Lucene search
+L

11462 matches found

Vulnrichment
Vulnrichment
•added 2026/09/17 4:01 a.m.•22 views

CVE-2026-50603 Hard-coded encryption key vulnerability in Acer Agent Service for NitroSense and PredatorSense

A vulnerability has been identified in the Acer Agent Service component included with NitroSense and PredatorSense. The vulnerability is caused by the use of a hard-coded AES encryption key within the software. Under certain circumstances, a local attacker may be able to use the embedded key to...

7.1CVSS5.7AI score0.00099EPSS
SaveExploits0References1
CVE
CVE
•added 2026/09/17 4:01 a.m.•40 views

CVE-2026-50603

CVE-2026-50603 affects the Acer Agent Service component bundled with NitroSense and PredatorSense . The root cause is a hard-coded AES encryption key embedded in the software, which under certain circumstances allows a local attacker (with no privileges and no user interaction) to access protecte...

7.1CVSS5.7AI score0.00099EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/09/17 4:01 a.m.•49 views

CVE-2026-50603 Hard-coded encryption key vulnerability in Acer Agent Service for NitroSense and PredatorSense

A vulnerability has been identified in the Acer Agent Service component included with NitroSense and PredatorSense. The vulnerability is caused by the use of a hard-coded AES encryption key within the software. Under certain circumstances, a local attacker may be able to use the embedded key to...

7.1CVSS0.00099EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/09/17 12:00 a.m.•10 views

PT-2026-94153

Name of the Vulnerable Software and Affected Versions Acer Agent Service affected versions not specified Description The Acer Agent Service component, included with NitroSense and PredatorSense, uses a hard-coded AES encryption key. This allows a local attacker to potentially access protected...

7.1CVSS5.8AI score0.00099EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/17 12:00 a.m.•13 views

CVE-2026-50606: Use of Hard-coded Cryptographic Key

A vulnerability has been identified in the Acer System Monitoring component included with NitroSense and PredatorSense. The vulnerability is caused by the use of a hard-coded AES encryption key within the software. Under certain circumstances, a local attacker may be able to use the embedded key ...

5.1CVSS5.7AI score0.00099EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/17 12:00 a.m.•5 views

CVE-2026-81478: Use of Hard-coded Cryptographic Key

Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains a Use of Hard-coded Cryptographic Key vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Unauthorized access...

9.8CVSS6AI score0.0029EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/17 12:00 a.m.•12 views

CVE-2026-50603: Use of Hard-coded Cryptographic Key

A vulnerability has been identified in the Acer Agent Service component included with NitroSense and PredatorSense. The vulnerability is caused by the use of a hard-coded AES encryption key within the software. Under certain circumstances, a local attacker may be able to use the embedded key to...

7.1CVSS5.7AI score0.00099EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/17 12:00 a.m.•11 views

CVE-2026-52727: Use of Hard-coded Cryptographic Key

lxc-ci contains continuous integration and image-build scripts for LXC. Prior to the 2026-05-28 Arch Linux image publication, images built from images/archlinux.yaml retain the same pacman local-signing private key in /etc/pacman.d/gnupg and redistribute it to every container or virtual machine...

7.2CVSS6.5AI score0.00594EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/09/17 12:00 a.m.•7 views

PT-2026-94233

Name of the Vulnerable Software and Affected Versions Dell OpenManage Server Administrator versions prior to 11.1.0.3 Description An issue exists involving the use of a hard-coded cryptographic key. This allows an unauthenticated attacker with remote access to potentially gain unauthorized access...

9.8CVSS6AI score0.0029EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2026/09/17 12:00 a.m.•12 views

PT-2026-94189

Name of the Vulnerable Software and Affected Versions Acer System Monitoring affected versions not specified Description The Acer System Monitoring component, included with NitroSense and PredatorSense, contains a hard-coded AES encryption key. AES Advanced Encryption Standard is a symmetric bloc...

5.1CVSS5.9AI score0.00099EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/17 12:00 a.m.•5 views

CVE-2026-81440: Use of Hard-coded Credentials

Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains a Use of Hard-coded Credentials vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Unauthorized access...

9.8CVSS6AI score0.0021EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/09/17 12:00 a.m.•8 views

PT-2026-94231

Name of the Vulnerable Software and Affected Versions Dell OpenManage Server Administrator versions prior to 11.1.0.3 Description An issue exists where hard-coded credentials are used, allowing an unauthenticated attacker with remote access to potentially gain unauthorized access to the system...

7.3CVSS5.9AI score0.0021EPSS
SaveExploits0References3
Snyk
Snyk
•added 2026/09/16 9:30 p.m.•15 views

Use of Hard-coded Credentials

Overview feast is a Python SDK for Feast Affected versions of this package are vulnerable to Use of Hard-coded Credentials via unverified intra-server JWT handling in sdk/python/feast/permissions/auth/oidctokenparser.py, sdk/python/feast/permissions/auth/kubernetestokenparser.py, and...

9.8CVSS5.8AI score0.007EPSS
SaveExploits0References2
GithubExploit
GithubExploit
•added 2026/09/16 5:34 p.m.•38 views

Exploit for CVE-2026-89026

CVE-2026-89026 Issabel pbxapi hard coded JWT RCE POC Issabel...

9.8CVSS6.2AI score0.00685EPSS
SaveExploits2
The Hacker News
The Hacker News
•added 2026/09/16 3:50 p.m.•23 views

Attackers Exploit Issabel Framework Flaw Enabling Unauthenticated OS Command Execution

A critical security flaw in Issabel Framework, a web-based framework for the open-source unified communications PBX software, has come under active exploitation. The vulnerability in question is CVE-2026-89026 CVSS v3.1 score: 9.8/CVSS v4.0 score: 9.3, which can allow an unauthenticated remote...

9.8CVSS6.5AI score0.00685EPSS
SaveExploits2
NVD
NVD
•added 2026/09/16 8:16 a.m.•25 views

CVE-2026-81326

QND uses a hard-coded cryptographic key, which may allow a local attacker who is logged in to a Windows PC where the affected product's client is installed to obtain administrator credentials, including an ID and password...

6.8CVSS0.00138EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2026/09/16 7:29 a.m.•40 views

CVE-2026-81326

QND uses a hard-coded cryptographic key, which may allow a local attacker who is logged in to a Windows PC where the affected product's client is installed to obtain administrator credentials, including an ID and password...

6.8CVSS0.00138EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2026/09/16 7:29 a.m.•23 views

CVE-2026-81326

QND uses a hard-coded cryptographic key, which may allow a local attacker who is logged in to a Windows PC where the affected product's client is installed to obtain administrator credentials, including an ID and password...

6.8CVSS6.6AI score0.00138EPSS
SaveExploits0References2
CVE
CVE
•added 2026/09/16 7:29 a.m.•43 views

CVE-2026-81326

CVE-2026-81326 affects QND by QualitySoft, a product whose client is installed on Windows PCs. The root cause is a hard-coded cryptographic key , which may allow a local attacker with logged-in access to the client machine to obtain administrator credentials , including an ID and password. The vu...

6.8CVSS6.6AI score0.00138EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/09/16 7:29 a.m.•20 views

EUVD-2026-80226

QND uses a hard-coded cryptographic key, which may allow a local attacker who is logged in to a Windows PC where the affected product's client is installed to obtain administrator credentials, including an ID and password...

6.8CVSS5.9AI score0.00138EPSS
SaveExploits0References2
Rows per page
Query Builder