PT-2026-70187

Name of the Vulnerable Software and Affected Versions LOGO! Soft Comfort versions prior to V9 Description Products use a static, hardcoded AES master key to encrypt project files. A local attacker could extract this master key from the application files or memory to decrypt project files or remov...

Lexmark Printers Improper Input Validation (CVE-2013-6032)

cgi-bin/postpf/cgi-bin/dynamic/config/config.html on Lexmark X94x before LC.BR.P142, X85x through LC4.BE.P487, X644 and X646 before LC2.MC.P374, X642 through LC2.MB.P318, W840 through LS.HA.P252, T64x before LS.ST.P344, X64xef through LC2.TI.P325, C935dn through LC.JO.P091, C920 through LS.TA.P15...

CVE-2022-37176

Tenda AC6AC1200 v5.0 Firmware v02.03.01.114 and below contains a vulnerability which allows attackers to remove the Wi-Fi password and force the device into open security mode via a crafted packet sent to goform/setWizard...

EUVD-2001-0102

Malware in sbrugna...

EUVD-2024-35052

Malicious code in bioql PyPI...

Exploit for Improper Initialization in Linux Linux_Kernel

CVE-2022-0847 exploit of CVE-2022-0847 which directly remove p...

Ubiquiti UniFi Security Breach

Ubiquiti UniFi is a wireless networking system from Ubiquiti USA. A security vulnerability exists in Ubiquiti UniFi iOS version 10.15.0, which stems from a misconfiguration introduced on a second-generation UniFi access point configured as a standalone, which could result in an SSID name change o...

Zscaler Client Connector 安全漏洞

Zscaler Client Connector is an application from zscaler. An application installed on a device that ensures that Internet traffic and access to an organization's internal applications are secure and in compliance with the organization's policies, even when not on the corporate network. A security...

SUSE-SU-2023:3822-2 Security update for supportutils

This update for supportutils fixes the following issues: Security fixes: - CVE-2022-45154: Removed iSCSI passwords bsc1207598. Other Fixes: - Changes in version 3.1.26 + powerpc plugin to collect the slots and active memory bsc1210950 + A Cleartext Storage of Sensitive Information vulnerability...

PT-2022-37539 · Unknown · Supportutils

Name of the Vulnerable Software and Affected Versions: supportutils affected versions not specified Description: The issue concerns the removal of passwords from certain files, including email.txt, updates.txt, and fs-iscsi.txt. This is a security fix to prevent potential exposure of sensitive...

SUSE-SU-2022:4294-1 Security update for supportutils

This update for supportutils fixes the following issues: Security issues fixed: - Passwords correctly removed from email.txt, updates.txt and fs-iscsi.txt bsc1203818...

SUSE-SU-2022:4278-1 Security update for supportutils

This update for supportutils fixes the following issues: Security issues fixed: - Passwords correctly removed from email.txt, updates.txt and fs-iscsi.txt bsc1203818 Bug fixes: - Added lifecycle information - Fixed KVM virtualization detection on bare metal bsc1184689 - Added logging using...

PT-2022-37535 · Unknown · Supportutils

Name of the Vulnerable Software and Affected Versions: supportutils affected versions not specified Description: The issue concerns the removal of passwords from certain files, including email.txt, updates.txt, and fs-iscsi.txt. This is a security fix to prevent potential exposure of sensitive...

PT-2022-23856 · Tenda · Tenda Ac6

Name of the Vulnerable Software and Affected Versions: Tenda AC6AC1200 v5.0 Firmware versions v02.03.01.114 and below Description: The issue allows attackers to remove the Wi-Fi password and force the device into open security mode via a crafted packet sent to "goform/setWizard". This enables...

Ghost Framework - An Android Post Exploitation Framework That Uses An Android Debug Bridge To Remotely Access A n Android Device

Ghost Framework is an Android post exploitation framework that uses an Android Debug Bridge to remotely access an Android device. Ghost Framework gives you the power and convenience of remote Android device administration. Getting started Ghost installation cd ghost chmod +x install.sh ./install....

Unauthorized Access Vulnerability in Schneider Electric Modicon M340 PLCs

Schneider Electric Modicon M340 is a medium-sized PLC from Schneider Electric, which has a wide range of applications in the industrial control field in China. An unauthorized access vulnerability exists in the Schneider Electric Modicon M340 PLC. An attacker can exploit the vulnerability by...

Haiwell C10S0R(-e) PLC has a password removal vulnerability.

C10S0R-e PLC is a product in the programmable logic controller PLC series of Xiamen Haiwei Technology Co. The Haiwell C10S0R-e PLC suffers from a password removal vulnerability that can be exploited by an attacker to remove the password via unauthorized construction of specific network packets...

PCILeech - Direct Memory Access (DMA) Attack Software

The PCILeech use the USB3380 chip in order to read from and write to the memory of a target system. This is achieved by using DMA over PCI Express. No drivers are needed on the target system. The USB3380 is only able to read 4GB of memory natively, but is able to read all memory if a kernel modul...

Android Lock Settings Service Privilege Gain Vulnerability

Android is an open source operating system based on Linux. Android's Lock Settings Service has a security vulnerability that allows remote attackers to gain access by removing a device's PIN or password...

Facebook Password Remover - All-in-one Facebook Login Password Removal Tool

Facebook Password Remover is the free all-in-one tool to quickly remove the stored Facebook Login passwords from your system. This helps you to delete any accidently or otherwise stored Facebook password on any public/shared computers so that your Facebook account remains safe. Currently it...