CVE-2025-26701

An issue was discovered in Percona PMM Server OVA before 3.0.0-1.ova. The default service account credentials can lead to SSH access, use of Sudo to root, and sensitive data exposure. This is fixed in PMM2 2.42.0-1.ova, 2.43.0-1.ova, 2.43.1-1.ova, 2.43.2-1.ova, and 2.44.0-1.ova and in PMM3...

CVE-2025-2119

A vulnerability was found in Thinkware Car Dashcam F800 Pro up to 20250226. It has been declared as problematic. This vulnerability affects unknown code of the component Device Registration Handler. The manipulation leads to use of default credentials. It is possible to launch the attack on the...

CVE-2025-26701

An issue was discovered in Percona PMM Server OVA before 3.0.0-1.ova. The default service account credentials can lead to SSH access, use of Sudo to root, and sensitive data exposure. This is fixed in PMM2 2.42.0-1.ova, 2.43.0-1.ova, 2.43.1-1.ova, 2.43.2-1.ova, and 2.44.0-1.ova and in PMM3...

RustDesk Console Default Credentials

RustDesk is a mote access and control software that enables management of computers and other devices. RustDesk server Pro embeds a web console allowing users to browse devices and perform configuration modification on the application. A remote and unauthenticated attacker can use the default...

CVE-2025-26701

CVE-2025-26701 (Percona PMM Server, OVA) affects PMM Server images prior to 3.0.0-1.ova. The issue arises from default service account credentials, enabling SSH access and the use of sudo to gain root privileges, which can lead to exposure of sensitive data. Public references indicate fixes in PM...

LiteLLM Default Credentials

LiteLLM applies an authentication system with credentials that could have been suggested from the documentation. If these credentials are not modified, an attacker could access LiteLLM's interface and perform arbitrary actions. This detection is included in the AI and LLM category. No source data...

PT-2025-10856

Name of the Vulnerable Software and Affected Versions: Percona PMM Server OVA versions prior to 3.0.0-1.ova Description: An issue was discovered in Percona PMM Server OVA where the default service account credentials can lead to SSH access, use of Sudo to root, and sensitive data exposure...

PT-2025-33024

Name of the Vulnerable Software and Affected Versions: Palo Alto Networks Cortex XDR® Broker VM affected versions not specified Description: A credential management flaw exists in Palo Alto Networks Cortex XDR® Broker VM where different Broker VM images share identical default credentials for...

CVE-2025-2119

A vulnerability was found in Thinkware Car Dashcam F800 Pro up to 20250226. It has been declared as problematic. This vulnerability affects unknown code of the component Device Registration Handler. The manipulation leads to use of default credentials. It is possible to launch the attack on the...

CVE-2025-2119

The CVE-2025-2119 entry concerns Thinkware Car Dashcam F800 Pro (up to 20250226). A vulnerability in the Device Registration Handler allows use of default credentials, enabling an attack on the physical device. Reported impact is limited to credential misuse with low attack complexity (though use...

CVE-2025-2119 Thinkware Car Dashcam F800 Pro Device Registration default credentials

A vulnerability was found in Thinkware Car Dashcam F800 Pro up to 20250226. It has been declared as problematic. This vulnerability affects unknown code of the component Device Registration Handler. The manipulation leads to use of default credentials. It is possible to launch the attack on the...

CVE-2025-2119 Thinkware Car Dashcam F800 Pro Device Registration default credentials

A vulnerability was found in Thinkware Car Dashcam F800 Pro up to 20250226. It has been declared as problematic. This vulnerability affects unknown code of the component Device Registration Handler. The manipulation leads to use of default credentials. It is possible to launch the attack on the...

Thinkware Car Dashcam F800 Pro 安全漏洞

Thinkware Car Dashcam F800 Pro is a car recorder with front and rear dual recording and various assistive functions for front and rear vehicle recording and providing driving assistance from Thinkware, South Korea. A security vulnerability exists in Thinkware Car Dashcam F800 Pro 20250226 and...

CVE-2025-2119: Use of Default Credentials

A vulnerability was found in Thinkware Car Dashcam F800 Pro up to 20250226. It has been declared as problematic. This vulnerability affects unknown code of the component Device Registration Handler. The manipulation leads to use of default credentials. It is possible to launch the attack on the...

PT-2025-10447

Name of the Vulnerable Software and Affected Versions Thinkware Car Dashcam F800 Pro up to 20250226 Description A vulnerability was found in the Device Registration Handler component, which leads to the use of default credentials. The manipulation can be launched on the physical device, and the...

CVE-2024-13893: Use of Default Credentials

Smartwares cameras CIP-37210AT and C724IP, as well as others which share the same firmware in versions up to 3.3.0, might share same credentials for telnet service. Hash of the password can be retrieved through physical access to SPI connected memory. For the telnet service to be enabled, the...

PT-2025-9719

Name of the Vulnerable Software and Affected Versions Edimax IC-7100 affected versions not specified Description The Edimax IC-7100 network camera has a significant security flaw that allows remote code execution on the device via a specially crafted request. This operating system command injecti...

Siemens SIPROTEC 5 Devices Use of Default Credentials (CVE-2024-54015)

Affected devices do not properly validate SNMP GET requests. This could allow an unauthenticated, remote attacker to retrieve sensitive information of the affected devices with SNMPv2 GET requests using default credentials. This plugin only works with Tenable.ot. Please visit...

CVE-2025-26793

The Web GUI configuration panel of Hirsch formerly Identiv and Viscount Enterphone MESH through 2024 ships with default credentials username freedom, password viscount. The administrator is not prompted to change these credentials on initial configuration, and changing the credentials requires ma...

Tenda W18E Trust Management Issues Vulnerability (CNVD-2025-09402)

The Tenda W18E is a wireless router from the Chinese company Tenda. The Tenda W18E suffers from a trust management issue vulnerability that stems from the presence of a default credentials vulnerability that can be exploited by an attacker to access the web management portal...