EUVD-2011-4253

Malware in sbrugna...

EUVD-2020-30294

Malware in sbrugna...

EUVD-2005-4040

Malware in sbrugna...

EUVD-2012-0275

Malware in sbrugna...

EUVD-2013-4848

Malware in sbrugna...

EUVD-2015-6411

Malware in sbrugna...

EUVD-2016-7987

Malware in sbrugna...

EUVD-2016-6773

Malware in sbrugna...

EUVD-2012-1850

Malware in sbrugna...

EUVD-2023-26524

Malicious code in bioql PyPI...

CVE-2025-8220

A vulnerability has been found in Engeman Web up to 12.0.0.2. The affected element is an unknown function of the file /Login/RecoveryPass of the component Password Recovery Page. The manipulation of the argument LanguageCombobox as part of Cookie leads to sql injection. The attack is possible to ...

CVE-2025-24517

Use of client-side authentication issue exists in CHOCO TEI WATCHER mini IB-MCT001 all versions. If this issue is exploited, a remote attacker may obtain the product login password without authentication...

PT-2025-13656 · Knime · Knime Business Hub

Name of the Vulnerable Software and Affected Versions: KNIME Business Hub versions prior to 1.10.3 KNIME Business Hub versions prior to 1.11.3 KNIME Business Hub versions prior to 1.12.3 KNIME Business Hub versions prior to 1.13.2 Description: A hard-coded, non-random password for the object stor...

CVE-2022-33878

An exposure of sensitive information to an unauthorized actor vulnerabiltiy CWE-200 in FortiClient for Mac versions 7.0.0 through 7.0.5 may allow a local authenticated attacker to obtain the SSL-VPN password in cleartext via running a logstream for the FortiTray process in the terminal...

TYPO3 Install Tool Subcomponent Allows Access Using Only a Password's MD5 Hash as a Credential

The Install Tool subcomponent in TYPO3 4.0.13 and earlier, 4.1.x before 4.1.13, 4.2.x before 4.2.10, and 4.3.x before 4.3beta2 allows remote attackers to gain access by using only the password's md5 hash as a credential...

CVE-2021-31152

Multilaser Router AC1200 V02.03.01.45pt contains a cross-site request forgery CSRF vulnerability. An attacker can enable remote access, change passwords, and perform other actions through misconfigured requests, entries, and headers...

The vulnerability of NETGEAR Arlo base stations and NETGEAR Arlo Q/Arlo Q Plus wireless video cameras lies in the use of pre-installed credentials, which allows a intruder to gain access to the device.

The vulnerability of the microprogramming software used in NETGEAR Arlo base stations and wireless video surveillance cameras like NETGEAR Arlo Q and NETGEAR Arlo Q Plus lies in the use of preset login credentials password “12345678”. Exploiting this vulnerability could allow a malicious actor to...

Fluxay Sensor Detection

This host appears to be running Fluxay Sensor on this port. Fluxay Sensor is a backdoor that allows an intruder to gain remote access to files on your computer. Similar to SubSeven, this program installs as a service and is password protected to make it difficult to stop or remove it. An attacker...

CVE-2002-0776

getuserdesc.asp in Hosting Controller 2002 allows remote attackers to change the passwords of arbitrary users and gain privileges by modifying the username parameter, as addressed by the "UpdateUser" hot fix...

MySimpleNews 1.0 - Remote Readable Administrator Password

source: https://www.securityfocus.com/bid/5866/info MySimpleNews stores the administrative password in clear text in a remotely viewable HTML file. Any remote user can view the contents of the HTML file to determine the administrator password. The administrator password can be found in the HTML...