CVE-2024-5632

Longse NVR Network Video Recorder model NVR3608PGE2W, as well as products based on this device, create a WiFi network with a default password. A user is neither advised to change it during the installation process, nor such a need is described in the manual. As the cameras from the same kit conne...

CVE-2024-5632

Longse NVR Network Video Recorder model NVR3608PGE2W, as well as products based on this device, create a WiFi network with a default password. A user is neither advised to change it during the installation process, nor such a need is described in the manual. As the cameras from the same kit conne...

CVE-2024-5632

CVE-2024-5632 affects Longse NVR3608PGE2W and related devices: the firmware/network feature creates a Wi‑Fi network using a default password, with no user guidance to change it during install and no manual indication to do so. This implies a risk of unauthorized access if the default password is ...

CVE-2024-5632

Longse NVR Network Video Recorder model NVR3608PGE2W, as well as products based on this device, create a WiFi network with a default password. A user is neither advised to change it during the installation process, nor such a need is described in the manual. As the cameras from the same kit conne...

Longse NVR Security Vulnerability

Longse NVR is a series of network video recorders from China-based Longse Technology Longse. A security vulnerability exists in Longse NVR, which stems from the fact that the product creates a WiFi network with a default password, which is likely to remain unchanged as cameras in the same suite...

PT-2024-36789 · Longse · Longse Nvr

Name of the Vulnerable Software and Affected Versions: Longse NVR Network Video Recorder model NVR3608PGE2W, as well as products based on this device affected versions not specified Description: The issue concerns the creation of a WiFi network with a default password by the Longse NVR model...

ABB ASPECT System

SUMMARY ABB became aware of vulnerabilities in the product versions listed as affected in the advisory. ASPECT devices are not intended to be internet-facing. A product advisory issued in June 2023 informed cus-tomers of this parameter. An attacker can successfully exploit these vulnerabilities...

CVE-2024-38466

Shenzhen Guoxin Synthesis image system before 8.3.0 has a 123456Qw default password...

CVE-2024-38466

Shenzhen Guoxin Synthesis image system before 8.3.0 has a 123456Qw default password...

CVE-2024-38466

Shenzhen Guoxin Synthesis image system before 8.3.0 has a 123456Qw default password...

Shenzhen Guoxin Synthesis image system security vulnerability

Shenzhen Guoxin Synthesis image system is an image system from Shenzhen Guoxin Synthesis, a company based in Shenzhen, China. A security vulnerability exists in Shenzhen Guoxin Synthesis image system versions prior to 8.3.0, which stems from a default password of 123456Qw...

PT-2024-28020 · Shenzhen Guoxin · Shenzhen Guoxin Synthesis Image System

Name of the Vulnerable Software and Affected Versions: Shenzhen Guoxin Synthesis image system versions prior to 8.3.0 Description: The issue concerns a default password, specifically 123456Qw, in the Shenzhen Guoxin Synthesis image system. Recommendations: For versions prior to 8.3.0, update to...

CVE-2024-38466

Shenzhen Guoxin Synthesis image system before 8.3.0 has a 123456Qw default password...

CVE-2024-38466

The CVE-2024-38466 issue affects Shenzhen Guoxin Synthesis image system up to version 8.3.0, where a default credential 123456Qw is present. Multiple connected sources confirm the vulnerability stems from a hard-coded/default password, enabling unauthorized access if standard credentials are not ...

RHEL 6 : ipa (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - jquery: Prototype pollution in object's prototype leading to denial of service, remote code execution, or...

CVE-2024-32213

The LoMag WareHouse Management application version 1.0.20.120 and older were found to allow weak passwords. By default, hard-coded passwords of 10 characters with little or no complexity are allowed...

The US Government Is Asking Big Tech to Promise Better Cybersecurity

The Biden administration is asking tech companies to sign a pledge, obtained by WIRED, to improve their digital security, including reduced default password use and improved vulnerability disclosures...

PT-2024-24464 · Unknown · Lomag Warehouse Management

Name of the Vulnerable Software and Affected Versions: LoMag WareHouse Management application versions 1.0.20.120 and older Description: The issue allows weak passwords. By default, hard-coded passwords of 10 characters with little or no complexity are allowed. Recommendations: For versions...

CVE-2024-0840

The Grandstream UCM Series IP PBX before firmware version 1.0.20.52 is affected by a parameter injection vulnerability in the HTTP interface. A remote and authenticated attacker can execute arbitrary code by sending a crafted HTTP request. Authentication may be possible using a default user and...

CVE-2024-0840

CVE-2024-0840 affects Grandstream UCM Series IP PBX firmwares prior to 1.0.20.52 (UCM6202/6204/6208/6510). A parameter injection vulnerability in the HTTP interface allows a remote, authenticated attacker to execute arbitrary code by sending a crafted HTTP request; authentication may be possible ...