Default credentials

Encrypted database credentials in LaborOfficeFree affecting version 19.10. This vulnerability allows an attacker to read and extract the username and password from the database of 'LOFservice.exe' and 'LaborOfficeFree.exe' located in the '%programfilesx86%\LaborOfficeFree' directory. This user ca...

CVE-2024-1344 Encrypted database credentials in LaborOfficeFree

Encrypted database credentials in LaborOfficeFree affecting version 19.10. This vulnerability allows an attacker to read and extract the username and password from the database of 'LOFservice.exe' and 'LaborOfficeFree.exe' located in the '%programfilesx86%\LaborOfficeFree' directory. This user ca...

CVE-2024-1344 Encrypted database credentials in LaborOfficeFree

Encrypted database credentials in LaborOfficeFree affecting version 19.10. This vulnerability allows an attacker to read and extract the username and password from the database of 'LOFservice.exe' and 'LaborOfficeFree.exe' located in the '%programfilesx86%\LaborOfficeFree' directory. This user ca...

CVE-2024-1344

CVE-2024-1344 affects LaborOfficeFree v19.10. The vulnerability allows reading/extracting database usernames and passwords from the LOF_service.exe/LaborOfficeFree.exe databases located under %programfiles(x86)%. An attacker could log in remotely with root-like privileges. Affected executables LO...

Security Bulletin: Multiple Security Vulnerabilities were identified in IBM Security Verify Access

Summary There were multiple Security Vulnerabilities that were reported against IBM Security Verify Access. These have been addressed in IBM Security Verify Access updates. Vulnerability Details CVEID:CVE-2023-31003 DESCRIPTION: IBM Security Access Manager Container IBM Security Verify Access...

CVE-2023-43016

IBM Security Access Manager Container IBM Security Verify Access Appliance 10.0.0.0 through 10.0.6.1 and IBM Security Verify Access Docker 10.0.0.0 through 10.0.6.1 could allow a remote user to log into the server due to a user account with an empty password. IBM X-Force ID: 266154...

CVE-2023-43016

CVE-2023-43016 affects IBM Security Verify Access: IBM Security Verify Access Appliance and IBM Security Verify Access Docker images version 10.0.0.0 through 10.0.6.1. The issue allows a remote user to log into the server due to a user account configured with an empty password. The NVD/IBM adviso...

CVE-2023-32333

CVE-2023-32333 affects IBM Maximo Asset Management 7.6.1.3. The issue is an improper access-control flaw that could let a remote attacker log into the admin panel, with the potential for unauthorized admin access. The vulnerability is rated highly by NVD (CVSS v3.1: 9.8 / CRITICAL) and is acknowl...

IBM Maximo Asset Management 访问控制错误漏洞

IBM Maximo Asset Management is a comprehensive asset lifecycle and maintenance management solution from International Business Machines IBM. The solution is capable of managing all types of assets, such as facilities, transportation, etc., on a single platform with a single point of control for...

PT-2024-12318 · Ibm · Ibm Maximo Asset Management

Name of the Vulnerable Software and Affected Versions: IBM Maximo Asset Management version 7.6.1.3 Description: The issue is related to improper access controls, allowing a remote attacker to log into the admin panel. This could potentially enable unauthorized access to sensitive areas of the...

PT-2024-1489 · Mitsubishi · Melsec Ws Series Ws0-Geth00200

Name of the Vulnerable Software and Affected Versions: MELSEC WS Series WS0-GETH00200 all serial numbers Description: The issue is related to an authentication bypass vulnerability in the MELSEC WS Series WS0-GETH00200, allowing a remote unauthenticated attacker to bypass the authentication proce...

Siemens SIMATIC CN 4100 Authorization Bypass Vulnerability

The SIMATIC CN 4100 is a communication node that can be connected to third-party systems. An authorization bypass vulnerability exists in the Siemens SIMATIC CN 4100, which can be exploited by an attacker to remotely log in as root and take control of the device...

CVE-2023-49251

A vulnerability has been identified in SIMATIC CN 4100 All versions V2.7. The "intermediate installation" system state of the affected application allows an attacker to add their own login credentials to the device. This allows an attacker to remotely login as root and take control of the device...

CVE-2023-49251

The CVE-2023-49251 vulnerability affects Siemens SIMATIC CN 4100 (all versions before V2.7). The issue arises during the device’s

Siemens SIMATIC CN 4100

As of January 10, 2023, CISA will no longer be updating ICS security advisories for Siemens product vulnerabilities beyond the initial advisory. For the most up-to-date information on vulnerabilities in this advisory, please see Siemens' ProductCERT Security Advisories CERT Services | Services |...

Siemens SIMATIC CN 4100 安全漏洞

The SIMATIC CN 4100 is a communication node that can be connected to third-party systems. An authorization bypass vulnerability exists in the Siemens SIMATIC CN 4100, which can be exploited by an attacker to remotely log in as root and take control of the device...

OESA-2023-1976 openssh security update

OpenSSH is the premier connectivity tool for remote login with the SSH protocol. \ It encrypts all traffic to eliminate eavesdropping, connection hijacking, and \ other attacks. In addition, OpenSSH provides a large suite of secure tunneling \ capabilities, several authentication methods, and...

Gnome control center security vulnerability

Gnome control center is a graphical user interface for the GNOME project. It is used to configure all aspects of Gnome. A security vulnerability exists in Gnome control center that stems from an inability to accurately reflect SSH remote login status...

CVE-2023-5616

In Ubuntu, gnome-control-center did not properly reflect SSH remote login status when the system was configured to use systemd socket activation for openssh-server. This could unknowingly leave the local machine exposed to remote SSH access contrary to expectation of the user...

PT-2023-28637 · Apple · Macos Sonoma +1

Name of the Vulnerable Software and Affected Versions: macOS Sonoma versions prior to 14.2 Description: This issue allows Remote Login sessions to potentially obtain full disk access permissions due to inadequate state management. The estimated number of potentially affected devices worldwide is...