1081 matches found
CVE-2025-52545: Insufficiently Protected Credentials
E3 Site Supervisor Control firmware version 2.31F01 RCI service contains an API call to read users info, which returns all usernames and password hashes for the application services...
CVE-2025-52543: Use of Password Hash Instead of Password for Authentication
E3 Site Supervisor Control firmware version 2.31F01 application services MGW and RCI uses client side hashing for authentication. An attacker can authenticate by obtaining only the password hash...
PT-2025-35553
Name of the Vulnerable Software and Affected Versions: E3 Site Supervisor Control versions prior to 2.31F01 Description: E3 Site Supervisor Control firmware version prior to 2.31F01 has a floor plan feature that allows an unauthenticated attacker to upload floor plan files. By uploading a special...
CVE-2025-25737
Kapsch TrafficCom RIS-9160 & RIS-9260 Roadside Units RSUs v3.2.0.829.23, v3.8.0.1119.42, and v4.6.0.1211.28 were discovered to lack secure password requirements for its BIOS Supervisor and User accounts, allowing attackers to bypass authentication via a bruteforce attack...
CVE-2025-25737
Kapsch TrafficCom RIS-9160 & RIS-9260 Roadside Units RSUs v3.2.0.829.23, v3.8.0.1119.42, and v4.6.0.1211.28 were discovered to lack secure password requirements for its BIOS Supervisor and User accounts, allowing attackers to bypass authentication via a bruteforce attack...
CVE-2025-25737: Weak Password Requirements
Kapsch TrafficCom RIS-9160 & RIS-9260 Roadside Units RSUs v3.2.0.829.23, v3.8.0.1119.42, and v4.6.0.1211.28 were discovered to lack secure password requirements for its BIOS Supervisor and User accounts, allowing attackers to bypass authentication via a bruteforce attack...
Linux Distros Unpatched Vulnerability : CVE-2019-12105
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Supervisor through 4.0.2, an unauthenticated user can read log files or restart a service. Note: The maintainer responded that the affected component,...
CVE-2025-50897
A vulnerability exists in riscv-boom SonicBOOM 1.2 BOOMv1.2 processor implementation, where valid virtual-to-physical address translations configured with write permissions PTEW in SV39 mode may incorrectly trigger a Store/AMO access fault during store instructions sd. This occurs despite the...
Malicious code in prosthetics-commitlint-config-angular-dotenv-safe-supervisor (npm)
The package prosthetics-commitlint-config-angular-dotenv-safe-supervisor was found to contain malicious code...
Malicious code in foundation-supervisor-meissa-polaris (npm)
The package foundation-supervisor-meissa-polaris was found to contain malicious code...
Malicious code in optimize-css-assets-webpack-plugin-quantum-supervisor-oscillation (npm)
The package optimize-css-assets-webpack-plugin-quantum-supervisor-oscillation was found to contain malicious code...
Malicious code in nova-react-bootstrap-supervisor-abiogenesis (npm)
The package nova-react-bootstrap-supervisor-abiogenesis was found to contain malicious code...
MAL-2025-34225 Malicious code in supervisor-graviton-triton-iota (npm)
The package supervisor-graviton-triton-iota was found to contain malicious code...
MAL-2025-30755 Malicious code in prosthetics-commitlint-config-angular-dotenv-safe-supervisor (npm)
The package prosthetics-commitlint-config-angular-dotenv-safe-supervisor was found to contain malicious code...
MAL-2025-27754 Malicious code in nova-react-bootstrap-supervisor-abiogenesis (npm)
The package nova-react-bootstrap-supervisor-abiogenesis was found to contain malicious code...
MAL-2025-14582 Malicious code in antares-library-auth0-supervisor (npm)
The package antares-library-auth0-supervisor was found to contain malicious code...
MAL-2025-20815 Malicious code in foundation-supervisor-meissa-polaris (npm)
The package foundation-supervisor-meissa-polaris was found to contain malicious code...
MAL-2025-34228 Malicious code in supervisor-spectroscopy-tardigrade-native (npm)
The package supervisor-spectroscopy-tardigrade-native was found to contain malicious code...