CVE-2026-35088

Slican telephone exchanges use symmetric encryption for TCP/IP communication. Secret key is hardcoded in multiple binary files. An attacker who has access to these files can decrypt the communication. This issue was fixed in IPx series version 6.62.0100. The issue STILL EXISTS in End-Of-Life...

CVE-2026-35088 Inadequate Encryption Strength in Slican telephone exchanges

Slican telephone exchanges use symmetric encryption for TCP/IP communication. Secret key is hardcoded in multiple binary files. An attacker who has access to these files can decrypt the communication. This issue was fixed in IPx series version 6.62.0100. The issue STILL EXISTS in End-Of-Life...

PT-2026-114861

Slican telephone exchanges use symmetric encryption for TCP/IP communication. Secret key is hardcoded in multiple binary files. An attacker who has access to these files can decrypt the communication. This issue was fixed in IPx series version 6.62.0100. The issue STILL EXISTS in End-Of-Life...

CVE-2026-35088: Inadequate Encryption Strength

Slican telephone exchanges use symmetric encryption for TCP/IP communication. Secret key is hardcoded in multiple binary files. An attacker who has access to these files can decrypt the communication. This issue was fixed in IPx series version 6.62.0100. The issue STILL EXISTS in End-Of-Life...

Slican IPx encryption vulnerability

Versions of Slican prior to 6.62.0100, Slican CCT-1668 6.56.0430 and earlier versions, Slican MAC-6400 6.56.0430 and earlier versions, and Slican CXS-0424 6.30.0510 and earlier versions have a security vulnerability related to encryption. This vulnerability stems from the use of symmetric...

EUVD-2020-17869

Malware in sbrugna...

EUVD-2014-7155

Malware in sbrugna...

EUVD-2022-53479

Malicious code in bioql PyPI...

K15795: Linux kernel vulnerability CVE-2014-7284

Security Advisory Description The netgetrandomonce implementation in net/core/utils.c in the Linux kernel 3.13.x and 3.14.x before 3.14.5 on certain Intel processors does not perform the intended slow-path operation to initialize random seeds, which makes it easier for remote attackers to spoof o...

CVE-2019-13529

An attacker could send a malicious link to an authenticated operator, which may allow remote attackers to perform actions with the permissions of the user on the Sunny WebBox Firmware Version 1.6 and prior. This device uses IP addresses to maintain communication after a successful login, which...

Rockwell Automation/Allen-Bradley 1756-EN2TSC Ethernet/IP Communication Interface

Binary data 751063.prm...

Rockwell Automation/Allen-Bradley 1756-EN2TP Ethernet/IP Communication Interface

Binary data 751061.prm...

Toshiba VFAS3-4220PCE ASD Drive Detection

Binary data 757964.prm...

ELNet Power Meter Unauthenticated Access / Weak Credential Management

ELNet Energy & Electrical Power Meter - Mulitple Vulnerabilities http://elnet.feniks-pro.com/Elnet-LT.php http://www.elnet.cc/product/elnet-lt/ Powermeter with color graphic display for all electrical measurements and harmonics, with TCP/IP and RS485 communication ModBus and Bacnet, panel mounted...

CVE-2015-4174: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the integrated web server on the Siemens Climatix BACnet/IP communication module with firmware before 10.34 allows remote attackers to inject arbitrary web script or HTML via a crafted URL...

PT-2015-6445

Name of the Vulnerable Software and Affected Versions Siemens Climatix BACnet/IP communication module versions prior to 10.34 Description A cross-site scripting XSS issue exists, allowing remote attackers to inject arbitrary web script or HTML via a crafted URL. This affects the integrated web...

CVE-2014-9200

Stack-based buffer overflow in an unspecified DLL file in a DTM development kit in Schneider Electric Unity Pro, SoMachine, SoMove, SoMove Lite, Modbus Communication Library 2.2.6 and earlier, CANopen Communication Library 1.0.2 and earlier, EtherNet/IP Communication Library 1.0.0 and earlier, EM...

PT-2015-4155

Name of the Vulnerable Software and Affected Versions Schneider Electric Unity Pro versions prior to the fixed version Schneider Electric SoMachine versions prior to the fixed version Schneider Electric SoMove versions prior to the fixed version Schneider Electric SoMove Lite versions prior to th...

CVE-2014-7284

The netgetrandomonce implementation in net/core/utils.c in the Linux kernel 3.13.x and 3.14.x before 3.14.5 on certain Intel processors does not perform the intended slow-path operation to initialize random seeds, which makes it easier for remote attackers to spoof or disrupt IP communication by...

Design/Logic Flaw

The netgetrandomonce implementation in net/core/utils.c in the Linux kernel 3.13.x and 3.14.x before 3.14.5 on certain Intel processors does not perform the intended slow-path operation to initialize random seeds, which makes it easier for remote attackers to spoof or disrupt IP communication by...