8 matches found
CVE-2026-48210
An improper default configuration in OTRS 2026.3.1 causes ticket article forwarding actions to enforce the “Is visible for customer” flag by default and prevent users from disabling it via the UI. This leads to unintended exposure of internal ticket information to the External Frontend This issue...
MAL-2026-4419 Malicious code in @pmate/utils (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d918da5fdc17486ed55296e53c1de2f1d976895f77e33dc7f73991e36f393502 The exported detectTextimageBase64 function in src/detectText.ts sends caller-supplied image content to...
CVE-2025-68716
KAYSUS KS-WR3600 routers running firmware version 1.0.5.9.1 are vulnerable to unauthorized access due to the SSH service being enabled by default on the LAN interface. The root account is configured with no password, and the management interface (CLI and web GUI) lacks the ability to disable SSH ...
CVE-2025-68718
The KAYSUS KS-WR1200 wireless router is vulnerable in firmware version 107 because it exposes SSH and TELNET services on the LAN interface using hardcoded root credentials (root:12345678 ). Attackers adjacent to the LAN can trivially log in with root privileges. The administrator is unable to dis...
EUVD-2025-24631
Malicious code in bioql PyPI...
CVE-2025-35451
PTZOptics and possibly other ValueHD-based pan-tilt-zoom cameras use hard-coded, default administrative credentials. The passwords can readily be cracked. Many cameras have SSH or telnet listening on all interfaces. The passwords cannot be changed by the user, nor can the SSH or telnet service be...
