CVE-2025-46627: Insecure Storage of Sensitive Information

Use of weak credentials in the Tenda RX2 Pro 16.03.30.14 allows an unauthenticated attacker to authenticate to the telnet service by calculating the root password based on easily-obtained device information. The password is based on the last two digits/octets of the MAC address...

RHEL 6 : cfme (RHSA-2015:0028)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2015:0028 advisory. Red Hat CloudForms Management Engine delivers the insight, control, and automation needed to address the challenges of managing virtual...

Exploit for Improper Initialization in Linux Linux_Kernel

Dirty...Quoi? Il s'agit de la preuve de concept de Max Kellerm...

CVE-2025-25873

Cross Site Request Forgery vulnerability in Open Panel OpenAdmin v.0.3.4 allows a remote attacker to escalate privileges via the Change Root Password function...

CVE-2025-25873

Cross Site Request Forgery vulnerability in Open Panel OpenAdmin v.0.3.4 allows a remote attacker to escalate privileges via the Change Root Password function...

CVE-2025-25873: Cross-Site Request Forgery (CSRF)

Cross Site Request Forgery vulnerability in Open Panel OpenAdmin v.0.3.4 allows a remote attacker to escalate privileges via the Change Root Password function...

CVE-2025-25873

A Cross-Site Request Forgery (CSRF) vulnerability exists in Open Panel OpenAdmin v.0.3.4 , a Laravel-based administration panel. The flaw allows a remote attacker to escalate privileges by targeting the Change Root Password function and the Users function. Specifically, an attacker can perform un...

CVE-2025-25873

Cross Site Request Forgery vulnerability in Open Panel OpenAdmin v.0.3.4 allows a remote attacker to escalate privileges via the Change Root Password function...

PT-2025-11280

Name of the Vulnerable Software and Affected Versions: Open Panel OpenAdmin version 0.3.4 Description: A Cross Site Request Forgery issue allows a remote attacker to escalate privileges via the Change Root Password function. Recommendations: For Open Panel OpenAdmin version 0.3.4, consider...

CVE-2024-57040

TL-WR845NUNV4200909 and TL-WR845NUNV4190219 was discovered to contain a hardcoded password for the root account which can be obtained by analyzing downloaded firmware or via a brute force attack through physical access to the router...

CVE-2019-3663

Unprotected Storage of Credentials vulnerability in McAfee Advanced Threat Defense ATD prior to 4.8 allows local attacker to gain access to the root password via accessing sensitive files on the system. This was originally published with a CVSS rating of High, further investigation has resulted i...

CVE-2024-11147

ECOVACS robot lawnmowers and vacuums use a deterministic root password generated based on model and serial number. An attacker with shell access can login as root...

CVE-2024-11147 ECOVACS lawnmowers and vacuums deterministic root password

ECOVACS robot lawnmowers and vacuums use a deterministic root password generated based on model and serial number. An attacker with shell access can login as root...

CVE-2024-11147 ECOVACS lawnmowers and vacuums deterministic root password

ECOVACS robot lawnmowers and vacuums use a deterministic root password generated based on model and serial number. An attacker with shell access can login as root...

CVE-2024-11147

CVE-2024-11147 affects ECOVACS robot lawnmowers and vacuums. A deterministic root password generated from the model and serial number allows an attacker with shell access to login as root. Provided documents identify the affected product scope and root-password mechanism, but do not specify patch...

ECOVACS robot lawnmowers和vacuums 信任管理问题漏洞

ECOVACS robot vacuums and ECOVACS robot lawnmowers are both products of the Chinese company ECOVACS.ECOVACS robot vacuums are a line of vacuum cleaners.ECOVACS robot lawnmowers are a line of lawnmowers. A security vulnerability exists in the ECOVACS robot lawnmowers and vacuums that stems from th...

PT-2025-1627 · Ecovacs · Ecovacs Robot Lawnmowers/Vacuums

Name of the Vulnerable Software and Affected Versions: ECOVACS robot lawnmowers and vacuums affected versions not specified Description: The issue concerns the use of a deterministic root password in ECOVACS robot lawnmowers and vacuums, which is generated based on the model and serial number. An...

PT-2025-3587

The software that is vulnerable is the Eaton X303, specifically versions 3.5.16 to 3.5.17 Build 712. The vulnerability is a hardcoded root password in the firmware, which allows an attacker with network access to a XC-303 PLC to login as root over SSH. It's worth noting that this vulnerability...

Eaton X303 安全漏洞

The Eaton X303 is a programmable logic controller from Eaton Corporation USA. A security vulnerability exists in the Eaton X303 version 3.5.16 through 3.5.17 Build 712, which stems from a hard-coded root password in the firmware, and allows an attacker with network access to the XC-303 PLC to log...

Cisco NX-OS Permissions, Privileges, and Access Controls (CVE-2016-1341)

Cisco NX-OS 7.01N11, 7.01N13, and 7.04N11 on Nexus 2000 Fabric Extender devices has a blank root password, which allows local users to gain privileges via unspecified vectors, aka Bug ID CSCur22079. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot f...