27 matches found
EUVD-2026-37677
Unauthenticated Local File Inclusion in Hitek 1.8.3 versions...
CVE-2026-39582
Unauthenticated Local File Inclusion in Hitek 1.8.3 versions...
CVE-2026-39582
CVE-2026-39582 affects the WordPress Hitek theme prior to version 1.8.3, with an unauthenticated Local File Inclusion vulnerability in the theme. The CVSSv3.1 score is 8.1 (HIGH), driven by network access, high attack complexity, no privileges required, and impacts to confidentiality, integrity, ...
CVE-2026-39582 WordPress Hitek theme < 1.8.3 - Local File Inclusion vulnerability
Unauthenticated Local File Inclusion in Hitek 1.8.3 versions...
WordPress Hitek theme < 1.8.3 - Local File Inclusion vulnerability
Local File Inclusion vulnerability discovered by Tran Nguyen Bao Khanh VCI - VNPT Cyber Immunity in WordPress Theme Hitek versions 1.8.3...
EUVD-2016-1295
Malware in sbrugna...
EUVD-2016-1294
Malware in sbrugna...
EUVD-2016-1293
Malware in sbrugna...
Hitek Software Automize Information Disclosure Vulnerability (CNVD-2017-05642)
Hitek Software Automize is an automation software suite from HitekSoftware that increases productivity and saves time. An information disclosure vulnerability exists in Hitek Software Automize. An attacker could exploit the vulnerability to obtain sensitive information...
Hitek Software Automize Information Disclosure Vulnerability (CNVD-2017-05643)
Hitek Software Automize is an automation software suite from HitekSoftware that increases productivity and saves time. An information disclosure vulnerability exists in Hitek Software Automize. An attacker could exploit the vulnerability to obtain sensitive information...
Hitek Software Automize Information Disclosure Vulnerability (CNVD-2017-05359)
Hitek Software Automize is an automation software suite from HitekSoftware that increases productivity and saves time. An information disclosure vulnerability exists in Hitek Software Automize. An attacker could exploit the vulnerability to obtain sensitive information...
Hitek Software Automize Information Disclosure Vulnerability (CNVD-2017-03647)
Hitek Software Automize is an automation software suite from Hitek Software that increases productivity and saves time. An information disclosure vulnerability exists in Hitek Software Automize. An attacker could exploit this vulnerability to disclose sensitive information...
CVE-2016-10102
hitek.jar in Hitek Software's Automize uses weak encryption when encrypting SSH/SFTP and Encryption profile passwords. This allows an attacker to retrieve the encrypted passwords from sshProfiles.jsd and encryptionProfiles.jsd and decrypt them to recover cleartext passwords. All 10.x up to and...
Design/Logic Flaw
hitek.jar in Hitek Software's Automize uses weak encryption when encrypting SSH/SFTP and Encryption profile passwords. This allows an attacker to retrieve the encrypted passwords from sshProfiles.jsd and encryptionProfiles.jsd and decrypt them to recover cleartext passwords. All 10.x up to and...
Information disclosure
Information Disclosure can occur in encryptionProfiles.jsd in Hitek Software's Automize because of the Read attribute being set for Users. This allows an attacker to recover encrypted passwords for GPG Encryption profiles. Verified in all 10.x versions up to and including 10.25, and all 11.x...
Information disclosure
Information Disclosure can occur in Hitek Software's Automize 10.x and 11.x passManager.jsd. Users have the Read attribute, which allows an attacker to recover the encrypted password to access the Password Manager...
Information disclosure
Information Disclosure can occur in sshProfiles.jsd in Hitek Software's Automize because of the Read attribute being set for Users. This allows an attacker to recover encrypted passwords for SSH/SFTP profiles. Verified in all 10.x versions up to and including 10.25, and all 11.x versions up to an...
CVE-2016-10102
hitek.jar in Hitek Software's Automize uses weak encryption when encrypting SSH/SFTP and Encryption profile passwords. This allows an attacker to retrieve the encrypted passwords from sshProfiles.jsd and encryptionProfiles.jsd and decrypt them to recover cleartext passwords. All 10.x up to and...
CVE-2016-10101
Information Disclosure can occur in Hitek Software's Automize 10.x and 11.x passManager.jsd. Users have the Read attribute, which allows an attacker to recover the encrypted password to access the Password Manager...
CVE-2016-10103
Information Disclosure can occur in encryptionProfiles.jsd in Hitek Software's Automize because of the Read attribute being set for Users. This allows an attacker to recover encrypted passwords for GPG Encryption profiles. Verified in all 10.x versions up to and including 10.25, and all 11.x...