Lucene search
K

93 matches found

GithubExploit
GithubExploit
added 2024/09/05 9:1 a.m.300 views

Exploit for Use of Hard-coded Credentials in Solarwinds Web_Help_Desk

Description : The SolarWinds Web Help Desk WHD software is...

9.1CVSS9.6AI score0.93159EPSS
Exploits5
NVD
NVD
added 2024/08/21 10:15 p.m.71 views

CVE-2024-28987

The SolarWinds Web Help Desk WHD software is affected by a hardcoded credential vulnerability, allowing remote unauthenticated user to access internal functionality and modify data...

9.1CVSS0.93159EPSS
Exploits5References4
Cvelist
Cvelist
added 2024/08/21 9:17 p.m.50 views

CVE-2024-28987 SolarWinds Web Help Desk Hardcoded Credential Vulnerability

The SolarWinds Web Help Desk WHD software is affected by a hardcoded credential vulnerability, allowing remote unauthenticated user to access internal functionality and modify data...

9.1CVSS0.93159EPSS
Exploits5References2
Vulnrichment
Vulnrichment
added 2024/08/21 9:17 p.m.30 views

CVE-2024-28987 SolarWinds Web Help Desk Hardcoded Credential Vulnerability

The SolarWinds Web Help Desk WHD software is affected by a hardcoded credential vulnerability, allowing remote unauthenticated user to access internal functionality and modify data...

9.1CVSS7.1AI score0.93159EPSS
Exploits5References2
CVE
CVE
added 2024/08/21 9:17 p.m.268 views

CVE-2024-28987

SolarWinds Web Help Desk (WHD) is affected by a hardcoded credential vulnerability that allows remote, unauthenticated access to internal functionality and data modification. Affected versions are WHD

9.1CVSS9.3AI score0.93159EPSS
In wildExploits5References4Affected Software1
ATTACKERKB
ATTACKERKB
added 2024/08/21 12:0 a.m.25 views

CVE-2024-28987

The SolarWinds Web Help Desk WHD software is affected by a hardcoded credential vulnerability, allowing remote unauthenticated user to access internal functionality and modify data. Recent assessments: sfewer-r7 at November 22, 2024 4:16pm UTC reported: SolarWinds Web Help Desk is described as an...

9.1CVSS9.7AI score0.93159EPSS
In wildExploits5References3
OSV
OSV
added 2024/03/20 5:15 a.m.4 views

CVE-2024-22083

An issue was discovered in Elspec G5 digital fault recorder versions 1.1.4.15 and before. A hardcoded backdoor session ID exists that can be used for further access to the device, including reconfiguration tasks...

6.5CVSS5.8AI score0.00553EPSS
Exploits0References1
Packet Storm
Packet Storm
added 2024/02/29 12:0 a.m.323 views

Backdoor.Win32.Jeemp.c MVID-2024-0672 Hardcoded Credential

Discovery / credits: Malvuln John Page aka hyp3rlinx c 2024 Original source: https://malvuln.com/advisory/d6b192a4027c7d635499133ca6ce067f.txt Contact: [email protected] Media: twitter.com/malvuln Threat: Backdoor.Win32.Jeemp.c Vulnerability: Cleartext Hardcoded Credentials Description: The...

7.4AI score
Exploits0
NVD
NVD
added 2024/01/26 12:15 a.m.15 views

CVE-2024-23619

A hardcoded credential vulnerability exists in IBM Merge Healthcare eFilm Workstation. A remote, unauthenticated attacker can exploit this vulnerability to achieve information disclosure or remote code execution...

10CVSS9.3AI score0.01712EPSS
Exploits0References1
OSV
OSV
added 2024/01/26 12:15 a.m.6 views

CVE-2024-23619

A hardcoded credential vulnerability exists in IBM Merge Healthcare eFilm Workstation. A remote, unauthenticated attacker can exploit this vulnerability to achieve information disclosure or remote code execution...

9.8CVSS6AI score0.01712EPSS
Exploits0References1
CVE
CVE
added 2024/01/25 11:35 p.m.59 views

CVE-2024-23619

CVE-2024-23619 affects IBM Merge Healthcare eFilm Workstation. The connected documents identify a hardcoded credential vulnerability as the root cause, allowing a remote, unauthenticated attacker to achieve information disclosure or remote code execution. Affected software is IBM Merge Healthcare...

10CVSS9AI score0.01712EPSS
Exploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2023/09/02 12:31 p.m.9 views

CVE-2023-39982 MXsecurity Hardcoded Credential

A vulnerability has been identified in MXsecurity versions prior to v1.0.1. The vulnerability may put the confidentiality and integrity of SSH communications at risk on the affected device. This vulnerability is attributed to a hard-coded SSH host key, which might facilitate man-in-the-middle...

7.5CVSS6.3AI score0.00369EPSS
Exploits0References1
Cvelist
Cvelist
added 2023/09/02 12:31 p.m.16 views

CVE-2023-39982 MXsecurity Hardcoded Credential

A vulnerability has been identified in MXsecurity versions prior to v1.0.1. The vulnerability may put the confidentiality and integrity of SSH communications at risk on the affected device. This vulnerability is attributed to a hard-coded SSH host key, which might facilitate man-in-the-middle...

7.5CVSS7.5AI score0.00369EPSS
Exploits0References1
CNNVD
CNNVD
added 2023/08/23 12:0 a.m.5 views

Lenovo Notebook 信任管理问题漏洞

Lenovo Notebook is a laptop from Lenovo, a Chinese company. The Lenovo notebook suffers from a trust management issue vulnerability that stems from a hardcoded SMI handler credential in the LCFC BIOS that allows a local attacker with elevated privileges to unlock UEFI variables...

6.7CVSS6.6AI score0.00168EPSS
Exploits0References2
OSV
OSV
added 2023/08/16 4:15 p.m.4 views

CVE-2023-4204

NPort IAW5000A-I/O Series firmware version v2.2 and prior is affected by a hardcoded credential vulnerabilitywhich poses a potential risk to the security and integrity of the affected device. This vulnerability is attributed to the presence of a hardcoded key, which could potentially facilitate...

9.8CVSS5.8AI score0.00337EPSS
Exploits0References1
NVD
NVD
added 2023/08/16 4:15 p.m.20 views

CVE-2023-4204

NPort IAW5000A-I/O Series firmware version v2.2 and prior is affected by a hardcoded credential vulnerabilitywhich poses a potential risk to the security and integrity of the affected device. This vulnerability is attributed to the presence of a hardcoded key, which could potentially facilitate...

9.8CVSS6.5AI score0.00337EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2023/08/16 3:12 p.m.9 views

CVE-2023-4204 NPort IAW5000A-I/O Series Hardcoded Credential Vulnerability

NPort IAW5000A-I/O Series firmware version v2.2 and prior is affected by a hardcoded credential vulnerabilitywhich poses a potential risk to the security and integrity of the affected device. This vulnerability is attributed to the presence of a hardcoded key, which could potentially facilitate...

5.4CVSS6.9AI score0.00337EPSS
Exploits0References1
CVE
CVE
added 2023/08/16 3:12 p.m.50 views

CVE-2023-4204

The CVE-2023-4204 entry applies to MOXA NPort IAW5000A-I/O Series devices. Affected firmware versions are v2.2 and prior. The vulnerability stems from a hardcoded credential (key) embedded in the device, which could potentially allow firmware manipulation and compromise of the device’s security a...

9.8CVSS7.4AI score0.00337EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2023/08/16 3:12 p.m.20 views

CVE-2023-4204 NPort IAW5000A-I/O Series Hardcoded Credential Vulnerability

NPort IAW5000A-I/O Series firmware version v2.2 and prior is affected by a hardcoded credential vulnerabilitywhich poses a potential risk to the security and integrity of the affected device. This vulnerability is attributed to the presence of a hardcoded key, which could potentially facilitate...

5.4CVSS9.6AI score0.00337EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2023/05/22 6:40 a.m.8 views

CVE-2023-33236 MXsecurity Hardcoded Credential Vulnerability

MXsecurity version 1.0 is vulnearble to hardcoded credential vulnerability. This vulnerability has been reported that can be exploited to craft arbitrary JWT tokens and subsequently bypass authentication for web-based APIs...

9.8CVSS7.2AI score0.00973EPSS
Exploits0References1
Rows per page
Query Builder