Lucene search
+L

11651 matches found

osv_cve
osv_cve
•added 2025/11/03 4:15 a.m.•18 views

CVE-2025-12615

A security vulnerability has been detected in PHPGurukul News Portal 1.0. The affected element is an unknown function of the file /onps/settings.py. Such manipulation of the argument SECRETKEY leads to use of hard-coded cryptographic key . The attack may be performed from remote. The attack...

8.1CVSS4.6AI score0.00417EPSS
SaveExploits1References5
NVD
NVD
•added 2025/11/03 4:15 a.m.•20 views

CVE-2025-12615

A security vulnerability has been detected in PHPGurukul News Portal 1.0. The affected element is an unknown function of the file /onps/settings.py. Such manipulation of the argument SECRETKEY leads to use of hard-coded cryptographic key . The attack may be performed from remote. The attack...

8.1CVSS0.00417EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
•added 2025/11/03 3:32 a.m.•10 views

CVE-2025-12615 PHPGurukul News Portal settings.py hard-coded key

A security vulnerability has been detected in PHPGurukul News Portal 1.0. The affected element is an unknown function of the file /onps/settings.py. Such manipulation of the argument SECRETKEY leads to use of hard-coded cryptographic key . The attack may be performed from remote. The attack...

5.1CVSS4.6AI score0.00417EPSS
SaveExploits1References5
CVE
CVE
•added 2025/11/03 3:32 a.m.•31 views

CVE-2025-12615

CVE-2025-12615 affects PHPGurukul News Portal 1.0. The vulnerability arises from manipulation of the SECRET_KEY in the file /onps/settings.py, leading to the use of a hard-coded cryptographic key. This enables remote exploitation and is described as difficult to exploit, with the exploit publicly...

8.1CVSS4.6AI score0.00417EPSS
SaveExploits1References5Affected Software1
Cvelist
Cvelist
•added 2025/11/03 3:32 a.m.•31 views

CVE-2025-12615 PHPGurukul News Portal settings.py hard-coded key

A security vulnerability has been detected in PHPGurukul News Portal 1.0. The affected element is an unknown function of the file /onps/settings.py. Such manipulation of the argument SECRETKEY leads to use of hard-coded cryptographic key . The attack may be performed from remote. The attack...

5.1CVSS0.00417EPSS
SaveExploits1References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/11/03 12:00 a.m.•9 views

CVE-2025-34501: Use of Hard-coded Credentials

Deck Mate 2 is distributed with static, hard-coded credentials for the root shell and web user interface, while multiple management services SSH, HTTP, Telnet, SMB, X11 are enabled by default. If an attacker can reach these interfaces - most often through local or near-local access such as...

7CVSS5.8AI score0.00196EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/11/03 12:00 a.m.•11 views

CVE-2025-12615: Use of Hard-coded Cryptographic Key

A security vulnerability has been detected in PHPGurukul News Portal 1.0. The affected element is an unknown function of the file /onps/settings.py. Such manipulation of the argument SECRETKEY leads to use of hard-coded cryptographic key . The attack may be performed from remote. The attack...

8.1CVSS4.7AI score0.00417EPSS
SaveExploits1References7
CNNVD
CNNVD
•added 2025/11/03 12:00 a.m.•21 views

PHPGurukul News Portal Security Vulnerabilities

News Portal is a news portal. News Portal has a hard-coded vulnerability that stems from the use of a fixed encryption key for the handling of the SECRETKEY parameter in the file /onps/settings.py. An attacker could exploit this vulnerability to obtain sensitive system information...

8.1CVSS5.6AI score0.00417EPSS
SaveExploits1References5
CNNVD
CNNVD
•added 2025/11/03 12:00 a.m.•24 views

Light & Wonder Deck Mate security vulnerabilities

Light & Wonder Deck Mate is an automated licensing device from Light & Wonder UK. A security vulnerability exists in the Light & Wonder Deck Mate that stems from the use of hard-coded credentials and the enabling of multiple management services by default, which could lead to unauthorized...

7CVSS5.9AI score0.00196EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2025/11/03 12:00 a.m.•17 views

PT-2025-44748

Name of the Vulnerable Software and Affected Versions PHPGurukul News Portal version 1.0 Description A security issue exists in PHPGurukul News Portal. Manipulation of the SECRET KEY argument within an unknown function in the /onps/settings.py file results in the use of a hard-coded cryptographic...

8.1CVSS5.4AI score0.00417EPSS
SaveExploits1References9
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/11/01 12:00 a.m.•9 views

CVE-2025-12599: Use of Hard-coded Cryptographic Key

Multiple Devices are Sharing the Same Secrets for SDKSocket TCP/5000.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5...

10CVSS5.8AI score0.00426EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2025/10/31 10:10 a.m.•37 views

CVE-2025-54471

NeuVector used a hard-coded cryptographic key embedded in the source code. At compilation time, the key value was replaced with the secret key value and used to encrypt sensitive configurations when NeuVector stores the data...

6.5CVSS8.4AI score0.00268EPSS
SaveExploits0References1
NVD
NVD
•added 2025/10/30 10:15 a.m.•22 views

CVE-2025-54471

NeuVector used a hard-coded cryptographic key embedded in the source code. At compilation time, the key value was replaced with the secret key value and used to encrypt sensitive configurations when NeuVector stores the data...

6.5CVSS0.00268EPSS
SaveExploits0References2
osv_cve
osv_cve
•added 2025/10/30 9:45 a.m.•15 views

CVE-2025-54471 NeuVector is shipping cryptographic material into its binary

NeuVector used a hard-coded cryptographic key embedded in the source code. At compilation time, the key value was replaced with the secret key value and used to encrypt sensitive configurations when NeuVector stores the data...

6.5CVSS8.1AI score0.00268EPSS
SaveExploits0References4
CVE
CVE
•added 2025/10/30 9:45 a.m.•44 views

CVE-2025-54471

The CVE-2025-54471 entry concerns NeuVector where a hard-coded cryptographic key was embedded in the source and replaced at compile time, then used to encrypt sensitive configurations stored by NeuVector. Affected data and configurations could be exposed due to the improper key handling. The prov...

6.5CVSS8.1AI score0.00268EPSS
SaveExploits0References2
Mend
Mend
•added 2025/10/30 9:45 a.m.•5 views

CVE-2025-54471

NeuVector used a hard-coded cryptographic key embedded in the source code. At compilation time, the key value was replaced with the secret key value and used to encrypt sensitive configurations when NeuVector stores the data...

7.1CVSS8.1AI score0.00268EPSS
SaveExploits0References6
Cvelist
Cvelist
•added 2025/10/30 9:45 a.m.•34 views

CVE-2025-54471 NeuVector is shipping cryptographic material into its binary

NeuVector used a hard-coded cryptographic key embedded in the source code. At compilation time, the key value was replaced with the secret key value and used to encrypt sensitive configurations when NeuVector stores the data...

6.5CVSS0.00268EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/10/30 12:00 a.m.•3 views

CVE-2025-54471: Use of Hard-coded Cryptographic Key

NeuVector used a hard-coded cryptographic key embedded in the source code. At compilation time, the key value was replaced with the secret key value and used to encrypt sensitive configurations when NeuVector stores the data...

6.5CVSS8.3AI score0.00268EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2025/10/30 12:00 a.m.•20 views

NeuVector security vulnerabilities

NeuVector is an end-to-end container security platform from US-based NeuVector. The platform includes features such as image vulnerability management, access control and container process/filesystem protection. NeuVector suffers from a security vulnerability that stems from the use of hard-coded...

6.5CVSS8.3AI score0.00268EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2025/10/29 5:02 a.m.•29 views

CVE-2025-62777

Use of Hard-Coded Credentials issue exists in MZK-DP300N version 1.07 and earlier, which may allow an attacker within the local network to log in to the affected device via Telnet and execute arbitrary commands...

8.8CVSS7.1AI score0.00272EPSS
SaveExploits0References1
Rows per page
Query Builder