2960 matches found
Nortek Linear eMerge E3-Series Credential Disclosure Vulnerability
Nortek Linear eMerge E3-Series versions 0.32-07p, 0.32-07e, 0.32-07p, 0.32-08f, and 0.32-09c suffer from an administrative credential disclosure vulnerability. Exploit Title: Nortek Linear eMerge E3-Series - Information Disclosure lead to access admin dashboard Exploit Author: Omar Hashim Version...
Nortek Linear eMerge E3-Series Credential Disclosure
Exploit Title: Nortek Linear eMerge E3-Series - Information Disclosure lead to access admin dashboard Exploit Author: Omar Hashim Version: 0.32-07p,0.32-07e,0.32-07p,0.32-08f,0.32-09c Vendor home page : https://www.nortekcontrol.com/access-control/ Vendor home page : https://linear-solutions.com/...
Omise: Secret API Key is logged in cleartext
Summary: While code-reviewing the repository , I have found that you log in clear-text some sensitive data. Steps To Reproduce: 1. Check here omise/request.pyL88 and here omise/request.pyL111 1. The code source explicitly logs in debugging mode the secret API key. logger.debug'Authorization: %s',...
The vulnerability of the `clear_bss` function in Linux operating system kernels, related to errors during the clearing of the initial symbol of a block (.bss), allows an attacker to execute arbitrary code.
The vulnerability of the clearbss function in Linux operating systems is related to errors during the clearing of the initial symbol of a block .bss. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
The vulnerability of the `clear_tools_log()` function implementation in the Microprogramming-based VPN routers of Robustel R1510 allows a hacker to execute arbitrary commands.
The vulnerability of the cleartoolslog function in the Microprogrammed VPN router software of Robustel R1510 lies in the lack of measures taken to neutralize special elements used in the operating system commands. Exploiting this vulnerability allows a remote attacker to execute arbitrary command...
DEBIAN-CVE-2022-36123
The Linux kernel before 5.18.13 lacks a certain clear operation for the block starting symbol .bss. This allows Xen PV guest OS users to cause a denial of service or gain privileges...
UBUNTU-CVE-2022-36123
The Linux kernel before 5.18.13 lacks a certain clear operation for the block starting symbol .bss. This allows Xen PV guest OS users to cause a denial of service or gain privileges...
CVE-2022-36123
The Linux kernel before 5.18.13 lacks a certain clear operation for the block starting symbol .bss. This allows Xen PV guest OS users to cause a denial of service or gain privileges...
CVE-2022-27544
BigFix Web Reports authorized users may see SMTP credentials in clear text...
CVE-2022-27544 HCL BigFix Web Reports authorized users may see sensitive information in clear text
BigFix Web Reports authorized users may see SMTP credentials in clear text...
CVE-2022-27544
CVE-2022-27544 affects HCL BigFix Platform (Web Reports): an information disclosure where authorized users can retrieve SMTP credentials in clear text. Root cause is the transfer of SMTP credentials in clear text within Web Reports. Affected product: HCL BigFix Platform/Web Reports. Impact: expos...
CVE-2022-30626
Browsing the path: http://ip/wifiappataget.cmd, will show in the name of the existing access point on the component, and a password in clear text...
CVE-2022-30626
Browsing the path: http://ip/wifiappataget.cmd, will show in the name of the existing access point on the component, and a password in clear text...
Default credentials
Browsing the path: http://ip/wifiappataget.cmd, will show in the name of the existing access point on the component, and a password in clear text...
CVE-2022-30626
CVE-2022-30626 affects Chcnav P5E GNSS API. The vulnerability arises when browsing the path http://ip/wifi_ap_pata_get.cmd, which causes the name of the existing access point and a password to be shown in clear text. Documented in NVD/NVD-derived entries, this results in password exposure but no ...
CVE-2022-30626 Chcnav - P5E GNSS API not secure
Browsing the path: http://ip/wifiappataget.cmd, will show in the name of the existing access point on the component, and a password in clear text...
CVE-2022-27544
BigFix Web Reports authorized users may see SMTP credentials in clear text...
Chcnav P5E GNSS 安全漏洞
Chcnav P5E GNSS is a global positioning system from Chcnav. A security vulnerability exists in Chcnav P5E GNSS that stems from an insecure P5E GNSS API that displays passwords in clear text...
Security Bulletin: IBM Urbancode Deploy (UCD) vulnerable to information disclosure which can be read by a local user. (CVE-2022-22366)
Summary Diagnostic records may contain values used to perform remote creation of ssh agents. Vulnerability Details CVEID:CVE-2022-22366 DESCRIPTION: IBM UrbanCode Deploy UCD stores user credentials in plain clear text which can be read by a local user. CVSS Base score: 4.9 CVSS Temporal Score: Se...