Lucene search
+L

8216 matches found

OSV
OSV
added 2025/12/12 3:11 p.m.7 views

CVE-2025-54947 Apache StreamPark: Use hard-coded key vulnerability

In Apache StreamPark versions 2.0.0 through 2.1.7, a security vulnerability involving a hard-coded encryption key exists. This vulnerability occurs because the system uses a fixed, immutable key for encryption instead of dynamically generating or securely configuring the key. Attackers may obtain...

5.3CVSS6.2AI score
SaveExploits0References4
CNNVD
CNNVD
added 2025/12/12 12:0 a.m.11 views

Gladinet CentreStack 安全漏洞

Gladinet CentreStack is a premier mobile access and secure sharing solution from Gladinet USA. Provides self-hosted cloud storage. A security vulnerability exists in versions prior to Gladinet CentreStack 16.12.10420.56791, which stems from the use of hard-coded values in the AES encryption schem...

9.8CVSS6.4AI score0.50949EPSS
SaveExploits3References1
CNNVD
CNNVD
added 2025/12/12 12:0 a.m.7 views

Apache StreamPark 安全漏洞

Apache StreamPark is a streaming media application development framework from the Apache Foundation USA. A security vulnerability exists in Apache StreamPark versions prior to 2.1.7, which stems from the use of hard-coded encryption keys that could lead to information disclosure or unauthorized...

9.8CVSS6.1AI score0.00456EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2025/12/12 12:0 a.m.10 views

PT-2025-50939

In Apache StreamPark versions 2.0.0 through 2.1.7, a security vulnerability involving a hard-coded encryption key exists. This vulnerability occurs because the system uses a fixed, immutable key for encryption instead of dynamically generating or securely configuring the key. Attackers may obtain...

6.6AI score0.00456EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
added 2025/12/11 8:39 a.m.16 views

CVE-2025-13954

Hard-coded cryptographic keys in Admin UI of EZCast Pro II before version 1.17478.177 allows attackers to bypass authorization checks and gain full access to the admin UI...

9.3CVSS5.8AI score0.00161EPSS
SaveExploits0References1
The Hacker News
The Hacker News
added 2025/12/11 5:56 a.m.11 views

Active Attacks Exploit Gladinet's Hard-Coded Keys for Unauthorized Access and Code Execution

Huntress is warning of a new actively exploited vulnerability in Gladinet's CentreStack and Triofox products stemming from the use of hard-coded cryptographic keys that have affected nine organizations so far. "Threat actors can potentially abuse this as a way to access the web.config file, openi...

9.8CVSS9.9AI score0.93842EPSS
SaveExploits10
RedhatCVE
RedhatCVE
added 2025/12/10 9:16 p.m.9 views

CVE-2021-47731

Selea Targa IP OCR-ANPR Camera contains a hard-coded developer password vulnerability that allows unauthorized configuration access through an undocumented page. Attackers can exploit the hidden endpoint by using the hard-coded password 'Selea781830' to enable configuration upload and overwrite...

9.3CVSS7.1AI score0.00507EPSS
SaveExploits1References1
NVD
NVD
added 2025/12/10 9:15 a.m.8 views

CVE-2025-13954

Hard-coded cryptographic keys in Admin UI of EZCast Pro II before version 1.17478.177 allows attackers to bypass authorization checks and gain full access to the admin UI...

9.3CVSS0.00161EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2025/12/10 8:29 a.m.5 views

CVE-2025-13954 Hard-coded cryptographic keys in EZCast Pro II Dongle

Hard-coded cryptographic keys in Admin UI of EZCast Pro II before version 1.17478.177 allows attackers to bypass authorization checks and gain full access to the admin UI...

9.3CVSS5.8AI score0.00161EPSS
SaveExploits0References2
EUVD
EUVD
added 2025/12/10 8:29 a.m.7 views

EUVD-2025-202408

Hard-coded cryptographic keys in Admin UI of EZCast Pro II version 1.17478.146 allows attackers to bypass authorization checks and gain full access to the admin UI...

9.3CVSS6.5AI score0.00161EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2025/12/10 8:29 a.m.5 views

CVE-2025-13954

Hard-coded cryptographic keys in Admin UI of EZCast Pro II before version 1.17478.177 allows attackers to bypass authorization checks and gain full access to the admin UI...

9.3CVSS5.8AI score0.00161EPSS
SaveExploits0References3
CVE
CVE
added 2025/12/10 8:29 a.m.22 views

CVE-2025-13954

Summary: EZCast Pro II Admin UI (version 1.17478.146) exposes hard-coded cryptographic keys, allowing bypass of authorization checks and granting full admin UI access. Affected product/component: EZCast Pro II Admin UI. Root cause: hard-coded cryptographic keys in the Admin UI. Impact: unauthoriz...

9.3CVSS5.8AI score0.00161EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2025/12/10 8:29 a.m.38 views

CVE-2025-13954 Hard-coded cryptographic keys in EZCast Pro II Dongle

Hard-coded cryptographic keys in Admin UI of EZCast Pro II before version 1.17478.177 allows attackers to bypass authorization checks and gain full access to the admin UI...

9.3CVSS0.00161EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2025/12/10 12:0 a.m.7 views

Ezcast EZCast Pro II 安全漏洞

Ezcast EZCast Pro II is a computer screen projection software from China Torch North Ezcast. The software supports the computer device in the information, through the wireless sharing to the TV or projection screen, EZCast Pro support screen 4 allocation, projection rights allocation. A security...

9.3CVSS6.6AI score0.00161EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2025/12/10 12:0 a.m.8 views

Meatmeet Pro BBQ Thermometer 安全漏洞

Meatmeet Pro BBQ Thermometer is an advanced smart thermometer from Meatmeet. A security vulnerability exists in the Meatmeet Pro BBQ Thermometer version v1.0.34.4, which stems from the inclusion of hard-coded Wi-Fi credentials in the firmware, which could lead to unauthorized network access...

9.8CVSS6.7AI score0.00387EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2025/12/10 12:0 a.m.7 views

Meatmeet Pro App 安全漏洞

Meatmeet Pro App is a meat product purchasing app from Meatmeet, Inc. A security vulnerability exists in Meatmeet Pro App version v1.1.2.0, which stems from the mobile app storing hard-coded credentials that could lead to unauthorized network access...

9.8CVSS6.6AI score0.00264EPSS
SaveExploits0References3
CNVD
CNVD
added 2025/12/10 12:0 a.m.8 views

Advantech WISE-DeviceOn Server Hard-Coded Encryption Key Vulnerability

Advantech WISE-DeviceOn Server is Advantech's next-generation unified device management solution based on the WISE-DeviceOn platform. Advantech WISE-DeviceOn Server suffers from a hard-coded encryption key vulnerability that can be exploited by an attacker to impersonate an arbitrary account...

10CVSS7AI score0.00681EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/12/10 12:0 a.m.8 views

PT-2025-50309

Name of the Vulnerable Software and Affected Versions EZCast Pro II version 1.17478.146 Description The Admin UI contains hard-coded cryptographic keys. This allows attackers to bypass authorization checks and gain full access to the admin UI. Recommendations Update to a newer version that does n...

9.3CVSS5.8AI score0.00161EPSS
SaveExploits0References8
EUVD
EUVD
added 2025/12/09 9:31 p.m.13 views

EUVD-2021-34740

Selea Targa IP OCR-ANPR Camera contains a hard-coded developer password vulnerability that allows unauthorized configuration access through an undocumented page. Attackers can exploit the hidden endpoint by using the hard-coded password 'Selea781830' to enable configuration upload and overwrite...

9.3CVSS6.6AI score0.00507EPSS
SaveExploits1References6
OSV
OSV
added 2025/12/09 9:15 p.m.7 views

CVE-2021-47731

Selea Targa IP OCR-ANPR Camera contains a hard-coded developer password vulnerability that allows unauthorized configuration access through an undocumented page. Attackers can exploit the hidden endpoint by using the hard-coded password 'Selea781830' to enable configuration upload and overwrite...

9.8CVSS5.8AI score0.00507EPSS
SaveExploits1References5
Rows per page
Query Builder