10435 matches found
CVE-2024-46328
VONETS VAP11G-300 v3.3.23.6.9 was discovered to contain hardcoded credentials for several different privileged accounts, including root...
CVE-2024-46612
IceCMS v3.4.7 and before was discovered to contain a hardcoded JWT key, allowing an attacker to forge JWT authentication information...
CVE-2024-46612
IceCMS v3.4.7 and before was discovered to contain a hardcoded JWT key, allowing an attacker to forge JWT authentication information...
CVE-2024-46612: Use of Hard-coded Cryptographic Key
IceCMS v3.4.7 and before was discovered to contain a hardcoded JWT key, allowing an attacker to forge JWT authentication information...
Exploit for Use of Hard-coded Credentials in Solarwinds Web_Help_Desk
CVE-2024-28987: SolarWinds Web Help Desk Hardcoded Credential...
CVE-2024-46612
IceCMS v3.4.7 and before was discovered to contain a hardcoded JWT key, allowing an attacker to forge JWT authentication information...
CVE-2024-46612
IceCMS v3.4.7 and before was discovered to contain a hardcoded JWT key, allowing an attacker to forge JWT authentication information...
PT-2024-32076 · Icecms · Icecms
Name of the Vulnerable Software and Affected Versions: IceCMS versions 3.4.7 and earlier Description: The issue allows an attacker to forge JWT authentication information due to a hardcoded JWT key. Recommendations: For IceCMS versions 3.4.7 and earlier, update to a version that does not contain...
CVE-2024-46612
The IceCMS content management system (v3.4.7 and earlier) contains an authentication bypass vulnerability caused by a hardcoded JWT key . An attacker can exploit this flaw to forge JWT authentication information , potentially gaining unauthorized access. To remediate this, users should update to ...
Malicious code in mennort (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 a18b704aee3dd3fa8d54027bbe2d6634696fcffaf194410e38fb5318d0d2a534 Package sends out the data to a hardcoded webhook. However, it's clearly said in the description, thus - not really malicious. --- Category: PROBABLYPENTEST -...
MAL-2024-12305 Malicious code in mennort (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 a18b704aee3dd3fa8d54027bbe2d6634696fcffaf194410e38fb5318d0d2a534 Package sends out the data to a hardcoded webhook. However, it's clearly said in the description, thus - not really malicious. --- Category: PROBABLYPENTEST -...
PT-2024-10438
Name of the Vulnerable Software and Affected Versions Yeti platform affected versions not specified Description The issue is related to the use of hardcoded credentials. An attacker can exploit this to gain elevated privileges by utilizing a static JWT token. Recommendations At the moment, there ...
PT-2024-12138 · Dragonfly · Dragonfly
Name of the Vulnerable Software and Affected Versions: Dragonfly versions prior to 2.0.9 Description: The issue concerns Dragonfly, an open-source P2P-based file distribution and image acceleration system. It uses JWT to verify users, but the secret key for JWT is hardcoded, leading to...
CVE-2023-41610
Victure PC420 1.1.39 was discovered to contain a hardcoded root password which is stored in plaintext...
CVE-2023-41611
Victure PC420 1.1.39 was discovered to use a weak and partially hardcoded key to encrypt data...
CVE-2023-41611
Victure PC420 1.1.39 was discovered to use a weak and partially hardcoded key to encrypt data...
CVE-2023-41610
Victure PC420 1.1.39 was discovered to contain a hardcoded root password which is stored in plaintext...
CVE-2023-41610: Plaintext Storage of a Password
Victure PC420 1.1.39 was discovered to contain a hardcoded root password which is stored in plaintext...
CVE-2023-41610
The Victure PC420 smart camera, specifically version 1.1.39 , contains a security vulnerability where a root password is hardcoded and stored in plaintext . This flaw allows unauthorized access to the device with high impact on confidentiality, integrity, and availability. No official patch is cu...