135 matches found
Sensitive-Information-disclosure-via-SPI-flash-firmware-for-Hathway-router-CVE-2024-46383
通过Hathway路由器SPI闪存固件泄露敏感信息-CVE-2024-46383 漏洞描述： 在对路由器固件进行安全评估时，发现与连接到路由器的设备（如手机、笔记本电脑、平板电脑）相关的敏感信息以明文形式存储，攻击者可以利用这些信息。 产品厂商：Hathway 受影响产品：CM5100-511 受影响版本：4.1.1.24 漏洞评分V3.1：5.2 中危 AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N 概念验证（PoC）： 1. 给路由器通电，使用Nmap工具进行初步网络侦察。 2. 拆开路由器，按下图所示找到UART连接。...
Extracting-User-credentials-For-Web-portal-and-WiFi-AP-For-Hathway-Router-CVE-2024-44815-
通过SPI闪存提取Hathway路由器用户凭据-CVE-2024-44815 漏洞描述： 在对路由器固件进行安全评估时，观察到Web门户和Wi-Fi接入点的路由器登录凭据均以明文形式存储在SPI闪存中。攻击者可以提取登录凭据并加以滥用。 产品厂商：Hathway 受影响产品：CM5100-511 受影响版本：4.1.1.24 漏洞评分 V3.1：6.8 中危 AV:P/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:H 概念验证： 1. 打开路由器电源，使用Nmap工具进行初步网络侦察。 2. 拆解路由器，按下图所示找到UART连接。...
CVE-2022-42176
PCSecure V5.0.8.xw - 配置文件中使用硬编码凭据导致管理员面板访问 摘要 厂商: PCTechSoft SAS 产品: PCSecure 受影响版本: 5.0.8.xw 代号: PapiQuieroPollo00 漏洞 类型: 使用硬编码凭据 CWE-798 CVSSv3.1 向量: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVSSv3.1 基础评分: 7.8 高危 漏洞利用: 否 CVE ID: CVE-2022-42176 描述 PCSecure V5.0.8.xw 的配置文件 system.bmp...
CVE-2026-5076
CVE-2026-5076 - ARMember 密码重置漏洞 漏洞信息 项目| 详情 ---|--- CVE 编号| CVE-2026-5076 插件| ARMember – 会员插件与内容限制 受影响版本| Premium = 7.3.1 已修补版本| 7.3.2 CVSS 评分| 9.8（严重） CWE| CWE-640：弱密码恢复 类型| 不安全的密码重置机制 → 明文密钥存储 攻击向量| 网络 / 远程 / 未认证（通过 SQLi 链） 活跃安装量| 30,000+（Premium） 发现者| Wordfence Threat Intelligence 发布日期|...
CVE-2026-44187 Ansible-lightspeed: ansible lightspeed extension for visual studio code: information disclosure of google gemini api key
A flaw was found in the Ansible Lightspeed extension for Visual Studio Code. This vulnerability allows an attacker with local access to the workstation, or malware running with the user's privileges, to read the Google Gemini API key. The extension insecurely stores the API key in plain text with...
EUVD-2026-47653
A flaw was found in the Ansible Lightspeed extension for Visual Studio Code. This vulnerability allows an attacker with local access to the workstation, or malware running with the user's privileges, to read the Google Gemini API key. The extension insecurely stores the API key in plain text with...
PT-2026-28113
IBM InfoSphere Information Server 11.7.0.0 through 11.7.1.6 product stores user credentials and other sensitive information in plain text which can be read by a local user...
CVE-2024-42197
HCL Workload Scheduler stores user credentials in plain text which can be read by a local user...
EUVD-2025-36360
Liferay Portal 7.4.0 through 7.4.3.99, and older unsupported versions, and Liferay DXP 2023.Q3.1 through 2023.Q3.4, 7.4 GA through update 92, 7.3 GA through update 34, and older unsupported versions stores password reset tokens in plain text, which allows attackers with access to the database to...
CVE-2025-62261
Liferay Portal 7.4.0 through 7.4.3.99, and older unsupported versions, and Liferay DXP 2023.Q3.1 through 2023.Q3.4, 7.4 GA through update 92, 7.3 GA through update 34, and older unsupported versions stores password reset tokens in plain text, which allows attackers with access to the database to...
CVE-2025-62261
Summary of CVE-2025-62261 (Liferay Portal / Liferay DXP) Affected products/versions (per connected sources): Liferay Portal 7.4.0–7.4.3.99 and older unsupported versions; Liferay DXP 2023.Q3.1–2023.Q3.4; 7.4 GA through update 92; 7.3 GA through update 34. Root cause and impact: Password reset tok...
CVE-2025-62261
Liferay Portal 7.4.0 through 7.4.3.99, and older unsupported versions, and Liferay DXP 2023.Q3.1 through 2023.Q3.4, 7.4 GA through update 92, 7.3 GA through update 34, and older unsupported versions stores password reset tokens in plain text, which allows attackers with access to the database to...
EUVD-2001-1236
Malware in sbrugna...
EUVD-2021-25413
Malware in sbrugna...
EUVD-2001-1234
Malware in sbrugna...
EUVD-2020-27053
Malware in sbrugna...
EUVD-2016-9792
Malware in sbrugna...
EUVD-2017-11812
Malware in sbrugna...