PT-2026-72146

Name of the Vulnerable Software and Affected Versions User Session Synchronizer versions prior to 1.4.1 Description An authentication bypass exists that can lead to account takeover. The synchronize session function, which executes on every request, fails to validate nonces, capabilities, or shar...

EUVD-2018-4218

Malware in sbrugna...

CVE-2024-22734

CVE-2024-22734 : AMCS Group Trux Waste Management Software (prior to 7.19.0018.26912) contains a vulnerability where a static, hard-coded AES Key-IV pair in the TX utilities path (TxUtilities.dll and TruxUser.cfg) can allow a local attacker to obtain sensitive information. Impact is described as ...

CVE-2018-12240

The Norton Identity Safe product prior to 5.3.0.976 may be susceptible to a privilege escalation issue via a hard coded IV, which is a type of vulnerability that can potentially increase the likelihood of encrypted data being recovered without adequate credentials...

Privilege escalation

The Norton Identity Safe product prior to 5.3.0.976 may be susceptible to a privilege escalation issue via a hard coded IV, which is a type of vulnerability that can potentially increase the likelihood of encrypted data being recovered without adequate credentials...

CVE-2018-12240

The Norton Identity Safe product prior to 5.3.0.976 may be susceptible to a privilege escalation issue via a hard coded IV, which is a type of vulnerability that can potentially increase the likelihood of encrypted data being recovered without adequate credentials...

CVE-2018-12240

Norton Identity Safe (prior to 5.3.0.976) is affected by a privilege-escalation vulnerability caused by a hard-coded IV in its encryption flow. This could allow an attacker to recover encrypted data with insufficient credentials. Affected product/version: Norton Identity Safe before 5.3.0.976. Re...