Lucene search
+L

11622 matches found

Vulnrichment
Vulnrichment
•added 2025/03/04 12:00 a.m.•10 views

CVE-2025-26849

There is a Hard-coded Cryptographic Key in Docusnap 13.0.1440.24261, and earlier and later versions. This key can be used to decrypt inventory files that contain sensitive information such as firewall rules...

4.3CVSS4.5AI score0.00249EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2025/03/04 12:00 a.m.•9 views

PT-2025-9648

Name of the Vulnerable Software and Affected Versions Docusnap versions prior to 14 Docusnap version 13.0.1440.24261 and earlier Description The issue is caused by a hard-coded cryptographic key in Docusnap, which can be used to decrypt inventory files containing sensitive information such as...

4.3CVSS0.00249EPSS
SaveExploits1References11
Tenable Nessus
Tenable Nessus
•added 2025/03/04 12:00 a.m.•8 views

Linux Distros Unpatched Vulnerability : CVE-2016-7101

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The SGI coder in ImageMagick before 7.0.2-10 allows remote attackers to cause a denial of service out-of- bounds read via a large row value in an sgi file...

6.5CVSS6.9AI score0.02714EPSS
SaveExploits0References2
osv_cve
osv_cve
•added 2025/03/03 8:15 p.m.•21 views

CVE-2025-1879

A vulnerability was found in i-Drive i11 and i12 up to 20250227 and classified as problematic. This issue affects some unknown processing of the component APK. The manipulation leads to hard-coded credentials. It is possible to launch the attack on the physical device. It was not possible to...

6.8CVSS4.7AI score0.00238EPSS
SaveExploits0References4
NVD
NVD
•added 2025/03/03 8:15 p.m.•44 views

CVE-2025-1879

A vulnerability was found in i-Drive i11 and i12 up to 20250227 and classified as problematic. This issue affects some unknown processing of the component APK. The manipulation leads to hard-coded credentials. It is possible to launch the attack on the physical device. It was not possible to...

6.8CVSS0.00238EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2025/03/03 7:31 p.m.•51 views

CVE-2025-1879 i-Drive i11/i12 APK hard-coded credentials

A vulnerability was found in i-Drive i11 and i12 up to 20250227 and classified as problematic. This issue affects some unknown processing of the component APK. The manipulation leads to hard-coded credentials. It is possible to launch the attack on the physical device. It was not possible to...

2.4CVSS0.00238EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
•added 2025/03/03 7:31 p.m.•14 views

CVE-2025-1879 i-Drive i11/i12 APK hard-coded credentials

A vulnerability was found in i-Drive i11 and i12 up to 20250227 and classified as problematic. This issue affects some unknown processing of the component APK. The manipulation leads to hard-coded credentials. It is possible to launch the attack on the physical device. It was not possible to...

2.4CVSS3.6AI score0.00238EPSS
SaveExploits0References4
CVE
CVE
•added 2025/03/03 7:31 p.m.•89 views

CVE-2025-1879

CVE-2025-1879 affects i-Drive i11/i12 APK (up to 20250227). Description: hard-coded credentials allow a direct attack on the physical device; maintainer unknown and product appears end-of-life. No explicit exploit/vector details or mitigation are provided in the supplied documents; connected sour...

6.8CVSS6.7AI score0.00238EPSS
SaveExploits0References4Affected Software1
Positive Technologies
Positive Technologies
•added 2025/03/03 12:00 a.m.•5 views

PT-2025-9793

Name of the Vulnerable Software and Affected Versions Weidmueller PROCON-WIN versions prior to 5.7.14.1 Description The issue is related to the use of hard-coded credentials in the PROCON-WIN SCADA system, allowing an unauthenticated remote attacker to gain full administration privileges on the...

10CVSS0.00562EPSS
SaveExploits0References12
Positive Technologies
Positive Technologies
•added 2025/03/03 12:00 a.m.•8 views

PT-2025-9551

Name of the Vulnerable Software and Affected Versions i-Drive i11 and i12 up to 20250227 Description A vulnerability was found that affects some unknown processing of the component APK, leading to hard-coded credentials. The manipulation can be launched on the physical device. Recommendations For...

6.8CVSS0.00238EPSS
SaveExploits0References9
CNNVD
CNNVD
•added 2025/03/03 12:00 a.m.•20 views

i-Drive i11 and i-Drive i12 security vulnerabilities

The i-Drive i11 and i-Drive i12 are both a car recorder from i-Drive, Inc. A security vulnerability exists in i-Drive i11 and i-Drive i12 20250227 and prior versions, which stems from hard-coded credentials and could lead to a physical device attack...

6.8CVSS4AI score0.00238EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/03/03 12:00 a.m.•7 views

CVE-2025-1879: Use of Hard-coded Credentials

A vulnerability was found in i-Drive i11 and i12 up to 20250227 and classified as problematic. This issue affects some unknown processing of the component APK. The manipulation leads to hard-coded credentials. It is possible to launch the attack on the physical device. It was not possible to...

6.8CVSS4.9AI score0.00238EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/03/01 2:32 p.m.•18 views

CVE-2024-9334

Use of Hard-coded Credentials, Storage of Sensitive Data in a Mechanism without Access Control vulnerability in E-Kent Pallium Vehicle Tracking allows Authentication Bypass. This issue affects Pallium Vehicle Tracking: before 17.10.2024...

8.2CVSS5.8AI score0.00365EPSS
SaveExploits0References1
The Hacker News
The Hacker News
•added 2025/02/28 10:24 a.m.•29 views

12,000+ API Keys and Passwords Found in Public Datasets Used for LLM Training

A dataset used to train large language models LLMs has been found to contain nearly 12,000 live secrets, which allow for successful authentication. The findings once again highlight how hard-coded credentials pose a severe security risk to users and organizations alike, not to mention compounding...

7.1AI score
SaveExploits0
CNNVD
CNNVD
•added 2025/02/28 12:00 a.m.•25 views

TRENDnet TEW-929DRU security vulnerabilities

The TRENDnet TEW-929DRU is a wireless router from TRENDnet. The TRENDnet TEW-929DRU suffers from a hard-coded password vulnerability that can be exploited by an attacker to log in as root...

8CVSS6.9AI score0.0036EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2025/02/28 12:00 a.m.•20 views

Bosscomm IF740 information leakage vulnerability

Bosscomm IF740 is an OBD2 scanner for automotive diagnostics from Bosscomm. It can read the codes of the car engine, SRS, ABS, TCM, and so on. A security vulnerability exists in the Bosscomm IF740 that stems from a hard-coded plaintext credential disclosure...

7.5CVSS6.4AI score0.0038EPSS
SaveExploits0References2
NVD
NVD
•added 2025/02/27 2:15 p.m.•25 views

CVE-2024-9334

Use of Hard-coded Credentials, Storage of Sensitive Data in a Mechanism without Access Control vulnerability in E-Kent Pallium Vehicle Tracking allows Authentication Bypass. This issue affects Pallium Vehicle Tracking: before 17.10.2024...

8.2CVSS0.00365EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2025/02/27 2:15 p.m.•15 views

CVE-2024-9334

Use of Hard-coded Credentials, Storage of Sensitive Data in a Mechanism without Access Control vulnerability in E-Kent Pallium Vehicle Tracking allows Authentication Bypass. This issue affects Pallium Vehicle Tracking: before 17.10.2024...

8.2CVSS5.8AI score0.00365EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2025/02/27 1:54 p.m.•15 views

CVE-2024-9334 Information Disclosure in E-Kent's Pallium Vehicle Tracking

Use of Hard-coded Credentials, Storage of Sensitive Data in a Mechanism without Access Control vulnerability in E-Kent Pallium Vehicle Tracking allows Authentication Bypass. This issue affects Pallium Vehicle Tracking: before 17.10.2024...

8.2CVSS5.8AI score0.00365EPSS
SaveExploits0References2
CVE
CVE
•added 2025/02/27 1:54 p.m.•49 views

CVE-2024-9334

CVE-2024-9334 concerns the E‑Kent Pallium Vehicle Tracking system, where the root cause is the use of hard‑coded credentials and storage of sensitive data in a mechanism without proper access control. This combination enables an authentication bypass , potentially allowing unauthorized access to ...

8.2CVSS5.8AI score0.00365EPSS
SaveExploits0References2
Rows per page
Query Builder