CVE-2023-53176

CVE-2023-53176 concerns the Linux kernel serial driver stack. When unbinding a port-specific 8250 driver, control passes to the generic serial8250 driver while port->pm may still reference the now-destroyed driver, causing an oops roughly 10 seconds later. The connected documents confirm the r...

CVE-2025-57579

An issue in TOTOLINK Wi-Fi 6 Router Series Device X2000R-Gh-V2.0.0 allows a remote attacker to execute arbitrary code via the default password...

CVE-2025-57578

An issue in H3C Magic M Device M2V100R006 allows a remote attacker to execute arbitrary code via the default password...

CVE-2025-57577

An issue in H3C Device R365V300R004 allows a remote attacker to execute arbitrary code via the default password. NOTE: the Supplier's position is that their "product lines enforce or clearly prompt users to change any initial credentials upon first use. At most, this would be a case of...

CVE-2025-36222

IBM Fusion 2.2.0 through 2.10.1, IBM Fusion HCI 2.2.0 through 2.10.0, and IBM Fusion HCI for watsonx 2.8.2 through 2.10.0 uses insecure default configurations that could expose AMQStreams without client authentication that could allow an attacker to perform unauthorized actions...

gin

It is an offensive tool for web frameworks. The primary target is Gin, a HTTP web framework written in Go Golang, which features a Martini-like API with much better performance. The vulnerability class/vector is not specified, but the code and metadata suggest that it may be related to a remote...

CVE-2025-4235 User-ID Credential Agent: Cleartext Exposure of Service Account password

An information exposure vulnerability in the Palo Alto Networks User-ID Credential Agent Windows-based can expose the service account password under specific non-default configurations. This allows an unprivileged Domain User to escalate privileges by exploiting the account’s permissions. The...

CVE-2025-4235

The CVE-2025-4235 entry describes an information-exposure vulnerability in Palo Alto Networks’ User-ID Credential Agent (Windows). Under specific non-default configurations, the service account password can be exposed, enabling an unprivileged Domain User to escalate privileges by abusing the acc...

CVE-2025-4235 User-ID Credential Agent: Cleartext Exposure of Service Account password

An information exposure vulnerability in the Palo Alto Networks User-ID Credential Agent Windows-based can expose the service account password under specific non-default configurations. This allows an unprivileged Domain User to escalate privileges by exploiting the account’s permissions. The...

CVE-2025-43887

Dell PowerProtect Data Manager, versions 19.19 and 19.20, Hyper-V contains an Incorrect Default Permissions vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges...

CVE-2025-43725

Dell PowerProtect Data Manager, Generic Application Agent, versions 19.19 and 19.20, contains an Incorrect Default Permissions vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Code execution...

CVE-2025-57578

An issue in H3C Magic M Device M2V100R006 allows a remote attacker to execute arbitrary code via the default password...

CVE-2025-57579

An issue in TOTOLINK Wi-Fi 6 Router Series Device X2000R-Gh-V2.0.0 allows a remote attacker to execute arbitrary code via the default password...

CVE-2025-57579

An issue in TOTOLINK Wi-Fi 6 Router Series Device X2000R-Gh-V2.0.0 allows a remote attacker to execute arbitrary code via the default password...

CVE-2025-57577

An issue in H3C Device R365V300R004 allows a remote attacker to execute arbitrary code via the default password. NOTE: the Supplier's position is that their "product lines enforce or clearly prompt users to change any initial credentials upon first use. At most, this would be a case of...

TOTOLINK Wi-Fi 6 Router Series 安全漏洞

TOTOLINK Wi-Fi 6 Router Series is a series of wireless routers from China's Gion Electronics TOTOLINK. A security vulnerability exists in the TOTOLINK Wi-Fi 6 Router Series X2000R-Gh-V2.0.0 version, which stems from an improperly set default password and could lead to the remote execution of...

CVE-2025-57578

An issue in H3C Magic M Device M2V100R006 allows a remote attacker to execute arbitrary code via the default password...

CVE-2025-57579

CVE-2025-57579 affects TOTOLINK Wi‑Fi 6 Router Series, specifically X2000R-Gh‑V2.0.0. The issue stems from an improperly set default password, enabling a remote attacker to execute arbitrary code. Several sources corroborate the target as the X2000R-Gh family and the vulnerability enabling remote...

H3C Magic M 安全漏洞

H3C Magic M is a series of wireless routers from China's Xinhua San H3C. A security vulnerability exists in H3C Magic M that stems from the use of a default password that could lead to remote execution of arbitrary code...

PT-2025-37335

Name of the Vulnerable Software and Affected Versions: H3C Device versions R365V300R004 Description: An issue in H3C Device R365V300R004 allows a remote attacker to execute arbitrary code via the default password. Recommendations: Change the default password for H3C Device version R365V300R004...