107 matches found
The vulnerability of the framework for developing network applications, servers, and client protocols related to Netty lies in the absence of necessary encryption steps, allowing attackers to gain unauthorized access to protected information.
The vulnerability of the framework for developing network applications, servers, and client protocols using Netty lies in the absence of the necessary encryption step. Exploiting this vulnerability can allow a malicious actor to gain unauthorized access to protected information...
ABB T-MAC Plus
SUMMARY ABB became aware of vulnerability in the products versions listed as affected in the advisory. An update is available that resolves the reported vulnerabilities. An attacker who successfully exploited any of these vulnerabilities could potentially compromise the system in different ways...
CVE-2025-59105
With physical access to the device and enough time an attacker can desolder the flash memory, modify it and then reinstall it because of missing encryption. Thus, essential files, such as "/etc/passwd", as well as stored certificates, cryptographic keys, stored PINs and so on can be modified and...
CVE-2025-41108
The CVE describes Ghost Robotics Vision 60 (v0.27.2) as vulnerable due to a lack of encryption and authentication in its MAVLink-based communication protocol. This enables an external attacker to impersonate the control station and issue arbitrary commands to the robot, potentially gaining unauth...
Ghost Robotics Vision 60 授权问题漏洞
Ghost Robotics Vision 60 is a quadrupedal ground robot from Ghost Robotics, USA. An authorization issue vulnerability exists in Ghost Robotics Vision 60 version v0.27.2, which stems from a lack of encryption and authentication mechanisms in the communication protocol that could lead to unauthoriz...
PT-2025-43059
Name of the Vulnerable Software and Affected Versions Ghost Robotics Vision 60 version 0.27.2 Description The communication protocol in the software could allow an attacker to send commands to the robot, impersonating the control station and gaining unauthorized full control. The lack of encrypti...
EUVD-2009-2315
Malware in sbrugna...
EUVD-2018-2894
Malware in sbrugna...
EUVD-2015-1726
Malware in sbrugna...
EUVD-2021-27054
Malware in sbrugna...
EUVD-2025-5317
Malicious code in bioql PyPI...
EUVD-2025-13284
Malicious code in bioql PyPI...
EUVD-2024-53879
Malicious code in bioql PyPI...
EUVD-2024-54368
Malicious code in bioql PyPI...
EUVD-2024-23559
Malicious code in bioql PyPI...
iMonitor EAM 安全漏洞
iMonitor EAM is an employee computer network activity monitoring software from iMonitor USA. A security vulnerability exists in iMonitor EAM version 9.6394, which stems from the failure to use authentication or encryption during communication, which could lead to the disclosure of sensitive...
CVE-2025-10227: Missing Encryption of Sensitive Data
Missing Encryption of Sensitive Data CWE-311 in the Object Archive component in AxxonSoft Axxon One C-Werk before 2.0.8 on Windows and Linux allows a local attacker with access to exported storage or stolen physical drives to extract sensitive archive data in plaintext via lack of encryption at...
CVE-2025-31972
HCL BigFix SM is affected by a Sensitive Information Exposure vulnerability where internal connections do not use TLS encryption which could allow an attacker unauthorized access to sensitive data transmitted between internal components...
PT-2025-53740
Уязвимость ПЛК NLcon-CE-485-C связана с непринятием мер по шифрованию секретных данных. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, получить доступ к конфиденциальной информации...