CVE-2024-32210

The LoMag WareHouse Management application version 1.0.20.120 and older were to utilize hard-coded passwords by default for forms and SQL connections...

CVE-2024-32213

The LoMag WareHouse Management application version 1.0.20.120 and older were found to allow weak passwords. By default, hard-coded passwords of 10 characters with little or no complexity are allowed...

CVE-2024-29011: Use of Hard-coded Password

Use of hard-coded password in the GMS ECM endpoint leading to authentication bypass vulnerability. This issue affects GMS: 9.3.4 and earlier versions...

CVE-2024-32213: Weak Password Requirements

The LoMag WareHouse Management application version 1.0.20.120 and older were found to allow weak passwords. By default, hard-coded passwords of 10 characters with little or no complexity are allowed...

CVE-2024-32210: Use of Hard-coded Password

The LoMag WareHouse Management application version 1.0.20.120 and older were to utilize hard-coded passwords by default for forms and SQL connections...

PT-2024-24461

Name of the Vulnerable Software and Affected Versions LoMag WareHouse Management application versions 1.0.20.120 and older Description The issue concerns the use of hard-coded passwords by default for forms and SQL connections. Recommendations For versions 1.0.20.120 and older, update the...

PT-2024-24464

Name of the Vulnerable Software and Affected Versions LoMag WareHouse Management application versions 1.0.20.120 and older Description The issue allows weak passwords. By default, hard-coded passwords of 10 characters with little or no complexity are allowed. Recommendations For versions 1.0.20.1...

LoMag WareHouse Management security vulnerability

LoMag WareHouse Management is a warehouse management software from LoMag. A security vulnerability exists in LoMag WareHouse Management versions 1.0.20.120 and earlier, which stems from the use of hard-coded passwords for forms and SQL connections by default...

LoMag WareHouse Management security vulnerability

LoMag WareHouse Management is a warehouse management software from LoMag. A security vulnerability exists in LoMag WareHouse Management version 1.0.20.120 and prior versions, which stems from a 10-character hard-coded password that is allowed by default...

SonicWALL GMS security vulnerabilities

SonicWALL GMS is a global management system from SonicWALL, Inc. a powerful and intuitive solution for organizations, distributed enterprises, and service providers to centrally manage and rapidly deploy SonicWall Firewall, Anti-Spam, Backup and Recovery, and Secure Remote Access solutions. A...

Juniper Cloud Native Router Man-in-the-Middle

The vulnerability of software solutions for Juniper Cloud Native Router JCNR and Containerized Routing Protocol Daemon cRPD is related to the use of hard-coded host SSH keys. Exploiting this vulnerability allows a remote attacker to execute a “man-in-the-middle” type attack...

GMS ECM multiple vulnerabilities

SonicWall GMS Virtual Appliance, Windows - 9.3.4 and earlier versions are vulnerable to the following security issues.1 CVE-2024-29010 - GMS ECM Policy XML External Entity Processing Information Disclosure Vulnerability.The XML document processed in the GMS ECM endpoint is vulnerable to XML...

CVE-2019-19754: Use of Hard-coded Cryptographic Key

HiveOS through 0.6-102@191212 ships with SSH host keys baked into the installation image, which allows man-in-the-middle attacks and makes identification of all public IPv4 nodes trivial with Shodan.io. NOTE: as of 2019-09-26, the vendor indicated that they would consider fixing this...

CVE-2019-19753: Use of Hard-coded Cryptographic Key

SimpleMiningOS through v1259 ships with SSH host keys baked into the installation image, which allows man-in-the-middle attacks and makes identification of all public IPv4 nodes trivial with Shodan.io. NOTE: the vendor indicated that they have no plans to fix this, and discourage deployment using...

CVE-2019-19752: Use of Hard-coded Cryptographic Key

nvOC through 3.2 ships with SSH host keys baked into the installation image, which allows man-in-the-middle attacks and makes identification of all public IPv4 nodes trivial with Shodan.io. NOTE: as of 2019-12-01, the vendor indicated plans to fix this in the next image build...

PT-2024-22670 · Sonicwall · Sonicwall Gms

Name of the Vulnerable Software and Affected Versions: SonicWALL GMS versions 9.3.4 and earlier Description: The issue is related to the use of a hard-coded password in the GMS ECM endpoint, leading to an authentication bypass. This allows remote attackers to bypass authentication on affected...

CVE-2023-52723: Use of Hard-coded Credentials

In KDE libksieve before 23.03.80, kmanagesieve/session.cpp places a cleartext password in server logs because a username variable is accidentally given a password value...

Fortinet FortiClient Hardcoded credentials in vcm2.exe (FG-IR-23-108)

The version of FortiClient installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the FG-IR-23-108 advisory. - A use of hard-coded credentials vulnerability in Fortinet FortiClient Windows 7.0.0 - 7.0.9 and 7.2.0 - 7.2.1 allows an...

CVE-2024-22813: Use of Hard-coded Credentials

An issue in Tormach xsTECH CNC Router, PathPilot Controller v2.9.6 allows attackers to overwrite the hardcoded IP address in the device memory, disrupting network connectivity between the router and the controller...

Tormach PathPilot Controller security vulnerabilities

Tormach PathPilot Controller is a series of controllers from Tormach USA. A security vulnerability exists in Tormach PathPilot Controller version v2.9.6. An attacker exploiting this vulnerability could overwrite a hard-coded IP address in the device's memory, thereby disrupting the network...