Lucene search
K

8143 matches found

Positive Technologies
Positive Technologies
added 2025/07/21 12:0 a.m.4 views

PT-2025-30280 · Commscope · Ruckus Zonedirector +1

Name of the Vulnerable Software and Affected Versions: CommScope Ruckus Unleashed versions prior to 200.15.6.212.14 and 200.17.7.0.139 CommScope Ruckus ZoneDirector versions prior to 10.5.1.0.279 Description: An issue was discovered where hard-coded credentials for the ftpuser account provide FTP...

5.3CVSS6.6AI score0.00268EPSS
Exploits1References10
Positive Technologies
Positive Technologies
added 2025/07/21 12:0 a.m.1 views

PT-2025-30276 · Pavo Pay · Pavo Pay

Name of the Vulnerable Software and Affected Versions: PAVO Pay versions prior to 13.05.2025 Description: A use of hard-coded credentials issue exists in PAVO Pay, allowing the reading of sensitive constants within an executable. Recommendations: Update PAVO Pay to version 13.05.2025 or later...

7.5CVSS6.3AI score0.00272EPSS
Exploits0References4
CNNVD
CNNVD
added 2025/07/21 12:0 a.m.1 views

hMailServer 安全漏洞

hMailServer is an open source mail server from hMailServer Open Source. A security vulnerability exists in hMailServer version 5.8.6 and 5.6.9-beta, which stems from the use of hard-coded keys in BlowFish.cpp, which could lead to the decryption of database connection passwords...

4.6CVSS6.7AI score0.00133EPSS
Exploits1References5
CNNVD
CNNVD
added 2025/07/21 12:0 a.m.2 views

CommScope Ruckus Unleashed 安全漏洞

The CommScope Ruckus Unleashed is a wireless router from CommScope USA. A security vulnerability exists in CommScope Ruckus Unleashed versions prior to 200.15.6.212.14, 200.17.7.0.139, and Ruckus ZoneDirector versions prior to 10.5.1.0.279, which stems from hard-coded credentials and could lead t...

5.3CVSS6.6AI score0.00268EPSS
Exploits1References4
VulnCheck KEV
VulnCheck KEV
added 2025/07/21 12:0 a.m.9 views

VulnCheck KEV: CVE-2019-3495

An issue was discovered on Wifi-soft UniBox controller 0.x through 2.x devices. network/mesh/edit-nds.php is vulnerable to arbitrary file upload, allowing an attacker to upload .php files and execute code on the server with root user privileges. Authentication for accessing this component can be...

9CVSS6AI score0.011EPSS
In wildExploits1References2
Vulnrichment
Vulnrichment
added 2025/07/21 12:0 a.m.6 views

CVE-2025-46118

An issue was discovered in CommScope Ruckus Unleashed prior to 200.15.6.212.14 and 200.17.7.0.139 and in Ruckus ZoneDirector prior to 10.5.1.0.279, where hard-coded credentials for the ftpuser account provide FTP access to the controller, enabling a remote attacker to upload or retrieve arbitrary...

7.1AI score0.00268EPSS
Exploits1References2
RedhatCVE
RedhatCVE
added 2025/07/18 8:5 p.m.4 views

CVE-2025-6982

Use of Hard-coded Credentials in TP-Link Archer C50 V3 = 180703/V4 = 250117 /V5 = 200407 , and C20 V5...

6.9CVSS6AI score0.00102EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/07/18 11:54 a.m.6 views

CVE-2025-53754

This vulnerability exists in Digisol DG-GR6821AC Router due to hard-coded Root Access Credentials in system configuration of the device firmware. An attacker with physical access could exploit this vulnerability by extracting the firmware and analyzing the binary data to obtain the stored root...

5.1CVSS6.2AI score0.00123EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/07/18 4:52 a.m.3 views

CVE-2025-53842

Use of hard-coded credentials issue exists in ZWX-2000CSW2-HN prior to 0.3.19 and ZWX-2000CS2-HN firmware all versions. If this vulnerability is exploited, an attacker may tamper with the settings of the device by obtaining the credentials. This vulnerability is caused by an insufficient fix for...

8.8CVSS4.6AI score0.00228EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/07/17 7:58 a.m.5 views

CVE-2025-3621

Vulnerabilities in ActADUR local server product, developed and maintained by ProTNS, allows Remote Code Inclusion on host systems. vulnerabilities: Improper Neutralization of Special Elements used in a Command 'Command Injection' Use of Hard-coded Credentials Improper Authentication Binding to an...

9.6CVSS7AI score0.00295EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2025/07/17 12:0 a.m.5 views

Hewlett Packard Enterprise AutoPass License Server Hard-coded Credentials Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Hewlett Packard Enterprise AutoPass License Server. Authentication is not required to exploit this vulnerability. The specific flaw exists within the hsqldb service, which listens on TCP po...

7.5CVSS7.6AI score0.00952EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2025/07/17 12:0 a.m.5 views

Hewlett Packard Enterprise AutoPass License Server Hard-coded Credentials Authentication Bypass Vulnerability

This vulnerability allows remote attackers to disclose sensitive information or edit configuration on affected installations of Hewlett Packard Enterprise AutoPass License Server. Authentication is not required to exploit this vulnerability. The specific flaw exists within the web service, which...

7.3CVSS6.6AI score0.00253EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2025/07/17 12:0 a.m.4 views

PT-2025-31427 · Dell · Dell Smartfabric Os10

Name of the Vulnerable Software and Affected Versions: Dell SmartFabric OS10 Software versions prior to 10.6.0.5 Description: Dell SmartFabric OS10 Software is susceptible to a Use of Hard-coded Password issue. A local attacker with low privileges could potentially exploit this, leading to...

7.8CVSS6.3AI score0.00041EPSS
Exploits0References5
NVD
NVD
added 2025/07/16 8:15 p.m.5 views

CVE-2025-6982

Use of Hard-coded Credentials in TP-Link Archer C50 V3 = 180703/V4 = 250117 /V5 = 200407 , and C20 V5 USV5260419 or EUV5260317 allows attackers to decrypt the config.xml files...

6.9CVSS0.00102EPSS
Exploits0References4
ATTACKERKB
ATTACKERKB
added 2025/07/16 8:1 p.m.2 views

CVE-2025-6982

Use of Hard-coded Credentials in TP-Link Archer C50 V3 = 180703/V4 = 250117 /V5 = 200407 , and C20 V5...

6.9CVSS5.8AI score0.00102EPSS
Exploits0References4
CVE
CVE
added 2025/07/16 8:1 p.m.19 views

CVE-2025-6982

CVE-2025-6982 affects TP-Link Archer C50 V3/V4/V5 firmware with hard-coded DES decryption keys, allowing offline decryption of config.xml and potential exposure of admin credentials and settings. Affected versions are V3 (<=180703), V4 (<=250117), and V5 (

6.9CVSS6AI score0.00102EPSS
Exploits0References4
NVD
NVD
added 2025/07/16 12:15 p.m.2 views

CVE-2025-53754

This vulnerability exists in Digisol DG-GR6821AC Router due to hard-coded Root Access Credentials in system configuration of the device firmware. An attacker with physical access could exploit this vulnerability by extracting the firmware and analyzing the binary data to obtain the stored root...

5.1CVSS0.00123EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/07/16 11:13 a.m.2 views

CVE-2025-53754 Hard-coded Credentials Vulnerability in Digisol DG-GR6821AC Router

This vulnerability exists in Digisol DG-GR6821AC Router due to hard-coded Root Access Credentials in system configuration of the device firmware. An attacker with physical access could exploit this vulnerability by extracting the firmware and analyzing the binary data to obtain the stored root...

5.1CVSS6.9AI score0.00123EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/07/16 11:13 a.m.5 views

CVE-2025-53754 Hard-coded Credentials Vulnerability in Digisol DG-GR6821AC Router

This vulnerability exists in Digisol DG-GR6821AC Router due to hard-coded Root Access Credentials in system configuration of the device firmware. An attacker with physical access could exploit this vulnerability by extracting the firmware and analyzing the binary data to obtain the stored root...

5.1CVSS0.00123EPSS
Exploits0References1
CVE
CVE
added 2025/07/16 11:13 a.m.16 views

CVE-2025-53754

CVE-2025-53754 affects the Digisol DG-GR6821AC Router. The vulnerability arises from hard-coded root access credentials embedded in the device firmware’s system configuration. An attacker with physical access could extract the firmware, analyze the binary data, and obtain the stored root credenti...

5.1CVSS6.2AI score0.00123EPSS
Exploits0References1
Rows per page
Query Builder