Akuvox E11 Trust Management Vulnerability

Akuvox E11 is a SIP visual doorbell from Akuvox designed for villas, houses and apartments. The Akuvox E11 suffers from a trust management issue vulnerability that stems from the SSH server being enabled by default, accessible to the root user, and using hard-coded passwords...

Akuvox E11 security vulnerabilities

Akuvox E11 is a SIP visual doorbell from Akuvox designed for villas, houses and apartments. A security vulnerability exists in Akuvox E11 that stems from the fact that Akuvox E11 uses hard-coded encryption keys, which could allow an attacker to decrypt sensitive information...

Winnings might be unable to catch up with prize pot

Lines of code Vulnerability details Impact Profit may become ineffective, meaning that funds are effectively stuck in the contract. Proof of Concept Funds are owned by the Lottery and the only way out is through payouts. However, since the jackpot is bound by jackpotBound the expected payout taki...

GHSA-347F-RXG8-QGRV Easy!Appointments uses hard-coded credentials

Use of Hard-coded Credentials in GitHub repository alextselegidis/easyappointments 1.4.3 and prior. A patch is available and anticipated to be part of version 1.5.0...

Easy!Appointments uses hard-coded credentials

Use of Hard-coded Credentials in GitHub repository alextselegidis/easyappointments 1.4.3 and prior. A patch is available and anticipated to be part of version 1.5.0...

CVE-2023-1269

Use of Hard-coded Credentials in GitHub repository alextselegidis/easyappointments prior to 1.5.0...

Hardcoded credentials

Use of Hard-coded Credentials in GitHub repository alextselegidis/easyappointments prior to 1.5.0...

Multiple vulnerabilities in Buffalo network devices

Overview Multiple network devices provided by BUFFALO INC. contain multiple vulnerabilities listed below. Use of hard-coded credentials CWE-798 - CVE-2023-26588 Improper access control CWE-284 - CVE-2023-24544 Stored cross-site scripting CWE-79 - CVE-2023-24464 Impact An attacker may access the...

CVE-2023-1269 Use of Hard-coded Credentials in alextselegidis/easyappointments

Use of Hard-coded Credentials in GitHub repository alextselegidis/easyappointments prior to 1.5.0...

CVE-2023-1269 Use of Hard-coded Credentials in alextselegidis/easyappointments

Use of Hard-coded Credentials in GitHub repository alextselegidis/easyappointments prior to 1.5.0...

CVE-2023-1269: Use of Hard-coded Credentials

Use of Hard-coded Credentials in GitHub repository alextselegidis/easyappointments prior to 1.5.0...

CVE-2023-1269 Use of Hard-coded Credentials in alextselegidis/easyappointments

Use of Hard-coded Credentials in GitHub repository alextselegidis/easyappointments prior to 1.5.0...

Use of Hard-coded Credentials

Use of Hard-coded Credentials in GitHub repository alextselegidis/easyappointments prior to 1.5.0...

PT-2023-16850 · Unknown · Easyappointments

Name of the Vulnerable Software and Affected Versions: easyappointments versions prior to 1.5.0 Description: The issue concerns the use of hard-coded credentials in the GitHub repository alextselegidis/easyappointments. Recommendations: For versions prior to 1.5.0, update to version 1.5.0 or late...

Easy! Appointment Trust Management Vulnerability

Easy!Appointments is a web-based appointment and schedule management system. A vulnerability with trust management issues exists in versions prior to Easy!Appointments 1.5.0, which stems from the software's use of hard-coded credentials...

CVE-2023-1269

Use of Hard-coded Credentials in GitHub repository alextselegidis/easyappointments prior to 1.5.0...

Buffalo network device security vulnerabilities

Buffalo network devices are a family of network devices from Buffalo, Japan. A security vulnerability exists in Buffalo network devices that stems from the use of hard-coded credentials, which could be exploited by an attacker to gain access to the debugging capabilities of the product...

CVE-2023-22344

Use of hard-coded credentials vulnerability in SS1 Ver.13.0.0.40 and earlier and Rakuraku PC Cloud Agent Ver.2.1.8 and earlier allows a remote attacker to obtain the password of the debug tool and execute it. As a result of exploiting this vulnerability with CVE-2023-22335 and CVE-2023-22336...

CVE-2023-22344

Use of hard-coded credentials vulnerability in SS1 Ver.13.0.0.40 and earlier and Rakuraku PC Cloud Agent Ver.2.1.8 and earlier allows a remote attacker to obtain the password of the debug tool and execute it. As a result of exploiting this vulnerability with CVE-2023-22335 and CVE-2023-22336...

Rakuraku PC Cloud Agent Trust Management Vulnerability

Rakuraku PC Cloud Agent is a cloud environment client. A security vulnerability exists in SS1 Ver.13.0.0.40 and earlier versions, Rakuraku PC Cloud Agent Ver.2.1.8 and earlier versions, which stems from the use of hard-coded credentials. An attacker could exploit the vulnerability to obtain...