75163 matches found
2FAuth 代码问题漏洞
2FAuth is a web application personally developed by Bubka, designed to manage two-factor authentication accounts and generate their security codes. Versions of 2FAuth prior to 6.1.0 contained a code-related vulnerability. This vulnerability stemmed from the image parameter in the OTP URL not bein...
VulnCheck KEV: CVE-2023-24796
Password vulnerability found in Vinga WR-AC1200 81.102.1.4370 and before allows a remote attacker to execute arbitrary code via the password parameter at the /goform/sysTools and /adm/systools.asp endpoints...
HPE AOS-CX 安全漏洞
HPE AOS-CX is a network operating system developed by Hewlett-Packard HPE for data centers, campuses, and edge locations. It is designed to provide flexible and innovative network services while enhancing network performance. HPE AOS-CX contains security vulnerabilities; these vulnerabilities ste...
Top Password SQL Server Password Changer 缓冲区错误漏洞
Top Password SQL Server Password Changer is an SQL password modification tool developed by Top Password. Version 1.90 of Top Password SQL Server Password Changer contains a buffer error vulnerability. This vulnerability stems from buffer overflows in the username and registration code fields, whi...
Top Password Outlook Password Recovery 缓冲区错误漏洞
Top Password Outlook Password Recovery is a password recovery tool developed by Top Password. Version 2.10 of Top Password Outlook Password Recovery has a buffer error vulnerability. This vulnerability stems from buffer overflows in the username and registration code fields, which could allow loc...
PT-2026-24774
RAR Password Recovery 1.80 contains a buffer overflow vulnerability that allows local attackers to crash the application by supplying an oversized payload in the registration dialog. Attackers can craft a malicious input string exceeding 6000 bytes and paste it into the User Name and Registration...
CVE-2025-70041
An issue pertaining to CWE-259: Use of Hard-coded Password was discovered in oslabs-beta ThermaKube master...
CVE-2025-70041
An issue pertaining to CWE-259: Use of Hard-coded Password was discovered in oslabs-beta ThermaKube master...
CVE-2023-27573
netbox-docker before 2.5.0 has a superuser account with default credentials admin password for the admin account, and 0123456789abcdef0123456789abcdef01234567 value for SUPERUSERAPITOKEN. In practice on the public Internet, almost all users changed the password but only about 90% changed the toke...
Top Password RAR Password Recovery 缓冲区错误漏洞
Top Password RAR Password Recovery is a compression file password recovery tool developed by Top Password Corporation. Version 1.80 of Top Password RAR Password Recovery contains a buffer error vulnerability. This vulnerability stems from a buffer overflow in the registration dialog box, which...
Runtipi 访问控制错误漏洞
Runtipi is an open-source family server orchestrator developed by Runtipi. Versions of Runtipi prior to 4.8.0 contained a security vulnerability related to access control. This vulnerability stemmed from an unvalidated password reset endpoint, which could lead to account takeover attacks...
CVE-2025-70041
Technical details are not publicly available in the provided documents for CVE-2025-70041; monitor for updates.
PT-2026-24765
Verypdf docPrint Pro 8.0 contains a structured exception handling buffer overflow vulnerability that allows local attackers to execute arbitrary code by supplying an oversized alphanumeric encoded payload in the User Password or Master Password fields. Attackers can craft a malicious payload with...
PT-2026-24761
SpotIE Internet Explorer Password Recovery 2.9.5 contains a denial of service vulnerability in the registration key input field that allows local attackers to crash the application by supplying an excessively long string. Attackers can paste a 256-character payload into the Key field during...
CVE-2023-27573
netbox-docker before 2.5.0 has a superuser account with default credentials admin password for the admin account, and 0123456789abcdef0123456789abcdef01234567 value for SUPERUSERAPITOKEN. In practice on the public Internet, almost all users changed the password but only about 90% changed the toke...
CVE-2023-27573
netbox-docker before 2.5.0 has a superuser account with default credentials admin password for the admin account, and 0123456789abcdef0123456789abcdef01234567 value for SUPERUSERAPITOKEN. In practice on the public Internet, almost all users changed the password but only about 90% changed the toke...
Nsasoft SpotIE Internet Explorer Password Recovery 缓冲区错误漏洞
Nsasoft SpotIE Internet Explorer Password Recovery is a password recovery tool developed by the US company Nsasoft. Version 2.9.5 of Nsasoft SpotIE Internet Explorer Password Recovery contains a buffer overflow vulnerability. This vulnerability stems from a buffer overflow in the registration key...
CVE-2025-70041
An issue pertaining to CWE-259: Use of Hard-coded Password was discovered in oslabs-beta ThermaKube master...
PT-2026-24745
Name of the Vulnerable Software and Affected Versions Keycloak affected versions not specified Description A flaw exists in the Account REST API of Keycloak that allows a user authenticated with a lower security level to perform sensitive actions intended only for higher-assurance sessions. An...
PT-2026-24772
SQL Server Password Changer 1.90 contains a buffer overflow vulnerability that allows local attackers to crash the application by supplying an oversized payload. Attackers can inject 6000 bytes of data into the User Name and Registration Code field to trigger a denial of service condition...