Lucene search
+L

8343 matches found

Positive Technologies
Positive Technologies
added 2025/04/07 12:00 a.m.12 views

PT-2025-15271 · Philips · Advanced Visualization Workspace +1

Name of the Vulnerable Software and Affected Versions: Intellispace Portal versions 12 and prior Advanced Visualization Workspace version 15 Description: The issue is related to the lack of protection mechanisms in the Intellispace Portal binaries, making it possible for attackers to...

7.2CVSS6.6AI score0.00161EPSS
SaveExploits0References9
Tenable Nessus
Tenable Nessus
added 2025/04/04 12:00 a.m.9 views

Esri Portal for ArcGIS < Security 2025 Update 1 Hardcoded Credentials

The version of Esri Portal for ArcGIS installed is missing Security 2025 Update 1. It is, therefore, affected by a hardcoded credentials vulnerability: - A hardcoded credential vulnerability exists in a specific deployment pattern for Esri Portal for ArcGIS versions 11.4 and below that may allow ...

9.8CVSS5.8AI score0.00543EPSS
SaveExploits0References2
OSV
OSV
added 2025/04/03 8:15 p.m.5 views

CVE-2025-30406

Gladinet CentreStack through 16.1.10296.56315 fixed in 16.4.10315.56368 has a deserialization vulnerability due to the CentreStack portal's hardcoded machineKey use, as exploited in the wild in March 2025. This enables threat actors who know the machineKey to serialize a payload for server-side...

9.8CVSS6.1AI score0.94252EPSS
SaveExploits6References3
CNNVD
CNNVD
added 2025/04/03 12:00 a.m.14 views

Gladinet CentreStack 安全漏洞

Gladinet CentreStack is a premier mobile access and secure sharing solution from Gladinet USA. provides self-hosted cloud storage. A security vulnerability exists in Gladinet CentreStack that stems from hardcoding a machineKey resulting in a deserialization vulnerability that could lead to remote...

9.8CVSS9.8AI score0.94252EPSS
SaveExploits6References2
Metasploit
Metasploit
added 2025/04/03 12:00 a.m.380 views

Gladinet CentreStack/Triofox ASP.NET ViewState Deserialization

A vulnerability in Gladinet CentreStack and Triofox application using hardcoded cryptographic keys for ViewState could allow an attacker to forge ViewState data. This can lead to unauthorized actions such as remote code execution. Both applications make use of a hardcoded machineKey in the IIS...

9.8CVSS9.6AI score0.94252EPSS
SaveExploits6
OSV
OSV
added 2025/03/20 9:15 p.m.11 views

CVE-2025-2538

A hardcoded credential vulnerability exists in a specific deployment pattern for Esri Portal for ArcGIS versions 11.4 and below that may allow a remote unauthenticated attacker to gain administrative access to the system...

9.8CVSS5.8AI score0.00543EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/03/20 4:12 p.m.15 views

CVE-2025-30137

An issue was discovered in the G-Net GNET APK 2.6.2. Hardcoded credentials exist in in APK for ports 9091 and 9092. The GNET mobile application contains hardcoded credentials that provide unauthorized access to the dashcam's API endpoints on ports 9091 and 9092. Once the GNET SSID is connected to...

9.8CVSS7.5AI score0.00455EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/03/20 4:09 p.m.17 views

CVE-2025-30113

An issue was discovered on the Forvia Hella HELLA Driving Recorder DR 820. Hardcoded Credentials exist in the APK for Ports 9091 and 9092. The dashcam's Android application contains hardcoded credentials that allow unauthorized access to device settings through ports 9091 and 9092. These...

9.8CVSS7AI score0.00431EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/03/20 4:08 p.m.15 views

CVE-2025-30109

In the IROAD APK 5.2.5, there are Hardcoded Credentials in the APK for ports 9091 and 9092. The mobile application for the dashcam contains hardcoded credentials that allow an attacker on the local Wi-Fi network to access API endpoints and retrieve sensitive device information, including live and...

6.5CVSS7AI score0.00232EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/03/20 4:07 p.m.11 views

CVE-2025-30123

An issue was discovered on ROADCAM X3 devices. The mobile app APK Viidure contains hardcoded FTP credentials for the FTPX user account, enabling attackers to gain unauthorized access and extract sensitive recorded footage from the device...

9.8CVSS7.4AI score0.00431EPSS
SaveExploits0References1
CVE
CVE
added 2025/03/20 10:10 a.m.121 views

CVE-2024-8551

CVE-2024-8551 : A path traversal vulnerability affects modelscope/agentscope in the save-workflow and load-workflow functionality, present in versions prior to the fix. An attacker can read and write arbitrary JSON files on the filesystem, potentially exposing or modifying sensitive data (config ...

9.1CVSS9AI score0.00958EPSS
SaveExploits1References1Affected Software1
CNVD
CNVD
added 2025/03/19 12:00 a.m.12 views

DELL SmartFabric OS10 Hardcoded Password Vulnerability

DELL SmartFabric OS10 Software is a software-defined network operating system from Dell Networks, based on Linux and open source technologies, and is primarily used to enable flexible management and automated deployment of data center network resources. DELL SmartFabric OS10 suffers from a...

8.4CVSS6.9AI score0.00165EPSS
SaveExploits0References1
NVD
NVD
added 2025/03/18 8:15 p.m.14 views

CVE-2025-30137

An issue was discovered in the G-Net GNET APK 2.6.2. Hardcoded credentials exist in in APK for ports 9091 and 9092. The GNET mobile application contains hardcoded credentials that provide unauthorized access to the dashcam's API endpoints on ports 9091 and 9092. Once the GNET SSID is connected to...

9.8CVSS0.00455EPSS
SaveExploits0References2
NVD
NVD
added 2025/03/18 3:16 p.m.22 views

CVE-2025-30113

An issue was discovered on the Forvia Hella HELLA Driving Recorder DR 820. Hardcoded Credentials exist in the APK for Ports 9091 and 9092. The dashcam's Android application contains hardcoded credentials that allow unauthorized access to device settings through ports 9091 and 9092. These...

9.8CVSS0.00431EPSS
SaveExploits0References2
NVD
NVD
added 2025/03/18 3:16 p.m.11 views

CVE-2025-30109

In the IROAD APK 5.2.5, there are Hardcoded Credentials in the APK for ports 9091 and 9092. The mobile application for the dashcam contains hardcoded credentials that allow an attacker on the local Wi-Fi network to access API endpoints and retrieve sensitive device information, including live and...

6.5CVSS0.00232EPSS
SaveExploits0References2
OSV
OSV
added 2025/03/18 9:49 a.m.10 views

MAL-2025-191688 Malicious code in axonify (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 22991c04631c7553b040a72573bc7d0ad80886ab6bc834ac43f1e1611f85ea02 The package is capable of installing malware from a hardcoded URL. The malware is well-recognized and acts as infostealer. Interestingly, it uses Steam profile...

6.9AI score
SaveExploits0References3
OSSF Malicious Packages
OSSF Malicious Packages
added 2025/03/18 9:49 a.m.12 views

Malicious code in axonify (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 22991c04631c7553b040a72573bc7d0ad80886ab6bc834ac43f1e1611f85ea02 The package is capable of installing malware from a hardcoded URL. The malware is well-recognized and acts as infostealer. Interestingly, it uses Steam profile...

7AI score
SaveExploits0References3
GithubExploit
GithubExploit
added 2025/03/18 2:49 a.m.623 views

Exploit for Use of Hard-coded Credentials in Tp-Link Tl-Wr845N_Firmware

Poc-CVE-2024-57040 CVE-2024-57040 is a security vulnerability...

9.8CVSS9.7AI score0.01141EPSS
SaveExploits1
Vulnrichment
Vulnrichment
added 2025/03/18 12:00 a.m.10 views

CVE-2025-30106

On IROAD v9 devices, the dashcam has hardcoded default credentials "qwertyuiop" that cannot be changed by the user. This allows an attacker within Wi-Fi range to connect to the device's network to perform sniffing...

8.7AI score0.00272EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2025/03/18 12:00 a.m.8 views

CVE-2025-30137

An issue was discovered in the G-Net GNET APK 2.6.2. Hardcoded credentials exist in in APK for ports 9091 and 9092. The GNET mobile application contains hardcoded credentials that provide unauthorized access to the dashcam's API endpoints on ports 9091 and 9092. Once the GNET SSID is connected to...

7.5AI score0.00455EPSS
SaveExploits0References2
Rows per page
Query Builder