8376 matches found
SUSE CVE-2024-40644
gitoxide An idiomatic, lean, fast & safe pure Rust implementation of Git. gix-path can be tricked into running another git.exe placed in an untrusted location by a limited user account on Windows systems. Windows permits limited user accounts without administrative privileges to create new...
gix-path can use a fake program files location
Summary When looking for Git for Windows so it can run it to report its paths, gix-path can be tricked into running another git.exe placed in an untrusted location by a limited user account. Details Windows permits limited user accounts without administrative privileges to create new directories ...
PT-2024-28962 · Microsoft · Windows
Name of the Vulnerable Software and Affected Versions: gitoxide versions 0.10.8 Description: The issue arises from gix-path being tricked into running another git.exe placed in an untrusted location by a limited user account on Windows systems. Windows permits limited user accounts to create new...
CVE-2024-20323
A vulnerability in Cisco Intelligent Node iNode Software could allow an unauthenticated, remote attacker to hijack the TLS connection between Cisco iNode Manager and associated intelligent nodes and send arbitrary traffic to an affected device. This vulnerability is due to the presence of...
CVE-2024-20323
A vulnerability in Cisco Intelligent Node iNode Software could allow an unauthenticated, remote attacker to hijack the TLS connection between Cisco iNode Manager and associated intelligent nodes and send arbitrary traffic to an affected device. This vulnerability is due to the presence of...
CVE-2024-5471
Zohocorp ManageEngine DDI Central versions 4001 and prior were vulnerable to agent takeover vulnerability due to the hard-coded sensitive keys...
CVE-2024-5471
Zohocorp ManageEngine DDI Central versions 4001 and prior were vulnerable to agent takeover vulnerability due to the hard-coded sensitive keys...
CVE-2024-5471 Agent takeover
Zohocorp ManageEngine DDI Central versions 4001 and prior were vulnerable to agent takeover vulnerability due to the hard-coded sensitive keys...
CVE-2024-5471 Agent takeover
Zohocorp ManageEngine DDI Central versions 4001 and prior were vulnerable to agent takeover vulnerability due to the hard-coded sensitive keys...
PT-2024-36406 · Zohocorp · Manageengine Ddi Central
Name of the Vulnerable Software and Affected Versions: Zohocorp ManageEngine DDI Central versions 4001 and prior Description: The issue is related to an agent takeover vulnerability due to the presence of hard-coded sensitive keys. Recommendations: For versions 4001 and prior, consider restrictin...
Unspecified Vulnerability in Magic R230 of Xinhua San Technologies Ltd.
Magic R230 is a wireless router from China's Xinhua San H3C. A security vulnerability exists in the Magic R230 V100R002 of Xinhua San Technologies Co. The vulnerability stems from a hard-coded password vulnerability in /etc/shadow, which can be exploited by an attacker to log in as root...
CVE-2024-35338
CVE-2024-35338 affects Tenda i29V1.0 V1.0.0.5 with a hardcoded root password, enabling authentication bypass. Multiple sources corroborate the root-password issue; CVSS v3.1 base score is 9.8 (CRITICAL). Exploitation details are not provided in the documents; no remediation steps are specified he...
D-Link DAP-1360 Hardcoded Authentication Bypass Vulnerability
The D-Link DAP-1360 is a router from China-based AUO D-Link. The D-Link DAP-1360 suffers from a hard-coded authentication bypass vulnerability that can be exploited by an attacker to bypass authentication...
The vulnerability of the installation file initSetup_v2.0.sh, a configuration migration tool for Expedition, allows a perpetrator to gain increased privileges.
The vulnerability of the initSetupv2.0.sh file, a configuration migration tool for Expedition, lies in the use of hard-coded credentials. Exploiting this vulnerability could allow an attacker to gain increased privileges remotely...
D-Link DAP-2622 Hardcoded Credential Authentication Bypass Vulnerability
The D-Link DAP-2622 is a wireless access point AP from D-Link designed for wireless network coverage in an enterprise or commercial environment. The D-Link DAP-2622 suffers from a hard-coded credential authentication bypass vulnerability that originates from the Telnet command line interface usin...
LumisXP 16.1.x Hardcoded Credentials / IDOR
===== Tempest Security Intelligence - ADV-6/2024 ========================== LumisXP v15.0.x to v16.1.x Author: Rodolfo Tavares Tempest Security Intelligence - Recife, Pernambuco - Brazil ===== Table of Contents================================================== Overview Detailed description Timeli...
Siemens Mendix Encryption Module Hardcoded Default Encryption Key Vulnerability
The Mendix Encryption module takes care of the following encryption requirements: plain text encryption e.g. passwords and FileDocument encryption e.g. documents or photos. A hard-coded default encryption key vulnerability exists in the Siemens Mendix Encryption module, which can be exploited by ...
CVE-2024-28747
An unauthenticated remote attacker can use the hard-coded credentials to access the SmartSPS devices with high privileges...