE-2025-62001

Summary: CVE-2025-62001 affects BullWall Ransomware Containment. A flaw in configurable/exclusion handling could let an attacker with file write permissions bypass monitoring by renaming directories (e.g., $RECYCLE.BIN/$recycle.bin). Affected versions (per sources): 4.6.0.0, 4.6.0.6, 4.6.0.7, 4.6...

8.8CVSS6.1AI score0.00339EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2025/12/18 8:32 p.m.33 views

CVE-2025-62001 BullWall Ransomware Containment hard-coded folder exclusions

BullWall Ransomware Containment supports configurable file and directory exclusions such as '$RECYCLE.BIN' to balance monitoring scope and performance. Certain exclusion patterns could allow an authenticated attacker to rename directories in a way that avoids monitoring. Fixed in 4.6.1.14 and...

8.8CVSS0.00339EPSS
SaveExploits0References2
NVD
NVD
added 2025/12/18 3:16 p.m.10 views

CVE-2025-7358

Use of Hard-coded Credentials vulnerability in Utarit Informatics Services Inc. SoliClub allows Authentication Abuse. This issue affects SoliClub: before 5.3.7...

9.8CVSS0.00343EPSS
SaveExploits0References2
OSV
OSV
added 2025/12/18 3:16 p.m.7 views

CVE-2025-7358

Use of Hard-coded Credentials vulnerability in Utarit Informatics Services Inc. SoliClub allows Authentication Abuse.This issue affects SoliClub: before 5.3.7...

9.8CVSS5.8AI score0.00343EPSS
SaveExploits0References1
OSV
OSV
added 2025/12/18 3:15 p.m.6 views

CVE-2025-1029

Use of Hard-coded Credentials vulnerability in Utarit Information Services Inc. SoliClub allows Read Sensitive Constants Within an Executable.This issue affects SoliClub: from 5.2.4 before 5.3.7...

7.5CVSS5.8AI score0.00256EPSS
SaveExploits0References1
NVD
NVD
added 2025/12/18 3:15 p.m.13 views

CVE-2025-1029

Use of Hard-coded Credentials vulnerability in Utarit Information Services Inc. SoliClub allows Read Sensitive Constants Within an Executable. This issue affects SoliClub: from 5.2.4 before 5.3.7...

7.5CVSS0.00256EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2025/12/18 2:47 p.m.5 views

CVE-2025-7358

Use of Hard-coded Credentials vulnerability in Utarit Informatics Services Inc. SoliClub allows Authentication Abuse. This issue affects SoliClub: before 5.3.7...

9.8CVSS5.4AI score0.00343EPSS
SaveExploits0References3
CVE
CVE
added 2025/12/18 2:47 p.m.15 views

CVE-2025-7358

CVE-2025-7358 concerns SoliClub by Utarit Informatics Services Inc. where hard-coded credentials exist in SoliClub prior to version 5.3.7, enabling authentication abuse. The issue, documented across multiple feeds, is described as a hard-coded credential flaw that could allow unauthorized access,...

9.8CVSS5.2AI score0.00343EPSS
SaveExploits0References2Affected Software1
Vulnrichment
Vulnrichment
added 2025/12/18 2:47 p.m.5 views

CVE-2025-7358 Use of Hard-coded Credentials in Utarit Informatics' SoliClub

Use of Hard-coded Credentials vulnerability in Utarit Informatics Services Inc. SoliClub allows Authentication Abuse. This issue affects SoliClub: before 5.3.7...

7.5CVSS5.4AI score0.00343EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2025/12/18 2:47 p.m.28 views

CVE-2025-7358 Use of Hard-coded Credentials in Utarit Informatics' SoliClub

Use of Hard-coded Credentials vulnerability in Utarit Informatics Services Inc. SoliClub allows Authentication Abuse. This issue affects SoliClub: before 5.3.7...

7.5CVSS0.00343EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2025/12/18 2:16 p.m.16 views

CVE-2025-1029

Use of Hard-coded Credentials vulnerability in Utarit Information Services Inc. SoliClub allows Read Sensitive Constants Within an Executable. This issue affects SoliClub: from 5.2.4 before 5.3.7...

7.5CVSS5.4AI score0.00256EPSS
SaveExploits0References3Affected Software1
RedhatCVE
RedhatCVE
added 2025/12/18 12:36 a.m.16 views

CVE-2025-65855

The OTA firmware update mechanism in Netun Solutions HelpFlash IoT firmware v18178221102ASCIIPRO1R550 uses hard-coded WiFi credentials identical across all devices and does not authenticate update servers or validate firmware signatures. An attacker with brief physical access can activate OTA mod...

6.6CVSS7.7AI score0.00091EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/12/18 12:0 a.m.15 views

PT-2025-52223

Use of Hard-coded Credentials vulnerability in Utarit Information Services Inc. SoliClub allows Read Sensitive Constants Within an Executable.This issue affects SoliClub: from 5.2.4 before 5.3.7...

7.5CVSS6.9AI score0.00256EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2025/12/18 12:0 a.m.8 views

PT-2025-52254

Use of Hard-coded Credentials vulnerability in Utarit Informatics Services Inc. SoliClub allows Authentication Abuse.This issue affects SoliClub: before 5.3.7...

7.5CVSS7AI score0.00343EPSS
SaveExploits0References2
Rows per page
Query Builder