PT-2024-27238

Name of the Vulnerable Software and Affected Versions Simple Care software all versions Description The issue is related to the use of a hard-coded password for the patients' database, allowing an attacker to retrieve sensitive data. This password is uniform across all installations of the Simple...

Eurosoft Przychodnia Security Vulnerability

Eurosoft Przychodnia is a cloud clinic from Eurosoft Poland. A security vulnerability exists in Eurosoft Przychodnia versions prior to 20240417.001, which stems from the use of hard-coded passwords for the database, allowing an attacker to retrieve sensitive data stored in the database...

drEryk Gabinet Security breach

drEryk Gabinet is a specialized software for clinics and NFZ offices from drEryk Poland. A security vulnerability exists in drEryk Gabinet versions 7.0.0.0 through 9.17.0.0, which stems from the use of hard-coded passwords for the database, allowing an attacker to retrieve sensitive data stored i...

CVE-2024-3699: Use of Hard-coded Password

Use of hard-coded password to the patients' database allows an attacker to retrieve sensitive data stored in the database. The password is the same among all drEryk Gabinet installations.This issue affects drEryk Gabinet software versions from 7.0.0.0 through 9.17.0.0...

CVE-2024-3700: Use of Hard-coded Password

Use of hard-coded password to the patients' database allows an attacker to retrieve sensitive data stored in the database. The password is the same among all Simple Care software installations. This issue affects Estomed Sp. z o.o. Simple Care software in all versions. The software is no longer...

Estomed Sp. z o.o. Simple Care Security Vulnerability

Estomed Sp. z o.o. Simple Care is a full-featured healthcare management software from Estomed Sp. z o.o., Poland. A security vulnerability exists in Estomed Sp. z o.o. Simple Care that stems from the use of hard-coded passwords that could allow an attacker to access sensitive data stored in the...

PT-2024-17525

Name of the Vulnerable Software and Affected Versions Eurosoft Przychodnia versions prior to 20240417.001 Description The issue is related to the use of a hard-coded password for the patients' database, allowing an attacker to retrieve sensitive data. This password is uniform across all Eurosoft...

CVE-2023-49221

Precor touchscreen console P62, P80, and P82 could allow a remote attacker within the local network to bypass security restrictions, and access the service menu, because there is a hard-coded service code...

Dell PowerScale OneFS Trust Management Issue Vulnerability (CNVD-2024-29346)

Dell PowerScale OneFS is an operating system from Dell USA. PowerScale OneFS operating system that provides horizontal scaling of NAS. Dell PowerScale OneFS has a trust management issue vulnerability that stems from the presence of the use of hard-coded credentials, which can be exploited by an...

CVE-2023-49221

The Precor touchscreen console P62, P80, and P82 models are vulnerable to a security bypass due to a hard-coded service code . A remote attacker positioned within the local network can exploit this flaw to bypass security restrictions and gain unauthorized access to the service menu . While no fo...

CVE-2023-49224: Use of Hard-coded Credentials

Precor touchscreen console P62, P80, and P82 contains a default SSH public key in the authorizedkeys file. A remote attacker could use this key to gain root privileges...

CVE-2023-49223: Use of Hard-coded Credentials

Precor touchscreen console P62, P80, and P82 could allow a remote attacker to obtain sensitive information because the root password is stored in /etc/passwd. An attacker could exploit this to extract files and obtain sensitive information...

CVE-2023-49221: Use of Hard-coded Credentials

Precor touchscreen console P62, P80, and P82 could allow a remote attacker within the local network to bypass security restrictions, and access the service menu, because there is a hard-coded service code...

CVE-2023-49221

Precor touchscreen console P62, P80, and P82 could allow a remote attacker within the local network to bypass security restrictions, and access the service menu, because there is a hard-coded service code...

CVE-2023-49222: Use of Hard-coded Credentials

Precor touchscreen console P82 contains a private SSH key that corresponds to a default public key. A remote attacker could exploit this to gain root privileges...

Precor Touchscreen Console Security Vulnerability

Precor touchscreen console P62 and Precor touchscreen console P82 are both a touchscreen console from Precor USA. A security vulnerability exists in the Precor Touchscreen Console that stems from the presence of hard-coded service code that could allow a remote attacker to bypass security...

PT-2024-13696 · Precor · Precor P80 +2

Name of the Vulnerable Software and Affected Versions: Precor touchscreen console P62, P80, and P82 Description: The issue allows a remote attacker within the local network to bypass security restrictions and access the service menu due to a hard-coded service code. Recommendations: For Precor...

D-Tale Input Validation Error Vulnerability

Man Group D-Tale is a pandas data structure visualization tool from Man Group, Inc. An input validation error vulnerability exists in D-Tale, which stems from a hard-coded SECRETKEY in the flask configuration, which allows an attacker to forge a session cookie if authentication is enabled...

TOTOLINK CP300 Hardcoded Password Vulnerability

TOTOLINK is a mid-to-high-end wireless routing brand in the Asia Pacific region. A hard-coded password vulnerability exists in the TOTOLINK CP300, which can be exploited by an attacker to log in as root...

CVE-2024-29170

Dell PowerScale OneFS versions 8.2.x through 9.8.0.x contain a use of hard coded credentials vulnerability. An adjacent network unauthenticated attacker could potentially exploit this vulnerability, leading to information disclosure of network traffic and denial of service...