8345 matches found
MAL-2024-12305 Malicious code in mennort (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 a18b704aee3dd3fa8d54027bbe2d6634696fcffaf194410e38fb5318d0d2a534 Package sends out the data to a hardcoded webhook. However, it's clearly said in the description, thus - not really malicious. --- Category: PROBABLYPENTEST -...
PT-2024-10438
Name of the Vulnerable Software and Affected Versions Yeti platform affected versions not specified Description The issue is related to the use of hardcoded credentials. An attacker can exploit this to gain elevated privileges by utilizing a static JWT token. Recommendations At the moment, there ...
PT-2024-12138 · Dragonfly · Dragonfly
Name of the Vulnerable Software and Affected Versions: Dragonfly versions prior to 2.0.9 Description: The issue concerns Dragonfly, an open-source P2P-based file distribution and image acceleration system. It uses JWT to verify users, but the secret key for JWT is hardcoded, leading to...
CVE-2023-41611
Victure PC420 1.1.39 was discovered to use a weak and partially hardcoded key to encrypt data...
CVE-2023-41610
Victure PC420 1.1.39 was discovered to contain a hardcoded root password which is stored in plaintext...
CVE-2023-41611
Victure PC420 1.1.39 was discovered to use a weak and partially hardcoded key to encrypt data...
CVE-2023-41610
Victure PC420 1.1.39 was discovered to contain a hardcoded root password which is stored in plaintext...
CVE-2023-41610
Victure PC420 1.1.39 was discovered to contain a hardcoded root password which is stored in plaintext...
CVE-2023-41611
CVE-2023-41611 affects Victure PC420 firmware version 1.1.39. Root cause: use of a weak, partially hardcoded key to encrypt data. Impact aligns with confidentiality issues; CVSS v3.1 base score 6.5 (Network, Low integrity/availability impact). Exploitation details are not provided in the document...
CVE-2023-41610
CVE-2023-41610 affects Victure PC420 firmware 1.1.39, where a hardcoded root password is stored in plaintext. The vulnerability is evidenced in multiple sources (NVD/Red Hat/CNNVD/CVE records) describing the presence of a hardcoded administrator credential. There is no documented fix version with...
CVE-2023-41611
Victure PC420 1.1.39 was discovered to use a weak and partially hardcoded key to encrypt data...
PT-2024-12945 · Victure · Victure Pc420
Name of the Vulnerable Software and Affected Versions: Victure PC420 version 1.1.39 Description: The issue is related to the use of a weak and partially hardcoded key for data encryption. Recommendations: For Victure PC420 version 1.1.39, at the moment, there is no information about a newer versi...
PT-2024-12944 · Victure · Victure Pc420
Name of the Vulnerable Software and Affected Versions: Victure PC420 version 1.1.39 Description: The issue concerns a hardcoded root password stored in plaintext. Recommendations: For Victure PC420 version 1.1.39, consider changing the hardcoded root password to a unique and secure password as a...
D-Link DIR-X4860 操作系统命令注入漏洞
The DIR-X4860 is a wireless router from China's AUO D-Link. AUO DIR-X4860 suffers from an operating system command injection vulnerability that originates from a failure to properly validate user input in the telnet service, which can be exploited by an unauthenticated, remote attacker to log int...
CVE-2024-6656 Hardcoded Credentals in TNB Mobile Solutions' Cockpit Software
Use of Hard-coded Credentials vulnerability in TNB Mobile Solutions Cockpit Software allows Read Sensitive Strings Within an Executable. This issue affects Cockpit Software: before v2.13...
CVE-2024-6656 Hardcoded Credentals in TNB Mobile Solutions' Cockpit Software
Use of Hard-coded Credentials vulnerability in TNB Mobile Solutions Cockpit Software allows Read Sensitive Strings Within an Executable. This issue affects Cockpit Software: before v2.13...
CVE-2024-28990 SolarWinds Access Rights Manager (ARM) Hardcoded Credentials Authentication Bypass Vulnerability
SolarWinds Access Rights Manager ARM was found to contain a hard-coded credential authentication bypass vulnerability. If exploited, this vulnerability would allow access to the RabbitMQ management console. We thank Trend Micro Zero Day Initiative ZDI for its ongoing partnership in coordinating...
CVE-2024-28990 SolarWinds Access Rights Manager (ARM) Hardcoded Credentials Authentication Bypass Vulnerability
SolarWinds Access Rights Manager ARM was found to contain a hard-coded credential authentication bypass vulnerability. If exploited, this vulnerability would allow access to the RabbitMQ management console. We thank Trend Micro Zero Day Initiative ZDI for its ongoing partnership in coordinating...
CVE-2021-26138
The Atlassian Questions For Confluence app for Confluence Server and Data Center creates a Confluence user account in the confluence-users group with the username disabledsystemuser and a hardcoded password. A remote, unauthenticated attacker with knowledge of the hardcoded password could exploit...
