Lucene search
K

8175 matches found

CVE
CVE
added 2025/03/16 5:31 p.m.81 views

CVE-2025-2343

CVE-2025-2343 affects the IROAD Dash Cam X5 and X6 (up to 20250308). The vulnerability concerns an unknown functionality in the Device Pairing component and is due to hard-coded credentials, enabling access from the local network. The attack vector is listed as adjacent network with high attack c...

7.7CVSS7.5AI score0.00062EPSS
Exploits0References4
NVD
NVD
added 2025/03/16 4:15 p.m.12 views

CVE-2025-2342

A vulnerability classified as critical has been found in IROAD X5 Mobile App up to 5.2.5 on Android. Affected is an unknown function of the component API Endpoint. The manipulation leads to hard-coded credentials. It is possible to launch the attack remotely. The exploit has been disclosed to the...

6.9CVSS0.00161EPSS
Exploits0References4
Cvelist
Cvelist
added 2025/03/16 4:0 p.m.17 views

CVE-2025-2342 IROAD X5 Mobile App API Endpoint hard-coded credentials

A vulnerability classified as critical has been found in IROAD X5 Mobile App up to 5.2.5 on Android. Affected is an unknown function of the component API Endpoint. The manipulation leads to hard-coded credentials. It is possible to launch the attack remotely. The exploit has been disclosed to the...

6.9CVSS0.00161EPSS
Exploits0References4
Vulnrichment
Vulnrichment
added 2025/03/16 4:0 p.m.12 views

CVE-2025-2342 IROAD X5 Mobile App API Endpoint hard-coded credentials

A vulnerability classified as critical has been found in IROAD X5 Mobile App up to 5.2.5 on Android. Affected is an unknown function of the component API Endpoint. The manipulation leads to hard-coded credentials. It is possible to launch the attack remotely. The exploit has been disclosed to the...

6.9CVSS5.4AI score0.00161EPSS
Exploits0References4
CVE
CVE
added 2025/03/16 4:0 p.m.97 views

CVE-2025-2342

CVE-2025-2342 affects the IROAD X5 Mobile App (Android) up to version 5.2.5. The vulnerability targets an unknown function within the API Endpoint component, where manipulation results in hard-coded credentials. This enables a remote attack without user interaction. The incident is publicly discl...

6.9CVSS6.8AI score0.00161EPSS
Exploits0References4
RedhatCVE
RedhatCVE
added 2025/03/16 12:2 p.m.8 views

CVE-2024-13773

The Civi - Job Board & Freelance Marketplace WordPress Theme plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.1.4 via hard-coded credentials. This makes it possible for unauthenticated attackers to extract sensitive data including Linked...

7.5CVSS6.9AI score0.00148EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/03/16 12:0 a.m.3 views

IROAD X5 安全漏洞

IROAD X5 is a car recorder from IROAD. A security vulnerability exists in IROAD X5 version 5.2.5 and prior versions, which stems from hard-coded credentials and could lead to a remote attack...

6.9CVSS5.5AI score0.00161EPSS
Exploits0References6
CNNVD
CNNVD
added 2025/03/16 12:0 a.m.3 views

IROAD X5 安全漏洞

IROAD X5 is a car recorder from IROAD. A security vulnerability exists in IROAD X5 that stems from hard-coded credentials that require an attack to be launched on the local network...

7.7CVSS7.4AI score0.00062EPSS
Exploits0References6
RedhatCVE
RedhatCVE
added 2025/03/15 5:6 p.m.10 views

CVE-2025-2079

Optigo Networks Visual BACnet Capture Tool and Optigo Visual Networks Capture Tool version 3.1.2rc11 contain a hard coded secret key. This could allow an attacker to generate valid JWT JSON Web Token sessions...

8.7CVSS7AI score0.00196EPSS
Exploits0References1
OSV
OSV
added 2025/03/15 2:15 p.m.4 views

CVE-2025-2322

A vulnerability was found in 274056675 springboot-openai-chatgpt e84f6f5. It has been classified as critical. This affects an unknown part of the file /chatgpt-boot/src/main/java/org/springblade/modules/mjkj/controller/OpenController.java. The manipulation leads to hard-coded credentials. It is...

9.8CVSS5.4AI score0.00093EPSS
Exploits1References4
NVD
NVD
added 2025/03/15 2:15 p.m.14 views

CVE-2025-2322

A vulnerability was found in 274056675 springboot-openai-chatgpt e84f6f5. It has been classified as critical. This affects an unknown part of the file /chatgpt-boot/src/main/java/org/springblade/modules/mjkj/controller/OpenController.java. The manipulation leads to hard-coded credentials. It is...

9.8CVSS0.00093EPSS
Exploits1References4
Cvelist
Cvelist
added 2025/03/15 1:31 p.m.8 views

CVE-2025-2322 274056675 springboot-openai-chatgpt OpenController.java hard-coded credentials

A vulnerability was found in 274056675 springboot-openai-chatgpt e84f6f5. It has been classified as critical. This affects an unknown part of the file /chatgpt-boot/src/main/java/org/springblade/modules/mjkj/controller/OpenController.java. The manipulation leads to hard-coded credentials. It is...

7.5CVSS0.00093EPSS
Exploits1References4
Vulnrichment
Vulnrichment
added 2025/03/15 1:31 p.m.6 views

CVE-2025-2322 274056675 springboot-openai-chatgpt OpenController.java hard-coded credentials

A vulnerability was found in 274056675 springboot-openai-chatgpt e84f6f5. It has been classified as critical. This affects an unknown part of the file /chatgpt-boot/src/main/java/org/springblade/modules/mjkj/controller/OpenController.java. The manipulation leads to hard-coded credentials. It is...

7.5CVSS6.5AI score0.00093EPSS
Exploits1References4
CVE
CVE
added 2025/03/15 1:31 p.m.56 views

CVE-2025-2322

CVE-2025-2322 affects the project identified as 274056675, specifically the file /chatgpt-boot/src/main/java/org/springblade/modules/mjkj/controller/OpenController.java. The root cause is hard-coded credentials leading to a remote attack vector. The vulnerability is classified as critical (per th...

9.8CVSS6.6AI score0.00093EPSS
Exploits1References4Affected Software1
CNNVD
CNNVD
added 2025/03/15 12:0 a.m.2 views

springboot-openai-chatgpt 安全漏洞

springboot-openai-chatgpt is a SpringCloud microservices based architecture by 274056675 individual developers. A security vulnerability exists in springboot-openai-chatgpt, which stems from hard-coded credentials and could lead to remote attacks...

9.8CVSS7.5AI score0.00093EPSS
Exploits1References6
Malwarebytes
Malwarebytes
added 2025/03/14 3:29 p.m.14 views

Research on iOS apps shows widespread exposure of secrets

Researchers found that most of the apps available on Apple’s App Store leak at least one hard-coded secret. The researchers looked at 156,000 iOS apps and discovered more than 815,000 hardcoded secrets, including very sensitive secrets like keys to cloud storage, various Application Programming...

7.3AI score
Exploits0
NVD
NVD
added 2025/03/14 12:15 p.m.5 views

CVE-2024-13773

The Civi - Job Board & Freelance Marketplace WordPress Theme plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.1.4 via hard-coded credentials. This makes it possible for unauthenticated attackers to extract sensitive data including Linked...

7.5CVSS0.00148EPSS
Exploits0References2
OSV
OSV
added 2025/03/14 12:15 p.m.1 views

CVE-2024-13773

The Civi - Job Board & Freelance Marketplace WordPress Theme plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.1.4 via hard-coded credentials. This makes it possible for unauthenticated attackers to extract sensitive data including Linked...

7.5CVSS5.8AI score
Exploits0References2
Vulnrichment
Vulnrichment
added 2025/03/14 11:15 a.m.5 views

CVE-2024-13773 Civi - Job Board & Freelance Marketplace WordPress Theme <= 2.1.4 - Sensitive Information Exposure

The Civi - Job Board & Freelance Marketplace WordPress Theme plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.1.4 via hard-coded credentials. This makes it possible for unauthenticated attackers to extract sensitive data including Linked...

7.3CVSS7.1AI score0.00148EPSS
Exploits0References2
CVE
CVE
added 2025/03/14 11:15 a.m.52 views

CVE-2024-13773

CVE-2024-13773 affects the Civi - Job Board & Freelance Marketplace WordPress Theme (

7.5CVSS7.1AI score0.00148EPSS
Exploits0References2Affected Software1
Rows per page
Query Builder