DumpsterDiver

DumpsterDiver by @Rzepsky DumpsterDiver는 대량의 데이터를 분석하여 AWS Access Key, Azure Share Key, SSH 키와 같은 하드코딩된 비밀키 또는 비밀번호을 검색하는 도구입니다. 또한 기본 조건예: 최소 10개의 이메일 주소가 포함된 CSV 파일만 보고을 사용한 간단한 검색 규칙을 생성할 수 있습니다. 이 도구의 주요 아이디어는 잠재적인 비밀 유출을 감지하는 것입니다. 데모 비디오에서 실제 작동을 확인하거나 이 기사에서 모든 기능에 대해 읽을 수 있습니다. 주요 특징:...

CVE-2026-55395

Hardcoded passwords in the access control in Teledyne FLIR Aware2 versions through 6.9.0.2 PackBot and 1.7.9 FirstLook allows remote unauthenticated attackers to access and reconfigure Teledyne FLIR PackBot and FirstLook robots running this software via reading the passwords from the firmware or...

CVE-2026-55395 Hardcoded Passwords in Teledyne FLIR Robots running Aware2

Hardcoded passwords in the access control in Teledyne FLIR Aware2 versions through 6.9.0.2 PackBot and 1.7.9 FirstLook allows remote unauthenticated attackers to access and reconfigure Teledyne FLIR PackBot and FirstLook robots running this software via reading the passwords from the firmware or...

CVE-2026-55395

Teledyne FLIR Aware2 software (versions through 6.9.0.2 for PackBot and 1.7.9 for FirstLook) contains hardcoded passwords in the access control mechanism. This vulnerability allows remote unauthenticated attackers to access and reconfigure Teledyne FLIR PackBot and FirstLook robots by extracting ...

EUVD-2026-91052

Hardcoded passwords in the access control in Teledyne FLIR Aware2 versions through 6.9.0.2 PackBot and 1.7.9 FirstLook allows remote unauthenticated attackers to access and reconfigure Teledyne FLIR PackBot and FirstLook robots running this software via reading the passwords from the firmware or...

AgentScope path traversal vulnerability in save-workflow

A path traversal vulnerability exists in the save-workflow and load-workflow functionality of modelscope/agentscope versions prior to the fix. This vulnerability allows an attacker to read and write arbitrary JSON files on the filesystem, potentially leading to the exposure or modification of...

SourceCodester Barangay Resident Profiling and Information Management System 信任管理问题漏洞

The SourceCodester Barangay Resident Profiling and Information Management System is an open-source system developed by SourceCodester for managing profiles and information of Barangay residents. Version 1.0 of the SourceCodester Barangay Resident Profiling and Information Management System contai...

SourceCodester Onlne Examination & Learning Management System、Syllabus-aligned Learning Management and Examination System 信任管理问题漏洞

SourceCodester Online Examination & Learning Management System is an open-source online examination and learning management system developed by SourceCodester. Version 1.0 of the SourceCodester Online Examination & Learning Management System and Syllabus-aligned Learning Management and Examinatio...

Securly Chrome Extension 安全漏洞

Securly Chrome Extension is a web filtering and student online security management browser extension developed by the American company Securly, targeting educational scenarios. Version 3.0.7 of Securly Chrome Extension contains a security vulnerability. This vulnerability stems from the use of...

AI-Code-Vulnerability-Scanner

AI-Code-Vulnerability-Scanner The AI Code Vulnerability Scanne...

Yokogawa CENTUM VP 安全漏洞

Yokogawa CENTUM VP is a distributed control system platform developed by Yokogawa Electric Corporation in Japan. There are security vulnerabilities in Yokogawa CENTUM VP, which stem from hardcoded passwords. This could allow attackers to log in as PROG users under certain conditions...

QNAP Systems Hyper Data Protector 安全漏洞

QNAP Systems Hyper Data Protector is a comprehensive backup software developed by QNAP Systems, a company based in Taiwan, China. There is a security vulnerability in QNAP Systems Hyper Data Protector, which stems from the use of hardcoded passwords. This vulnerability may allow remote attackers ...

PlaciPy 安全漏洞

PlaciPy is an open-source employment management system developed by Praskla Technology. It aims to simplify the employment processes for students, trainers, and administrators in educational institutions. Version 1.0.0 of PlaciPy contains a security vulnerability. This vulnerability stems from th...

CVE-2025-59103

The Access Manager 92xx in hardware revision K7 is based on Linux instead of Windows CE embedded in older hardware revisions. In this new hardware revision it was noticed that an SSH service is exposed on port 22. By analyzing the firmware of the devices, it was noticed that there are two users...

CVE-2025-59103

The Access Manager 92xx in hardware revision K7 is based on Linux instead of Windows CE embedded in older hardware revisions. In this new hardware revision it was noticed that an SSH service is exposed on port 22. By analyzing the firmware of the devices, it was noticed that there are two users...

EUVD-2025-206370

The Access Manager 92xx in hardware revision K7 is based on Linux instead of Windows CE embedded in older hardware revisions. In this new hardware revision it was noticed that an SSH service is exposed on port 22. By analyzing the firmware of the devices, it was noticed that there are two users...

CVE-2025-59103

CVE-2025-59103 concerns the Access Manager 92xx hardware revision K7. The Red Hat/NVD/CVE entries describe an SSH service exposed on port 22 with two users that have hardcoded and weak passwords, allowing SSH access. A key root-cause is that password randomization on first deployment is condition...

PT-2026-4753

Name of the Vulnerable Software and Affected Versions Access Manager 92xx hardware revision K7 affected versions not specified Description The Access Manager 92xx hardware revision K7 utilizes a Linux-based operating system, differing from older revisions that used Windows CE. An SSH service is...

CVE-2025-59103: Use of Weak Credentials

The Access Manager 92xx in hardware revision K7 is based on Linux instead of Windows CE embedded in older hardware revisions. In this new hardware revision it was noticed that an SSH service is exposed on port 22. By analyzing the firmware of the devices, it was noticed that there are two users...

CVE-2018-6387

iBall iB-WRA150N 1.2.6 build 110401 Rel.47776n devices have a hardcoded password of admin for the admin account, a hardcoded password of support for the support account, and a hardcoded password of user for the user account...