23810 matches found
PT-2024-17151 · WordPress · Accessibility By Allaccessible
Name of the Vulnerable Software and Affected Versions: Accessibility by AllAccessible plugin for WordPress versions up to, and including, 1.3.4 Description: The Accessibility by AllAccessible plugin for WordPress is vulnerable to unauthorized modification of data that can lead to privilege...
Cisco IP Phones 7910, 7940, and 7960 Use of Default Credentials (CVE-2002-0881)
Cisco IP Phone VoIP models 7910, 7940, and 7960 use a default administrative password, which allows attackers with physical access to the phone to modify the configuration settings. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more...
Mister org.mistergroup.shouldianswer 安全漏洞
Mister org.mistergroup.shouldianswer is an application from Mister, Inc. A security vulnerability exists in Mister org.mistergroup.shouldianswer version 1.4.264, which originates from allowing any installed application to be used via the org.mistergroup.shouldianswer.ui.defaultdialer...
CVE-2024-37575
The Mister org.mistergroup.shouldianswer application 1.4.264 for Android enables any installed application with no permissions to place phone calls without user interaction by sending a crafted intent via the org.mistergroup.shouldianswer.ui.defaultdialer.DefaultDialerActivity component...
CyberPanel Incorrect Default Permissions Vulnerability
CyberPanel contains an incorrect default permissions vulnerability that allows for authentication bypass and the execution of arbitrary commands using shell metacharacters in the statusfile property...
CVE-2024-53921: Incorrect Default Permissions
An issue was discovered in the installer in Samsung Magician 8.1.0 on Windows. An attacker can create arbitrary folders in the system permission directory via a symbolic link during the installation process...
VulnCheck KEV: CVE-2024-36111
KubePi is a K8s panel. Starting in version 1.6.3 and prior to version 1.8.0, there is a defect in the KubePi JWT token verification. The JWT key in the default configuration file is empty. Although a random 32-bit string will be generated to overwrite the key in the configuration file when the ke...
firefox security update
128.5.1-1.0.1 - Fix firefox-oracle-default-prefs.js for new nss Orabug: 37079789 128.5.1 - Add debranding patches Mustafa Gezen - Add OpenELA default preferences Louis Abel 128.5.1-1 - Update to 128.5.1 128.5.0-1 - Update to 128.5.0 build1...
PT-2024-9532 · Hitachi · Hitachi Ops Center Common Services +1
Name of the Vulnerable Software and Affected Versions: Hitachi Ops Center Common Services versions 10.9.3-00 through 11.0.3-00 Hitachi Ops Center OVA versions 10.9.3-00 through 11.0.2-01 Description: The issue is related to the use of default credentials in Hitachi Ops Center Common Services, whi...
CVE-2024-45068: Use of Default Credentials
Authentication credentials leakage vulnerability in Hitachi Ops Center Common Services within Hitachi Ops Center OVA. This issue affects Hitachi Ops Center Common Services: from 10.9.3-00 before 11.0.3-00; Hitachi Ops Center OVA: from 10.9.3-00 before 11.0.2-01...
CVE-2024-53937
An issue was discovered on Victure RX1800 WiFi 6 Router software ENV1.0.0r12110933, hardware 1.0 devices. The TELNET service is enabled by default with admin/admin as default credentials and is exposed over the LAN. The allows attackers to execute arbitrary commands with root-level permissions...
CVE-2024-53941
An issue was discovered in Victure RX1800 WiFi 6 Router software ENV1.0.0r12110933, hardware 1.0 devices. A remote attacker in proximity to a Wi-Fi network can derive the default Wi-Fi PSK value via the last 4 octets of the BSSID...
CVE-2024-53937
An issue was discovered on Victure RX1800 WiFi 6 Router software ENV1.0.0r12110933, hardware 1.0 devices. The TELNET service is enabled by default with admin/admin as default credentials and is exposed over the LAN. The allows attackers to execute arbitrary commands with root-level permissions...
Victure RX1800 WiFi 6 安全漏洞
The Victure RX1800 WiFi 6 is a wireless router from Victure. A security vulnerability exists in the Victure RX1800 WiFi 6 that originates from an attacker being able to obtain the default Wi-Fi PSK value via the last 4 octets of the BSSID...
CVE-2024-53941
An issue was discovered in Victure RX1800 WiFi 6 Router software ENV1.0.0r12110933, hardware 1.0 devices. A remote attacker in proximity to a Wi-Fi network can derive the default Wi-Fi PSK value via the last 4 octets of the BSSID...
CVE-2024-53937
The Victure RX1800 WiFi 6 Router (software EN_V1.0.0_r12_110933 , hardware 1.0 ) is vulnerable because the TELNET service is enabled by default with admin/admin credentials and is exposed over the LAN . This allows an attacker to execute arbitrary commands with root-level permissions . Notably, d...
PT-2024-35979 · Victure · Victure Rx1800 Wifi 6 Router
Name of the Vulnerable Software and Affected Versions: Victure RX1800 WiFi 6 Router version EN V1.0.0 r12 110933 Description: A problem was discovered in Victure RX1800 WiFi 6 Router devices where the TELNET service is enabled by default with admin/admin as default credentials and is exposed over...
CVE-2024-53941
A security vulnerability exists in the Victure RX1800 WiFi 6 Router (software version EN_V1.0.0_r12_110933 , hardware 1.0). A remote attacker in physical proximity to a Wi-Fi network can derive the default Wi-Fi PSK value by analyzing the last 4 octets of the BSSID . To minimize the risk of explo...
CVE-2024-53941: Incorrect Authorization
An issue was discovered in Victure RX1800 WiFi 6 Router software ENV1.0.0r12110933, hardware 1.0 devices. A remote attacker in proximity to a Wi-Fi network can derive the default Wi-Fi PSK value via the last 4 octets of the BSSID...
The vulnerability of the Intel Integrated Sensor Hub driver for NUC M15 laptops allows a hacker to gain increased privileges.
The vulnerability of the Intel Integrated Sensor Hub driver for NUC M15 laptops is related to the default access settings. Exploiting this vulnerability can allow attackers to gain increased privileges...