Lucene search
+L

11660 matches found

Positive Technologies
Positive Technologies
•added 2025/09/22 12:00 a.m.•15 views

PT-2025-38948

Name of the Vulnerable Software and Affected Versions Essekia Helpie FAQ versions through 1.39 Description A hard-coded credentials issue exists in Essekia Helpie FAQ, potentially allowing retrieval of embedded sensitive data. The issue affects the application's functionality related to...

5.3CVSS6.6AI score0.0029EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2025/09/22 12:00 a.m.•23 views

PT-2025-38931

Name of the Vulnerable Software and Affected Versions weDevs WP Project Manager versions through 2.6.25 Description The software contains hard-coded credentials, potentially allowing retrieval of embedded sensitive data. Recommendations Update weDevs WP Project Manager to a version later than...

5.3CVSS6.6AI score0.0029EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2025/09/21 12:00 a.m.•28 views

PPress security vulnerabilities

PPress is a Python-based blogging CMS system by the individual developer yandaozi. A security vulnerability exists in PPress version 0.0.9, which stems from hard-coded credentials included in the default configuration...

8.8CVSS5.8AI score0.00421EPSS
SaveExploits3References1
RedhatCVE
RedhatCVE
•added 2025/09/19 3:28 p.m.•19 views

CVE-2024-48842

Use of Hard-coded Credentials vulnerability in ABB FLXEON.This issue affects FLXEON: through 9.3.5 and newer versions...

7.3CVSS7AI score0.00174EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/09/19 12:00 a.m.•6 views

CVE-2025-52159: Use of Hard-coded Credentials

Hardcoded credentials in default configuration of PPress 0.0.9...

8.8CVSS5.8AI score0.00421EPSS
SaveExploits3References1
NVD
NVD
•added 2025/09/18 9:15 p.m.•21 views

CVE-2025-54754

An attacker with adjacent access, without authentication, can exploit this vulnerability to retrieve a hard-coded password embedded in publicly available software. This password can then be used to decrypt sensitive network traffic, affecting the Cognex device...

8.6CVSS0.00251EPSS
SaveExploits0References1
CVE
CVE
•added 2025/09/18 9:06 p.m.•38 views

CVE-2025-54754

CVE-2025-54754 affects Cognex In-Sight Explorer and In-Sight Camera firmware. The vulnerability arises from a hard-coded password embedded in publicly available software, which an adjacent attacker with no authentication can retrieve to decrypt sensitive network traffic on Cognex devices. Documen...

8.6CVSS5.8AI score0.00251EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/09/18 9:06 p.m.•14 views

CVE-2025-54754 Cognex In-Sight Explorer and In-Sight Camera Firmware Use of Hard-coded Password

An attacker with adjacent access, without authentication, can exploit this vulnerability to retrieve a hard-coded password embedded in publicly available software. This password can then be used to decrypt sensitive network traffic, affecting the Cognex device...

8.6CVSS5.8AI score0.00251EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/09/18 9:06 p.m.•34 views

CVE-2025-54754 Cognex In-Sight Explorer and In-Sight Camera Firmware Use of Hard-coded Password

An attacker with adjacent access, without authentication, can exploit this vulnerability to retrieve a hard-coded password embedded in publicly available software. This password can then be used to decrypt sensitive network traffic, affecting the Cognex device...

8.6CVSS0.00251EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/09/18 8:44 p.m.•11 views

CVE-2025-54807 Dover Fueling Solutions ProGauge MagLink LX 4 Devices Use of Hard-coded Cryptographic Key

The secret used for validating authentication tokens is hardcoded in device firmware for affected versions. An attacker who obtains the signing key can bypass authentication, gaining complete access to the system...

9.8CVSS5.9AI score0.00749EPSS
SaveExploits0References3
CVE
CVE
•added 2025/09/18 8:44 p.m.•51 views

CVE-2025-54807

CVE-2025-54807 affects Dover Fueling Solutions ProGauge MagLink LX4 devices and related MAGLINK LX Console family. The root cause is a hard-coded cryptographic key used to validate authentication tokens embedded in affected device firmware. This allows an attacker who obtains the signing key to b...

9.8CVSS5.9AI score0.00749EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2025/09/18 8:44 p.m.•57 views

CVE-2025-54807 Dover Fueling Solutions ProGauge MagLink LX 4 Devices Use of Hard-coded Cryptographic Key

The secret used for validating authentication tokens is hardcoded in device firmware for affected versions. An attacker who obtains the signing key can bypass authentication, gaining complete access to the system...

9.8CVSS0.00749EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2025/09/18 12:00 a.m.•21 views

PT-2025-38486

Name of the Vulnerable Software and Affected Versions Cognex device affected versions not specified Description An attacker with adjacent access, without authentication, can retrieve a hard-coded password embedded in the software. This password can be used to decrypt sensitive network traffic...

8.6CVSS6.4AI score0.00251EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/09/18 12:00 a.m.•9 views

CVE-2025-54754: Use of Hard-coded Password

An attacker with adjacent access, without authentication, can exploit this vulnerability to retrieve a hard-coded password embedded in publicly available software. This password can then be used to decrypt sensitive network traffic, affecting the Cognex device...

8.6CVSS5.8AI score0.00251EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2025/09/18 12:00 a.m.•24 views

Dover Fueling Solutions’ various products have security vulnerabilities

Dover Fueling Solutions MAGLINK LX Console and others are products of Dover Fueling Solutions.Dover Fueling Solutions MAGLINK LX Console is an integrated console for fuel stations and oil distribution. This console is designed to help manage the various operations of a fuel station, including...

9.8CVSS5.9AI score0.00749EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/09/18 12:00 a.m.•7 views

CVE-2025-54807: Use of Hard-coded Cryptographic Key

The secret used for validating authentication tokens is hardcoded in device firmware for affected versions. An attacker who obtains the signing key can bypass authentication, gaining complete access to the system...

9.8CVSS5.9AI score0.00749EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2025/09/18 12:00 a.m.•18 views

Cognex’s various products have security vulnerabilities

Cognex In-Sight Explorer and Cognex In-Sight Camera Firmware are both products of Cognex Corporation, U.S.A. Cognex In-Sight Explorer is a tool that has the ability to debug and program the software of its line of smart cameras.Cognex In-Sight Camera Firmware is firmware for a range of smart...

8.6CVSS5.8AI score0.00251EPSS
SaveExploits0References2
NVD
NVD
•added 2025/09/17 3:15 p.m.•22 views

CVE-2024-48842

Use of Hard-coded Credentials vulnerability in ABB FLXEON.This issue affects FLXEON: through 9.3.5 and newer versions...

7.3CVSS0.00174EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/09/17 2:48 p.m.•35 views

CVE-2024-48842 Hardcoded passwords

Use of Hard-coded Credentials vulnerability in ABB FLXEON.This issue affects FLXEON: through 9.3.5 and newer versions...

7.3CVSS0.00174EPSS
SaveExploits0References1
CVE
CVE
•added 2025/09/17 2:48 p.m.•41 views

CVE-2024-48842

CVE-2024-48842 affects ABB FLXEON controllers (through 9.3.5 and newer). The vulnerability arises from hard-coded credentials in the product, combined with improper input validation leading to remote code execution. The ICSA/CISA summary notes credentials handling weaknesses (passwords may be sto...

7.3CVSS5.7AI score0.00174EPSS
SaveExploits0References1
Rows per page
Query Builder