10194 matches found
CVE-2025-5023
Use of Hard-coded Credentials vulnerability in Mitsubishi Electric Corporation photovoltaic system monitor “EcoGuideTAB” PV-DR004J all versions and PV-DR004JA all versions allows an attacker within the Wi-Fi communication range between the units of the product measurement unit and display unit to...
Ivanti Desktop and Server Management 安全漏洞
Ivanti Desktop and Server Management Ivanti DSM is a multi-platform, unified endpoint management solution from Ivanti Corporation, USA. A security vulnerability exists in Ivanti Desktop and Server Management versions prior to 2024.2, which stems from a hard-coded key that could allow an...
GHSA-2HFH-94W5-WXVF ZPan Uses Hard-Coded Password
A vulnerability was found in saltbo zpan up to 1.6.5/1.7.0-beta2. It has been rated as problematic. This issue affects the function NewToken of the file zpan/internal/app/service/token.go of the component JSON Web Token Handler. The manipulation with the input 123 leads to use of hard-coded...
Use of Hard-coded Password
Overview Affected versions of this package are vulnerable to Use of Hard-coded Password via the NewToken function. An attacker can gain unauthorized access to sensitive information by exploiting the use of a hard-coded password in the JSON Web Token handling process. Remediation There is no fixed...
CVE-2025-7453
A vulnerability was found in saltbo zpan up to 1.6.5/1.7.0-beta2. It has been rated as problematic. This issue affects the function NewToken of the file zpan/internal/app/service/token.go of the component JSON Web Token Handler. The manipulation with the input 123 leads to use of hard-coded...
CVE-2025-7453 saltbo zpan JSON Web Token token.go NewToken hard-coded password
A vulnerability was found in saltbo zpan up to 1.6.5/1.7.0-beta2. It has been rated as problematic. This issue affects the function NewToken of the file zpan/internal/app/service/token.go of the component JSON Web Token Handler. The manipulation with the input 123 leads to use of hard-coded...
CVE-2025-7453 saltbo zpan JSON Web Token token.go NewToken hard-coded password
A vulnerability was found in saltbo zpan up to 1.6.5/1.7.0-beta2. It has been rated as problematic. This issue affects the function NewToken of the file zpan/internal/app/service/token.go of the component JSON Web Token Handler. The manipulation with the input 123 leads to use of hard-coded...
CVE-2025-7453
Saltbo zpan CVE-2025-7453 affects the JSON Web Token Handler’s NewToken function in zpan/internal/app/service/token.go. The root cause is use of a hard-coded password when processing input 123, enabling remote exploitation. Affected versions are up to 1.6.5 and 1.7.0-beta2. Exploitation is descri...
CVE-2025-7453 saltbo zpan JSON Web Token token.go NewToken hard-coded password
A vulnerability was found in saltbo zpan up to 1.6.5/1.7.0-beta2. It has been rated as problematic. This issue affects the function NewToken of the file zpan/internal/app/service/token.go of the component JSON Web Token Handler. The manipulation with the input 123 leads to use of hard-coded...
Shenzhen Liandian Communication Technology V380 IP Camera 安全漏洞
Shenzhen Liandian Communication Technology V380 IP Camera is a camera from Shenzhen Liandian Communication Technology. A security vulnerability exists in the Shenzhen Liandian Communication Technology V380 IP Camera AppFHE1V1.0.6.0 version, which stems from the default enablement of Telnet servic...
ZPan 安全漏洞
ZPan is a cloud storage based web disk system by the individual developer Jasper Van. A security vulnerability exists in ZPan 1.6.5 and 1.7.0-beta2 and earlier versions, which stems from the use of hard-coded passwords...
The vulnerability of the Windows Virtual Hard Disk component allows a hacker to execute arbitrary code.
The vulnerability of the Windows Virtual Hard Disk component in Windows operating systems is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
PT-2025-29275
Name of the Vulnerable Software and Affected Versions: saltbo zpan versions up to 1.6.5 saltbo zpan version 1.7.0-beta2 Description: A vulnerability exists in saltbo zpan related to the JSON Web Token Handler component. The issue affects the NewToken function within the...
Acclaim Systems USAHERDS Hard-Coded Credentials (CVE-2021-44207)
The version of Acclaim Systems USAHERDS running on the remote host may be missing a vendor supplied patch. It is possible, therefore, that it is affected by a vulnerability: it might use hard-coded credentials. Note that Nessus has not tested for this issue. %NASLMINLEVEL 80900 C Tenable, Inc...
The vulnerability of the Windows Virtual Hard Disk component of the Microsoft Windows operating system, which allows a hacker to exploit their privileges
The vulnerability of the Windows Virtual Hard Disk component of the Microsoft Windows operating system is related to operations that go beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to increase their privileges...
SUSE CVE-2025-38335
In the Linux kernel, the following vulnerability has been resolved: Input: gpio-keys - fix a sleep while atomic with PREEMPTRT When enabling PREEMPTRT, the gpiokeysirqtimer callback runs in hard irq context, but the inputevent takes a spinlock, which isn't allowed there as it is converted to a...
CVE-2025-37103
Hard-coded login credentials were found in HPE Networking Instant On Access Points, allowing anyone with knowledge of it to bypass normal device authentication. Successful exploitation could allow a remote attacker to gain administrative access to the system...
CVE-2025-47973
Buffer over-read in Virtual Hard Disk VHDX allows an unauthorized attacker to elevate privileges locally...