12927 matches found
FreeBSD : cjose -- Use of Hard-coded Cryptographic Key (3a38fdda-b05a-11f1-9369-b42e991fc52e)
The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 3a38fdda-b05a-11f1-9369-b42e991fc52e advisory. https://github.com/OpenIDC/cjose/security/advisories/GHSA-f6wf-pqg3-6wqq reports: OpenIDC/cjose is a C...
PT-2026-91291
Crawlab through 0.6.3 uses a hard-coded HMAC-SHA256 secret for JWT token signing that cannot be overridden via configuration or environment variables. Unauthenticated attackers can forge valid administrator tokens to access administrative APIs and execute code on worker nodes...
CVE-2026-82049: Improper Link Resolution Before File Access
In CPython 3.13 and earlier, the tarfile module's data and tar extraction filters are vulnerable to crafted archives containing a hard link to a symbolic link. Such archives may cause extraction to modify the permissions or modification time of a file outside the destination directory, or expose...
PT-2026-91410
Name of the Vulnerable Software and Affected Versions CPython versions prior to 3.14 Description The tarfile module's data and extraction filters are susceptible to a bypass when processing crafted archives containing a hard link that targets a symbolic link. This issue occurs during the executio...
CVE-2026-90510
A security vulnerability has been detected in dromara orion-visor up to 2.5.7. This affects the function HostKeyServiceImpl.encryptKey of the file...
CVE-2026-90509
A weakness has been identified in dromara orion-visor up to 2.5.7. Affected by this issue is the function ExposeApiAspect.beforeExposeApi of the file ExposeApiAspect.java. Executing a manipulation can lead to hard-coded credentials. The attack can be executed remotely. The exploit has been made...
CVE-2026-90510
dromara orion-visor (up to version 2.5.7) contains a hard-coded AES cryptographic key in the HostKeyServiceImpl.encryptKey function within the asset-service module. This CWE-321 flaw allows a remote attacker, with no privileges or user interaction, to decrypt SSH private keys and host passwords s...
CVE-2026-90510 dromara orion-visor HostKeyServiceImpl.java HostKeyServiceImpl.encryptKey hard-coded key
A security vulnerability has been detected in dromara orion-visor up to 2.5.7. This affects the function HostKeyServiceImpl.encryptKey of the file...
CVE-2026-90510 dromara orion-visor HostKeyServiceImpl.java HostKeyServiceImpl.encryptKey hard-coded key
A security vulnerability has been detected in dromara orion-visor up to 2.5.7. This affects the function HostKeyServiceImpl.encryptKey of the file...
CVE-2026-90510 dromara orion-visor HostKeyServiceImpl.java HostKeyServiceImpl.encryptKey hard-coded key
A security vulnerability has been detected in dromara orion-visor up to 2.5.7. This affects the function HostKeyServiceImpl.encryptKey of the file...
EUVD-2026-76983
A security vulnerability has been detected in dromara orion-visor up to 2.5.7. This affects the function HostKeyServiceImpl.encryptKey of the file...
CVE-2026-90509
A hard-coded credential weakness (CWE-798) exists in dromara orion-visor versions up to 2.5.7 , specifically in the function ExposeApiAspect.beforeExposeApi within ExposeApiAspect.java. The vulnerability allows a remote, unauthenticated attacker to exploit a hardcoded default token for authentica...
CVE-2026-90509 dromara orion-visor ExposeApiAspect.java ExposeApiAspect.beforeExposeApi hard-coded credentials
A weakness has been identified in dromara orion-visor up to 2.5.7. Affected by this issue is the function ExposeApiAspect.beforeExposeApi of the file ExposeApiAspect.java. Executing a manipulation can lead to hard-coded credentials. The attack can be executed remotely. The exploit has been made...
CVE-2026-90509 dromara orion-visor ExposeApiAspect.java ExposeApiAspect.beforeExposeApi hard-coded credentials
A weakness has been identified in dromara orion-visor up to 2.5.7. Affected by this issue is the function ExposeApiAspect.beforeExposeApi of the file ExposeApiAspect.java. Executing a manipulation can lead to hard-coded credentials. The attack can be executed remotely. The exploit has been made...
EUVD-2026-76982
A weakness has been identified in dromara orion-visor up to 2.5.7. Affected by this issue is the function ExposeApiAspect.beforeExposeApi of the file ExposeApiAspect.java. Executing a manipulation can lead to hard-coded credentials. The attack can be executed remotely. The exploit has been made...
CVE-2026-90509 dromara orion-visor ExposeApiAspect.java ExposeApiAspect.beforeExposeApi hard-coded credentials
A weakness has been identified in dromara orion-visor up to 2.5.7. Affected by this issue is the function ExposeApiAspect.beforeExposeApi of the file ExposeApiAspect.java. Executing a manipulation can lead to hard-coded credentials. The attack can be executed remotely. The exploit has been made...
CVE-2026-90510: Use of Hard-coded Cryptographic Key
A security vulnerability has been detected in dromara orion-visor up to 2.5.7. This affects the function HostKeyServiceImpl.encryptKey of the file...
PT-2026-90829
Name of the Vulnerable Software and Affected Versions dromara orion-visor versions prior to 2.5.8 Description A remote attack is possible due to the use of a hard-coded cryptographic key within the encryptKey function of the HostKeyServiceImpl class. This issue allows for the potential compromise...
CVE-2026-90509: Use of Hard-coded Credentials
A weakness has been identified in dromara orion-visor up to 2.5.7. Affected by this issue is the function ExposeApiAspect.beforeExposeApi of the file ExposeApiAspect.java. Executing a manipulation can lead to hard-coded credentials. The attack can be executed remotely. The exploit has been made...
PT-2026-90828
Name of the Vulnerable Software and Affected Versions dromara orion-visor versions prior to 2.5.8 Description A remote manipulation of the ExposeApiAspect.beforeExposeApi function within the ExposeApiAspect.java file can lead to the exposure of hard-coded credentials. Recommendations At the momen...