Lucene search
+L

1757 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/01/25 12:00 a.m.•6 views

CVE-2026-1408: Weak Password Requirements

A weakness has been identified in Beetel 777VR1 up to 01.00.09/01.00.0955. This vulnerability affects unknown code of the component UART Interface. Executing a manipulation can lead to weak password requirements. The physical device can be targeted for the attack. The attack requires a high level...

4.2CVSS4AI score0.00302EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/01/25 12:00 a.m.•8 views

CVE-2026-1407: Exposure of Sensitive Information to an Unauthorized Actor

A security flaw has been discovered in Beetel 777VR1 up to 01.00.09/01.00.0955. This affects an unknown part of the component UART Interface. Performing a manipulation results in information disclosure. The attack may be carried out on the physical device. The attack is considered to have high...

4.2CVSS3.9AI score0.00292EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2026/01/25 12:00 a.m.•76 views

PT-2026-4679

A security vulnerability has been detected in Beetel 777VR1 up to 01.00.09/01.00.09 55. This issue affects some unknown processing of the component UART Interface. The manipulation leads to improper restriction of excessive authentication attempts. It is possible to launch the attack on the...

2CVSS4.1AI score0.00378EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
•added 2026/01/25 12:00 a.m.•28 views

PT-2026-4677

Name of the Vulnerable Software and Affected Versions Beetel 777VR1 versions up to 01.00.09/01.00.09 55 Description A security flaw exists in the UART Interface component of Beetel 777VR1. A manipulation of the device can lead to information disclosure. The attack requires physical access to the...

2CVSS4.6AI score0.00292EPSS
SaveExploits1References7
RedhatCVE
RedhatCVE
•added 2026/01/21 1:32 a.m.•28 views

CVE-2026-1196

A security vulnerability has been detected in MineAdmin 1.x/2.x. Affected is an unknown function of the file /system/getFileInfoById. Such manipulation of the argument ID leads to information disclosure. It is possible to launch the attack remotely. The attack requires a high level of complexity...

5.3CVSS4.3AI score0.00476EPSS
SaveExploits1References1
osv_ghsa
osv_ghsa
•added 2026/01/20 3:30 a.m.•20 views

GHSA-43RR-X62X-Q96W MineAdmin improperly refreshes tokens

A weakness has been identified in MineAdmin 1.x/2.x. This impacts the function refresh of the file /system/refresh of the component JWT Token Handler. This manipulation causes insufficient verification of data authenticity. It is possible to initiate the attack remotely. The attack is considered ...

5CVSS4.6AI score0.00257EPSS
SaveExploits1References6
Github Security Blog
Github Security Blog
•added 2026/01/20 3:30 a.m.•34 views

MineAdmin improperly refreshes tokens

A weakness has been identified in MineAdmin 1.x/2.x. This impacts the function refresh of the file /system/refresh of the component JWT Token Handler. This manipulation causes insufficient verification of data authenticity. It is possible to initiate the attack remotely. The attack is considered ...

7.5CVSS4.6AI score0.00257EPSS
SaveExploits1References6Affected Software1
NVD
NVD
•added 2026/01/20 1:15 a.m.•34 views

CVE-2026-1197

A vulnerability was detected in MineAdmin 1.x/2.x. Affected by this vulnerability is an unknown functionality of the file /system/downloadById. Performing a manipulation of the argument ID results in information disclosure. The attack can be initiated remotely. The attack's complexity is rated as...

3.1CVSS0.00361EPSS
SaveExploits1References4
NVD
NVD
•added 2026/01/20 1:15 a.m.•29 views

CVE-2026-1195

A weakness has been identified in MineAdmin 1.x/2.x. This impacts the function refresh of the file /system/refresh of the component JWT Token Handler. This manipulation causes insufficient verification of data authenticity. It is possible to initiate the attack remotely. The attack is considered ...

7.5CVSS0.00257EPSS
SaveExploits1References4
CVE
CVE
•added 2026/01/20 12:32 a.m.•73 views

CVE-2026-1197

MineAdmin 1.x/2.x is affected by CVE-2026-1197 via information disclosure in /system/downloadById when the ID parameter is manipulated. The vulnerability is exploitable remotely with high attack complexity; public exploit appears available and the vendor has not responded to disclosure. Connected...

3.1CVSS4.6AI score0.00361EPSS
SaveExploits1References4Affected Software1
CVE
CVE
•added 2026/01/20 12:32 a.m.•42 views

CVE-2026-1196

MineAdmin 1.x/2.x vulnerability: manipulating the argument ID in /system/getFileInfoById leads to information disclosure. Exploitable remotely with high complexity; likely confidentiality impact. Publicly disclosed exploit; no remediation details provided in the connected documents.

5.3CVSS4.3AI score0.00476EPSS
SaveExploits1References4Affected Software1
Vulnrichment
Vulnrichment
•added 2026/01/20 12:32 a.m.•8 views

CVE-2026-1196 MineAdmin getFileInfoById information disclosure

A security vulnerability has been detected in MineAdmin 1.x/2.x. Affected is an unknown function of the file /system/getFileInfoById. Such manipulation of the argument ID leads to information disclosure. It is possible to launch the attack remotely. The attack requires a high level of complexity...

3.1CVSS4.3AI score0.00476EPSS
SaveExploits1References4
attackerkb
attackerkb
•added 2026/01/20 12:02 a.m.•15 views

CVE-2026-1195

A weakness has been identified in MineAdmin 1.x/2.x. This impacts the function refresh of the file /system/refresh of the component JWT Token Handler. This manipulation causes insufficient verification of data authenticity. It is possible to initiate the attack remotely. The attack is considered ...

7.5CVSS4.6AI score0.00257EPSS
SaveExploits1References4
Mend
Mend
•added 2026/01/20 12:02 a.m.•10 views

CVE-2026-1195

A weakness has been identified in MineAdmin 1.x/2.x. This impacts the function refresh of the file /system/refresh of the component JWT Token Handler. This manipulation causes insufficient verification of data authenticity. It is possible to initiate the attack remotely. The attack is considered ...

7.5CVSS4.6AI score0.00257EPSS
SaveExploits1References6
Vulnrichment
Vulnrichment
•added 2026/01/20 12:02 a.m.•11 views

CVE-2026-1195 MineAdmin JWT Token refresh data authenticity

A weakness has been identified in MineAdmin 1.x/2.x. This impacts the function refresh of the file /system/refresh of the component JWT Token Handler. This manipulation causes insufficient verification of data authenticity. It is possible to initiate the attack remotely. The attack is considered ...

5CVSS4.6AI score0.00257EPSS
SaveExploits1References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/01/20 12:00 a.m.•5 views

CVE-2026-1196: Exposure of Sensitive Information to an Unauthorized Actor

A security vulnerability has been detected in MineAdmin 1.x/2.x. Affected is an unknown function of the file /system/getFileInfoById. Such manipulation of the argument ID leads to information disclosure. It is possible to launch the attack remotely. The attack requires a high level of complexity...

5.3CVSS4.3AI score0.00476EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/01/20 12:00 a.m.•9 views

CVE-2026-1195: Insufficient Verification of Data Authenticity

A weakness has been identified in MineAdmin 1.x/2.x. This impacts the function refresh of the file /system/refresh of the component JWT Token Handler. This manipulation causes insufficient verification of data authenticity. It is possible to initiate the attack remotely. The attack is considered ...

7.5CVSS4.6AI score0.00257EPSS
SaveExploits1References1
SUSE CVE
SUSE CVE
•added 2026/01/17 12:31 a.m.•42 views

SUSE CVE-2025-15107

A security vulnerability has been detected in actiontech sqle up to 4.2511.0. The impacted element is an unknown function of the file sqle/utils/jwt.go of the component JWT Secret Handler. The manipulation of the argument JWTSecretKey leads to use of hard-coded cryptographic key . The attack is...

8.1CVSS4.9AI score0.00618EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2026/01/16 12:00 a.m.•37 views

PT-2026-5329

Name of the Vulnerable Software and Affected Versions Tenda AX12 Pro V2 version 16.03.49.24 cn Description A flaw exists in the Telnet Service component of the software that allows for the retrieval of hard-coded credentials. Successful exploitation of this issue grants full remote control. The...

9.2CVSS7.5AI score0.00732EPSS
SaveExploits0References11
Positive Technologies
Positive Technologies
•added 2026/01/16 12:00 a.m.•48 views

PT-2026-5404

Name of the Vulnerable Software and Affected Versions D-Link DIR-823X version 250416 Description A flaw exists in the Login component of the D-Link DIR-823X, specifically within the sub 40AC74 function. This issue results in insufficient restriction of excessive authentication attempts, potential...

6.3CVSS5.3AI score0.01163EPSS
SaveExploits0References12
Rows per page
Query Builder