74 matches found
CVE-2026-121022
Use of Default Password CWE-1393 in the web client in AxxonSoft Axxon One before 3.0.0 on Windows and Linux allows a remote unauthenticated attacker to log in as the built-in administrator with the default credentials on a newly installed system, because the web client did not enforce the mandato...
CVE-2026-121020
Exposure of Sensitive Information to an Unauthorized Actor CWE-200 in the security configuration API in AxxonSoft Axxon One before 3.2.0 on Windows and Linux allows a remote authenticated user with limited privileges to enumerate all user accounts and roles configured in the system via the user...
CVE-2026-121021
Plaintext Storage of a Password CWE-256 in the SecurityManager shared configuration in AxxonSoft Axxon One before 3.1.0 on Windows and Linux allows a local attacker with read access to the configuration directory or to configuration backups to obtain the password of the LDAP directory service...
EUVD-2026-115713
Use of Default Password CWE-1393 in the web client in AxxonSoft Axxon One before 3.0.0 on Windows and Linux allows a remote unauthenticated attacker to log in as the built-in administrator with the default credentials on a newly installed system, because the web client did not enforce the mandato...
CVE-2026-121022 Default Administrator Password Change Not Enforced in Axxon One Web Client
Use of Default Password CWE-1393 in the web client in AxxonSoft Axxon One before 3.0.0 on Windows and Linux allows a remote unauthenticated attacker to log in as the built-in administrator with the default credentials on a newly installed system, because the web client did not enforce the mandato...
CVE-2026-121022
The AxxonSoft Axxon One web client (versions prior to 3.0.0 on Windows and Linux) is vulnerable to a Use of Default Password (CWE-1393) . The software fails to enforce a mandatory password change upon first login, allowing a remote unauthenticated attacker to access the built-in administrator acc...
CVE-2026-121021 Plaintext Storage of LDAP Password in Axxon One Shared Configuration
Plaintext Storage of a Password CWE-256 in the SecurityManager shared configuration in AxxonSoft Axxon One before 3.1.0 on Windows and Linux allows a local attacker with read access to the configuration directory or to configuration backups to obtain the password of the LDAP directory service...
CVE-2026-121021
AxxonSoft Axxon One versions before 3.1.0 on Windows and Linux are susceptible to a plaintext storage of a password (CWE-256) vulnerability. The root cause is the insecure storage of the LDAP directory service account password within the main.conf configuration file of the SecurityManager shared ...
EUVD-2026-115714
Plaintext Storage of a Password CWE-256 in the SecurityManager shared configuration in AxxonSoft Axxon One before 3.1.0 on Windows and Linux allows a local attacker with read access to the configuration directory or to configuration backups to obtain the password of the LDAP directory service...
CVE-2026-121020 User and Role Enumeration by Low-Privileged Users in Axxon One Security Configuration API
Exposure of Sensitive Information to an Unauthorized Actor CWE-200 in the security configuration API in AxxonSoft Axxon One before 3.2.0 on Windows and Linux allows a remote authenticated user with limited privileges to enumerate all user accounts and roles configured in the system via the user...
CVE-2026-121020
The AxxonSoft Axxon One software (versions before 3.2.0 on Windows and Linux ) contains a vulnerability in the security configuration API (CWE-200 ). A remote authenticated user with limited privileges can exploit this flaw to enumerate all user accounts and roles configured in the system. This i...
EUVD-2026-115716
Exposure of Sensitive Information to an Unauthorized Actor CWE-200 in the security configuration API in AxxonSoft Axxon One before 3.2.0 on Windows and Linux allows a remote authenticated user with limited privileges to enumerate all user accounts and roles configured in the system via the user...
Axxon Next Client Login - Detect
Axxon One is a limitlessly scalable video management software !/usr/bin/env python3 -- coding: utf-8 -- """Axxon One is a limitlessly scalable video management software.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name':...
EUVD-2025-27537
Malicious code in bioql PyPI...
EUVD-2025-27540
Malicious code in bioql PyPI...
EUVD-2025-27546
Malicious code in bioql PyPI...
EUVD-2025-27542
Malicious code in bioql PyPI...
EUVD-2025-27538
Malicious code in bioql PyPI...