EUVD-2020-4426

Malware in sbrugna...

EUVD-2009-1470

Malware in sbrugna...

EUVD-2016-4708

Malware in sbrugna...

EUVD-2023-37930

Malicious code in bioql PyPI...

EUVD-2022-4863

Malicious code in bioql PyPI...

EUVD-2023-44573

Malicious code in bioql PyPI...

EUVD-2023-44038

Malicious code in bioql PyPI...

EUVD-2025-26418

Malicious code in bioql PyPI...

EUVD-2024-23041

Malicious code in bioql PyPI...

CVE-2025-57174

Siklu Communications Etherhaul 8010TX and 1200FX devices are vulnerable to unauthenticated remote command execution in firmware versions 7.4.0 through 10.7.3 (and potentially earlier). The root cause is the rfpiped service listening on TCP port 555 , which utilizes static AES encryption keys hard...

CVE-2025-9696

The SunPower PVS6's BluetoothLE interface is vulnerable due to its use of hardcoded encryption parameters and publicly accessible protocol details. An attacker within Bluetooth range could exploit this vulnerability to gain full access to the device's servicing interface. This access allows the...

CVE-2025-9696

The SunPower PVS6's BluetoothLE interface is vulnerable due to its use of hardcoded encryption parameters and publicly accessible protocol details. An attacker within Bluetooth range could exploit this vulnerability to gain full access to the device's servicing interface. This access allows the...

CVE-2025-43925

A security vulnerability was identified in Unicom Focal Point version 7.6.1 , a portfolio management and decision analysis tool. The root cause is that the database is encrypted using a hardcoded key , which significantly facilitates the recovery of cleartext data. Potential consequences include ...

CVE-2024-45165

An issue was discovered in UCI IDOL 2 aka uciIDOL or IDOL2 through 2.12. Data is sent between client and server with encryption. However, the key is derived from the string "c2007 UCI Software GmbH B.Boll" without quotes. The key is both static and hardcoded. With access to messages, this results...

CVE-2024-48539

Neye3C v4.5.2.0 was discovered to contain a hardcoded encryption key in the firmware update mechanism...

CVE-2023-3947

The Video Conferencing with Zoom plugin for WordPress is vulnerable to Sensitive Information Exposure due to hardcoded encryption key on the 'vczapiencryptdecrypt' function in versions up to, and including, 4.2.1. This makes it possible for unauthenticated attackers to decrypt and view the meetin...

CVE-2023-3371

The EmbedPress plugin for WordPress is vulnerable to Sensitive Information Exposure due to hardcoded encryption key on the 'lockcontentformhandler' and 'displaypasswordform' function in versions up to, and including, 3.7.3. This makes it possible for unauthenticated attackers to decrypt and view...

CVE-2023-33778

Draytek Vigor Routers firmware versions below 3.9.6/4.2.4, Access Points firmware versions below v1.4.0, Switches firmware versions below 2.6.7, and Myvigor firmware versions below 2.3.2 were discovered to use hardcoded encryption keys which allows attackers to bind any affected device to their o...

CVE-2022-34045

Wavlink WN530HG4 M30HG4.V5030.191116 was discovered to contain a hardcoded encryption/decryption key for its configuration files at /etcro/lighttpd/www/cgi-bin/ExportAllSettings.sh...

CVE-2020-35138

The MobileIron agents through 2021-03-22 for Android and iOS contain a hardcoded encryption key, used to encrypt the submission of username/password details during the authentication process, as demonstrated by Mobile@Work aka com.mobileiron. The key is in the...