CVE-2026-80276

Comelit Multi-User Gateway for VIP System model 1456B firmware versions 2.9.1 and 2.10.0 expose a network-accessible management interface that does not require authentication. Through this interface, sensitive device configuration data - including the Remote Configuration Password - can be read i...

CVE-2026-80276

The Comelit Multi-User Gateway for VIP System (model 1456B) is vulnerable in firmware versions 2.9.1 and 2.10.0 . These versions expose a network-accessible management interface that lacks authentication requirements. A remote, unauthenticated attacker can exploit this to read sensitive device co...

CVE-2026-80276 Comelit 1456B gateway exposes remote configuration password via unauthenticated management interface

Comelit Multi-User Gateway for VIP System model 1456B firmware versions 2.9.1 and 2.10.0 expose a network-accessible management interface that does not require authentication. Through this interface, sensitive device configuration data - including the Remote Configuration Password - can be read i...

CVE-2026-80276: Missing Authentication for Critical Function

Comelit Multi-User Gateway for VIP System model 1456B firmware versions 2.9.1 and 2.10.0 expose a network-accessible management interface that does not require authentication. Through this interface, sensitive device configuration data - including the Remote Configuration Password - can be read i...

CERT/CC Warns of Hidden Admin Backdoor in Tenda Router Firmware

Several versions of firmware released by Chinese network device manufacturer Tenda have been found to embed an undocumented authentication backdoor that enables administrative access to the devices' web management interfaces, the CERT Coordination Center CERT/CC warned Monday. "An attacker can...

CVE-2026-11405

The web server binary /bin/httpd contains a hidden backdoor authentication mechanism in the login function at 004c88b8. - The function contains a normal authentication path using MD5/hash-based password verification prodencode64/PasswordToMd5/checkrandkey. - After normal authentication fails, it...

CVE-2025-47901 RCE on restore configuration password

Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability in Microchip Time Provider 4100 allows OS Command Injection.This issue affects Time Provider 4100: before 2.5...

CVE-2025-47901

Microchip Time Provider 4100 devices are affected by an OS Command Injection due to improper neutralization of special elements. The issue affects Time Provider 4100: before 2.5. The CVSS data indicates remote exploitation over the network with low privileges and no user interaction. Exploitation...

PT-2025-42796

Name of the Vulnerable Software and Affected Versions Microchip Time Provider 4100 versions prior to 2.5 Description An improper neutralization of special elements used in an OS command 'OS Command Injection' issue exists in Microchip Time Provider 4100. This allows for OS Command Injection. The...

PT-2025-42791

Name of the Vulnerable Software and Affected Versions Microchip Time Provider 4100 versions prior to 2.5 Description An improper neutralization of special elements used in an OS command vulnerability exists in Microchip Time Provider 4100, allowing for OS command injection. This issue relates to...

EUVD-2019-6607

Malware in sbrugna...

EUVD-2006-2751

Malware in sbrugna...

EUVD-2020-23412

Malware in sbrugna...

EUVD-2015-7604

Malware in sbrugna...

EUVD-2022-5544

Malicious code in bioql PyPI...

CosmodiumCS OnlyRAT 安全漏洞

CosmodiumCS OnlyRAT is a remote access Trojan by the CosmodiumCS individual developer, primarily used to demonstrate and study how remote control malware works. A security vulnerability exists in CosmodiumCS OnlyRAT 3.2 and earlier versions, which stems from a misuse of the parameter...

PT-2025-38667

Name of the Vulnerable Software and Affected Versions CosmodiumCS OnlyRAT versions prior to 3.3 Description A vulnerability exists in CosmodiumCS OnlyRAT. The connect/remote upload/remote download function within the main.py file of the Configuration File Handler component is affected. Manipulati...

CVE-2025-49182

Files in the source code contain login credentials for the admin user and the property configuration password, allowing an attacker to get full access to the application...

CVE-2025-49182

CVE-2025-49182 involves credential disclosure where login credentials for the admin user and property configuration password are stored in source code, potentially giving an attacker full access to affected SICK Field Analytics and SICK Media Server products. Public sources consistently describe ...

CVE-2025-49182: Inclusion of Sensitive Information in Source Code

Files in the source code contain login credentials for the admin user and the property configuration password, allowing an attacker to get full access to the application...