Lucene search
+L

8370 matches found

CNVD
CNVD
added 2025/08/20 12:0 a.m.8 views

Tenda AC20 Hardcoded Credentials Vulnerability

Tenda AC20 is a home router from Tenda. The Tenda AC20 suffers from a hard-coded credentials vulnerability that originates from the presence of hard-coded credentials in the file /etcro/shadow. An attacker can exploit the vulnerability to cause confidentiality to be compromised...

7.8CVSS7AI score0.0022EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2025/08/19 3:27 a.m.22 views

CVE-2025-9091

A security flaw has been discovered in Tenda AC20 16.03.08.12. Affected by this vulnerability is an unknown functionality of the file /etcro/shadow. The manipulation leads to hard-coded credentials. It is possible to launch the attack on the local host. The complexity of an attack is rather high...

7.8CVSS3.5AI score0.0022EPSS
SaveExploits1References1
CNVD
CNVD
added 2025/08/19 12:0 a.m.5 views

IBM Concert Software Trust Management Issues Vulnerabilities

IBM Concert Software is IBM's generative AI-driven automated application management and monitoring tool based on the WatsonX platform, focused on optimizing the operational efficiency and reliability of applications. IBM Concert Software has a trust management issue vulnerability that stems from...

7.5CVSS7.3AI score0.00178EPSS
SaveExploits0References1
NVD
NVD
added 2025/08/18 2:15 p.m.9 views

CVE-2025-33100

IBM Concert Software 1.0.0 through 1.1.0 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound communication to external components, or encryption of internal data...

7.5CVSS0.00178EPSS
SaveExploits0References1
OSV
OSV
added 2025/08/18 2:15 p.m.4 views

CVE-2025-33100

IBM Concert Software 1.0.0 through 1.1.0 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound communication to external components, or encryption of internal data...

7.5CVSS6.9AI score
SaveExploits0References1
CVE
CVE
added 2025/08/18 2:2 p.m.26 views

CVE-2025-33100

CVE-2025-33100 concerns IBM Concert Software versions 1.0.0–1.1.0 that allegedly contain hard-coded credentials used for inbound authentication, outbound communication, or data encryption. The core issue is a trust/credential hard-coding flaw, which could enable unauthorized access or leakage of ...

7.5CVSS7AI score0.00178EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2025/08/18 2:2 p.m.15 views

CVE-2025-33100 IBM Concert Software information disclosure

IBM Concert Software 1.0.0 through 1.1.0 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound communication to external components, or encryption of internal data...

6.2CVSS0.00178EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/08/18 2:2 p.m.6 views

CVE-2025-33100 IBM Concert Software information disclosure

IBM Concert Software 1.0.0 through 1.1.0 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound communication to external components, or encryption of internal data...

6.2CVSS7.6AI score0.00178EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/08/18 12:0 a.m.10 views

PT-2025-33656 · Ibm · Ibm Concert

Name of the Vulnerable Software and Affected Versions: IBM Concert Software versions 1.0.0 through 1.1.0 Description: The software contains hard-coded credentials, such as a password or cryptographic key, used for inbound authentication, outbound communication to external components, or encryptio...

7.5CVSS7.4AI score0.00178EPSS
SaveExploits0References7
CNNVD
CNNVD
added 2025/08/18 12:0 a.m.7 views

IBM Concert Software 信任管理问题漏洞

IBM Concert Software is IBM's generative AI-driven automated application management and monitoring tool based on the WatsonX platform, focused on optimizing the operational efficiency and reliability of applications. IBM Concert Software has a trust management issue vulnerability that stems from...

7.5CVSS6.6AI score0.00178EPSS
SaveExploits0References2
OSV
OSV
added 2025/08/17 3:15 a.m.12 views

CVE-2025-9091

A security flaw has been discovered in Tenda AC20 16.03.08.12. Affected by this vulnerability is an unknown functionality of the file /etcro/shadow. The manipulation leads to hard-coded credentials. It is possible to launch the attack on the local host. The complexity of an attack is rather high...

7.8CVSS4.7AI score0.0022EPSS
SaveExploits1References7
Cvelist
Cvelist
added 2025/08/17 2:32 a.m.21 views

CVE-2025-9091 Tenda AC20 shadow hard-coded credentials

A security flaw has been discovered in Tenda AC20 16.03.08.12. Affected by this vulnerability is an unknown functionality of the file /etcro/shadow. The manipulation leads to hard-coded credentials. It is possible to launch the attack on the local host. The complexity of an attack is rather high...

2.5CVSS0.0022EPSS
SaveExploits1References6
CVE
CVE
added 2025/08/17 2:32 a.m.34 views

CVE-2025-9091

Summary: CVE-2025-9091 affects Tenda AC20, specifically the file /etc_ro/shadow. The root cause is hard-coded credentials in that file, enabling a local attack with high impact on confidentiality, integrity, and availability. Exploitation requires local access and is described as difficult, with ...

7.8CVSS3.7AI score0.0022EPSS
SaveExploits1References7Affected Software1
Vulnrichment
Vulnrichment
added 2025/08/17 2:32 a.m.7 views

CVE-2025-9091 Tenda AC20 shadow hard-coded credentials

A security flaw has been discovered in Tenda AC20 16.03.08.12. Affected by this vulnerability is an unknown functionality of the file /etcro/shadow. The manipulation leads to hard-coded credentials. It is possible to launch the attack on the local host. The complexity of an attack is rather high...

2.5CVSS6.9AI score0.0022EPSS
SaveExploits1References6
VulnCheck KEV
VulnCheck KEV
added 2025/08/17 12:0 a.m.4 views

VulnCheck KEV: CVE-2023-38433

Fujitsu Real-time Video Transmission Gear "IP series" use hard-coded credentials, which may allow a remote unauthenticated attacker to initialize or reboot the products, and as a result, terminate the video transmission. Affected products and versions are as follows: IP-HE950E firmware versions...

7.5CVSS5.8AI score0.03722EPSS
SaveIn wildExploits0References98
CNNVD
CNNVD
added 2025/08/17 12:0 a.m.17 views

Tenda AC20 安全漏洞

Tenda AC20 is a home router from Tenda. The Tenda AC20 suffers from a hard-coded credentials vulnerability that originates from the presence of hard-coded credentials in the file /etcro/shadow. An attacker can exploit the vulnerability to cause confidentiality to be compromised...

7.8CVSS6.9AI score0.0022EPSS
SaveExploits1References8
RedhatCVE
RedhatCVE
added 2025/08/16 6:19 p.m.10 views

CVE-2025-8974

A vulnerability was determined in linlinjava litemall up to 1.8.0. Affected by this issue is some unknown functionality of the file litemall-wx-api/src/main/java/org/linlinjava/litemall/wx/util/JwtHelper.java of the component JSON Web Token Handler. The manipulation of the argument SECRET with th...

9.8CVSS7.1AI score0.0053EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
added 2025/08/16 12:0 a.m.9 views

PT-2025-33608 · Tenda · Tenda Ac20

Name of the Vulnerable Software and Affected Versions: Tenda AC20 version 16.03.08.12 Description: A security flaw has been discovered in Tenda AC20. The vulnerability affects an unknown functionality of the file /etc ro/shadow. Manipulation of this file leads to the disclosure of hard-coded...

7.8CVSS3.3AI score0.0022EPSS
SaveExploits1References13
RedhatCVE
RedhatCVE
added 2025/08/15 12:30 p.m.13 views

CVE-2025-55279

This vulnerability exists in ZKTeco WL20 due to hard-coded private key stored in plaintext within the device firmware. An attacker with physical access could exploit this vulnerability by extracting the firmware and analyzing the binary data to retrieve private key stored in the firmware of the...

6.9CVSS6.6AI score0.00174EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/08/15 12:30 a.m.16 views

CVE-2025-43982

Shenzhen Tuoshi NR500-EA RG500UEAABxCOMSLICv3.4.2731.16.43 devices enable the SSH service by default. There is a hidden hard-coded root account that cannot be disabled in the GUI...

9.8CVSS7.3AI score0.00362EPSS
SaveExploits0References1
Rows per page
Query Builder