Lucene search
+L

8121 matches found

Vulnrichment
Vulnrichment
added 2026/01/28 5:47 p.m.10 views

CVE-2025-57796 Use of a hardcoded static key to protect sensitive data in Explorance Blue

Explorance Blue versions prior to 8.14.12 use reversible symmetric encryption with a hardcoded static key to protect sensitive data, including user passwords and system configurations. This approach allows stored values to be decrypted offline if the encrypted data are obtained...

5.9AI score0.00186EPSS
SaveExploits0References4
CVE
CVE
added 2026/01/28 5:47 p.m.28 views

CVE-2025-57796

CVE-2025-57796 concerns Explorance Blue versions prior to 8.14.12 that use reversible symmetric encryption with a hardcoded static key to protect sensitive data (including user passwords and system configurations). The design allows offline decryption if encrypted data are obtained, representing ...

6.8CVSS5.9AI score0.00186EPSS
SaveExploits0References4Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/01/28 5:47 p.m.8 views

CVE-2025-57796

Explorance Blue versions prior to 8.14.12 use reversible symmetric encryption with a hardcoded static key to protect sensitive data, including user passwords and system configurations. This approach allows stored values to be decrypted offline if the encrypted data are obtained...

6.8CVSS5.9AI score0.00186EPSS
SaveExploits0References5
Cvelist
Cvelist
added 2026/01/28 5:47 p.m.37 views

CVE-2025-57796 Use of a hardcoded static key to protect sensitive data in Explorance Blue

Explorance Blue versions prior to 8.14.12 use reversible symmetric encryption with a hardcoded static key to protect sensitive data, including user passwords and system configurations. This approach allows stored values to be decrypted offline if the encrypted data are obtained...

0.00186EPSS
SaveExploits0References4
NVD
NVD
added 2026/01/28 8:16 a.m.13 views

CVE-2025-40537

SolarWinds Web Help Desk was found to be susceptible to a hardcoded credentials vulnerability that, under certain situations, could allow access to administrative functions...

7.5CVSS0.00534EPSS
SaveExploits0References2
OSV
OSV
added 2026/01/28 8:16 a.m.16 views

CVE-2025-40537

SolarWinds Web Help Desk was found to be susceptible to a hardcoded credentials vulnerability that, under certain situations, could allow access to administrative functions...

7.5CVSS5.7AI score0.00534EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/01/28 7:31 a.m.8 views

EUVD-2025-206422

SolarWinds Web Help Desk was found to be susceptible to a hardcoded credentials vulnerability that, under certain situations, could allow access to administrative functions...

7.5CVSS5.8AI score0.00534EPSS
SaveExploits0References2
CVE
CVE
added 2026/01/28 7:31 a.m.42 views

CVE-2025-40537

SolarWinds Web Help Desk (WHD) is affected by CVE-2025-40537, a hard-coded credentials vulnerability that could allow access to administrative functions. The issue is addressed in WHD version 2026.1 (fixes for multiple WHD flaws, including 40537). The CVE is discussed alongside related WHD flaws ...

7.5CVSS5.8AI score0.00534EPSS
SaveExploits0References2Affected Software1
Vulnrichment
Vulnrichment
added 2026/01/28 7:31 a.m.3 views

CVE-2025-40537 SolarWinds Web Help Desk Hardcoded Credentials Vulnerability

SolarWinds Web Help Desk was found to be susceptible to a hardcoded credentials vulnerability that, under certain situations, could allow access to administrative functions...

7.5CVSS5.8AI score0.00534EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2026/01/28 7:31 a.m.35 views

CVE-2025-40537 SolarWinds Web Help Desk Hardcoded Credentials Vulnerability

SolarWinds Web Help Desk was found to be susceptible to a hardcoded credentials vulnerability that, under certain situations, could allow access to administrative functions...

7.5CVSS0.00534EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2026/01/28 7:31 a.m.8 views

CVE-2025-40537

SolarWinds Web Help Desk was found to be susceptible to a hardcoded credentials vulnerability that, under certain situations, could allow access to administrative functions...

7.5CVSS5.8AI score0.00534EPSS
SaveExploits0References3
NVD
NVD
added 2026/01/28 1:16 a.m.12 views

CVE-2026-24840

Dokploy is a free, self-hostable Platform as a Service PaaS. In versions prior to 0.26.6, a hardcoded credential in the provided installation script located at https://dokploy.com/install.sh, line 154 uses a hardcoded password when creating the database container. This means that nearly all Dokpl...

8.8CVSS0.00334EPSS
SaveExploits1References2
EUVD
EUVD
added 2026/01/28 12:15 a.m.9 views

EUVD-2026-4905

Dokploy is a free, self-hostable Platform as a Service PaaS. In versions prior to 0.26.6, a hardcoded credential in the provided installation script located at https://dokploy.com/install.sh, line 154 uses a hardcoded password when creating the database container. This means that nearly all Dokpl...

8CVSS5.9AI score0.00334EPSS
SaveExploits1References2
ATTACKERKB
ATTACKERKB
added 2026/01/28 12:15 a.m.6 views

CVE-2026-24840

Dokploy is a free, self-hostable Platform as a Service PaaS. In versions prior to 0.26.6, a hardcoded credential in the provided installation script located at https://dokploy.com/install.sh, line 154 uses a hardcoded password when creating the database container. This means that nearly all Dokpl...

8CVSS5.9AI score0.00334EPSS
SaveExploits1References3Affected Software1
Vulnrichment
Vulnrichment
added 2026/01/28 12:15 a.m.7 views

CVE-2026-24840 Dokploy uses hardcoded credentials in installation script, which could result in database access

Dokploy is a free, self-hostable Platform as a Service PaaS. In versions prior to 0.26.6, a hardcoded credential in the provided installation script located at https://dokploy.com/install.sh, line 154 uses a hardcoded password when creating the database container. This means that nearly all Dokpl...

8CVSS5.9AI score0.00334EPSS
SaveExploits1References2
OSV
OSV
added 2026/01/28 12:15 a.m.9 views

CVE-2026-24840 Dokploy uses hardcoded credentials in installation script, which could result in database access

Dokploy is a free, self-hostable Platform as a Service PaaS. In versions prior to 0.26.6, a hardcoded credential in the provided installation script located at https://dokploy.com/install.sh, line 154 uses a hardcoded password when creating the database container. This means that nearly all Dokpl...

8CVSS5.9AI score
SaveExploits0References4
CVE
CVE
added 2026/01/28 12:15 a.m.38 views

CVE-2026-24840

CVE-2026-24840 affects Dokploy PaaS. In versions prior to 0.26.6, the installation script at install.sh contains a hardcoded database credential (line 154), causing nearly all deployments to share the same password and enabling potential compromise of the database container. Red Hat/NVD/CVE listi...

8.8CVSS5.9AI score0.00334EPSS
SaveExploits1References2Affected Software1
Cvelist
Cvelist
added 2026/01/28 12:15 a.m.47 views

CVE-2026-24840 Dokploy uses hardcoded credentials in installation script, which could result in database access

Dokploy is a free, self-hostable Platform as a Service PaaS. In versions prior to 0.26.6, a hardcoded credential in the provided installation script located at https://dokploy.com/install.sh, line 154 uses a hardcoded password when creating the database container. This means that nearly all Dokpl...

8CVSS0.00334EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2026/01/28 12:00 a.m.16 views

Explorance Blue security vulnerabilities

Explorance Blue is a learning experience management software developed by the Canadian company Explorance. Versions of Explorance Blue prior to 8.14.12 contained security vulnerabilities. These vulnerabilities stemmed from the use of reversible symmetric encryption with hardcoded static keys to...

6.8CVSS5.8AI score0.00186EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2026/01/28 12:00 a.m.19 views

PT-2026-5045

Name of the Vulnerable Software and Affected Versions Dokploy versions prior to 0.26.6 Description Dokploy is a self-hostable Platform as a Service PaaS. Installations prior to version 0.26.6 utilize a hardcoded password within the installation script, specifically at the provided URL:...

8CVSS5.2AI score0.00334EPSS
SaveExploits1References10
Rows per page
Query Builder