Financial services company OneMain fined $4.25 million for security lapses

A series of security errors and mishaps has cost personal loan provider OneMain $4.25m in penalties, issued by the New York State department of financial services. The fines, coming at the end of a detailed investigation into how security practices at the company were determined to be below-par,...

Authentication Bypass

github.com/kubernetes/minikube is vulnerable to Authentication Bypass. The vulnerability exists due to the use of hard-coded credentials which allows a local attacker to use the default password and bypass the login via ssh access to the minikube container...

CVE-2023-1944

This vulnerability enables ssh access to minikube container using a default password...

CVE-2023-1944

CVE-2023-1944 affects minikube. The issue enables SSH access to the minikube container using a default password due to hard-coded/default credentials, leading to potential local privilege/escalation as described by multiple sources (NVD/Veracode/SUSE/CVE lists). Exploitation details are not provi...

CVE-2023-1944 [minikube] ssh server with default password

This vulnerability enables ssh access to minikube container using a default password...

CVE-2023-1944 [minikube] ssh server with default password

This vulnerability enables ssh access to minikube container using a default password...

Minikube 信任管理问题漏洞

Minikube is a tool for running Kubernetes locally. Minikube has a security vulnerability that stems from allowing access to minikube via ssh using a default password...

CVE-2023-1944 [minikube] ssh server with default password

This vulnerability enables ssh access to minikube container using a default password...

CVE-2023-30352

Shenzen Tenda Technology IP Camera CP3 V11.10.00.2211041355 was discovered to contain a hard-coded default password for the RTSP feed...

CVE-2023-30351

Shenzen Tenda Technology IP Camera CP3 V11.10.00.2211041355 was discovered to contain a hard-coded default password for root which is stored using weak encryption. This vulnerability allows attackers to connect to the TELNET service or UART by using the exposed credentials...

PT-2023-22648 · Shenzen Tenda Technology · Tenda Ip Camera Cp3

Name of the Vulnerable Software and Affected Versions: Shenzen Tenda Technology IP Camera CP3 version 11.10.00.2211041355 Description: The issue concerns a hard-coded default password for the RTSP feed. Recommendations: For version 11.10.00.2211041355, consider changing the default password for t...

CVE-2023-30351

Shenzen Tenda Technology IP Camera CP3 V11.10.00.2211041355 was discovered to contain a hard-coded default password for root which is stored using weak encryption. This vulnerability allows attackers to connect to the TELNET service or UART by using the exposed credentials...

CVE-2023-30352

CVE-2023-30352 affects Shenzen Tenda Technology IP Camera CP3 (firmware v11.10.00.2211041355). Root cause: hard-coded default password for the RTSP feed, enabling potential unauthorized access. Impact per CVSS: high confidentiality, integrity, and availability (score 9.8). Mitigations from connec...

CVE-2023-0896

A default password was reported in Lenovo Smart Clock Essential with Alexa Built In that could allow unauthorized device access to an attacker with local network access...

CVE-2023-0896

A default password was reported in Lenovo Smart Clock Essential with Alexa Built In that could allow unauthorized device access to an attacker with local network access...

Default credentials

A default password was reported in Lenovo Smart Clock Essential with Alexa Built In that could allow unauthorized device access to an attacker with local network access...

CVE-2023-0896

A default password was reported in Lenovo Smart Clock Essential with Alexa Built In that could allow unauthorized device access to an attacker with local network access...

CVE-2023-0896

A default password was reported in Lenovo Smart Clock Essential with Alexa Built In that could allow unauthorized device access to an attacker with local network access...

CVE-2023-0896

CVE-2023-0896 : Lenovo Smart Clock Essential with Alexa Built In has a default password that could allow unauthorized access by an attacker on the same local network. The CVE score is 8.8 (HIGH; AV: Adjacent, AC: Low, PR: None, UI: None, S: Unchanged; C/I/A: High). Connected sources describe a ha...

The vulnerability of the Fluentd data collector and its browser-based manager, fluentd-ui, stems from the default use of a standard password. This allows attackers to execute arbitrary code.

The vulnerability of Fluentd and its browser manager, fluentd-ui, is related to the default use of a standard password. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...