AMD Manageability API 安全漏洞

The AMD Manageability API is an enterprise-class hardware management interface suite from UltraMicroelectronics AMD that provides out-of-band server management capabilities. A security vulnerability exists in the AMD Manageability API that stems from improperly set default permissions, which coul...

Intel RealSense SDK 安全漏洞

Intel RealSense SDK is a depth perception camera development kit from Intel Corporation USA that supports 3D vision application development. A security vulnerability exists in Intel RealSense SDK versions prior to 2.56.2, which stems from improper default permissions and may result in elevated...

Siemens VersiCharge AC Series 安全漏洞

The VersiCharge AC Series Electric Vehicle Charger is an electric vehicle charging device from Siemens for a variety of application scenarios, including workplaces, retail, parking lots, multi-unit housing, public charging and home charging. An arbitrary code execution vulnerability exists in the...

Unspecified Vulnerability in Zoom Workplace Apps for Windows

Zoom Workplace Apps for Windows is an official suite of collaboration tools from Zoom that includes core features such as team chat, whiteboards, notes, and more, and is required to be used through a Zoom Meetings account. A security vulnerability exists in Zoom Workplace Apps for Windows, which...

GNU Screen 安全漏洞

Gnu Screen is an application from the American GNU community. It provides the effect of getting multiple virtual terminals on one physical terminal. Gnu Screen suffers from a security vulnerability that stems from a pseudo-terminal default mode change, which can be exploited by an attacker to cau...

Intel Endurance Gaming Mode 安全漏洞

Intel Endurance Gaming Mode is a feature from Intel Corporation USA used to extend the gaming life of laptops when unplugged. A security vulnerability exists in Intel Endurance Gaming Mode that stems from improperly set default permissions, which could result in elevated local privileges...

Intel Graphics 安全漏洞

Intel Graphics is a family of graphics cards from Intel Corporation USA. A security vulnerability exists in Intel Graphics that stems from an improperly set default privilege, which could lead to local elevation of privilege...

PT-2025-20907 · Ivanti · Ivanti Cloud Services Application

Name of the Vulnerable Software and Affected Versions: Ivanti Cloud Services Application versions prior to 5.0.5 Description: The issue concerns default credentials in the Ivanti Cloud Services Application, allowing a local authenticated attacker to escalate their privileges. Recommendations: For...

Ivanti Cloud Services Application 安全漏洞

The Ivanti Cloud Services Application CSA is a locally deployed virtual appliance designed to simplify and enhance the integration of Ivanti products with cloud services. An elevation of privilege vulnerability exists in Ivanti Cloud Services Application, which is derived from default credentials...

Exploit for External Control of File Name or Path in Emagicone Emagicone_Store_Manager_For_Woocommerce

eMagicOne Store Manager for WooCommerce md5 EMOSMCDEFAULT...

Exploit for External Control of File Name or Path in Emagicone Emagicone_Store_Manager_For_Woocommerce

eMagicOne Store Manager for WooCommerce md5 EMOSMCDEFAULT...

CVE-2025-28200

Victure RX1800 ENV1.0.0r12110933 was discovered to utilize a weak default password which includes the last 8 digits of the Mac address...

Victure RX1800 安全漏洞

The Victure RX1800 is a wireless router from Victure. A security vulnerability exists in the Victure RX1800 ENV1.0.0r12110933 version that stems from the use of a weak default password...

CVE-2025-28200

The CVE-2025-28200 entry concerns the Victure RX1800 router (EN_V1.0.0_r12_110933). The underlying issue is a weak default password that uses the last 8 digits of the MAC address, exposing the device to credential guessing with network access. According to the provided metrics, the severity is cr...

PT-2025-20566

Name of the Vulnerable Software and Affected Versions Victure RX1800 version EN V1.0.0 r12 110933 Description The issue is related to a weak default password used by the Victure RX1800, which includes the last 8 digits of the Mac address. Recommendations For version EN V1.0.0 r12 110933, consider...

Malicious code in @cewe-phoenix-themes/default-theme (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis b8fefa5fe5221477fe4ca130e84721255986e7b048f3e5922c99cac89d94df83 The OpenSSF Package Analysis project identified '@cewe-phoenix-themes/default-theme' @ 99.9.1 npm as malicious. It is considered malicious...

SUSE CVE-2024-58134

Mojolicious versions from 0.999922 for Perl uses a hard coded string, or the application's class name, as an HMAC session cookie secret by default. These predictable default secrets can be exploited by an attacker to forge session cookies. An attacker who knows or guesses the secret could compute...

CVE-2025-32819

A vulnerability in SMA100 allows a remote authenticated attacker with SSLVPN user privileges to bypass the path traversal checks and delete an arbitrary file potentially resulting in a reboot to factory default settings...

Configure the SSH Service Log Level Properly

SSH provides multiple log output levels, such as QUIET, FATAL, ERROR, INFO, VERBOSE, DEBUG, DEBUG1, DEBUG2, and DEBUG3. A higher log level such as QUIET or FATAL prints less log information. This saves drive space but hinders administrators from auditing and tracing SSH events. Conversely, a lowe...

Ensure That the Number of Files That Can Be Opened by Users Is Correctly Configured

The number of files that can be opened in Linux is limited. Once the limit is reached by a user, other users can no longer open files. By default, openEuler limits the maximum number of file handles that can be opened by each user to 1024. If the value exceeds 1024, new file handles cannot be...