Lucene search
+L

917 matches found

Github Security Blog
Github Security Blog
added 2026/06/05 4:45 p.m.30 views

Vantage6: Set admin user and password from environment or configuration

Impact Vantage6 currently provides an initial user with username root and password root. This is not ideal for the following reasons: - Attackers know that almost all vantage6 servers have a user with username root that probably has admin rights - The initial password is very weak and it is...

6.9CVSS5.5AI score0.00292EPSS
SaveExploits0References5Affected Software1
OSV
OSV
added 2026/06/05 4:45 p.m.23 views

GHSA-FGMC-2HQJ-86V4 Vantage6: Set admin user and password from environment or configuration

Impact Vantage6 currently provides an initial user with username root and password root. This is not ideal for the following reasons: - Attackers know that almost all vantage6 servers have a user with username root that probably has admin rights - The initial password is very weak and it is...

6.9CVSS5.5AI score0.00292EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2026/06/05 12:00 a.m.19 views

PT-2026-49248

Impact Vantage6 currently provides an initial user with username root and password root. This is not ideal for the following reasons: - Attackers know that almost all vantage6 servers have a user with username root that probably has admin rights - The initial password is very weak and it is...

6.9CVSS5.4AI score
SaveExploits0References4
NVD
NVD
added 2026/06/04 4:16 p.m.24 views

CVE-2026-36182

GNCC GP5 v7.1.76 was discovered to utilize a weak hashing algorithm to protect the root password, possibly allowing attackers to obtain root credentials and privileges via a bruteforce attack...

9.8CVSS0.0019EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/06/04 12:00 a.m.18 views

GNCC GP5 加密问题漏洞

GNCC GP5 is a 2K indoor security camera produced by GNCC Corporation. The GNCC GP5 v7.1.76 version contains a security vulnerability. This vulnerability stems from the use of a weak hash algorithm to protect the root password, which may allow attackers to obtain root credentials through brute-for...

9.8CVSS5.9AI score0.0019EPSS
SaveExploits0References3
EUVD
EUVD
added 2026/06/04 12:00 a.m.24 views

EUVD-2026-34309

GNCC GP5 v7.1.76 was discovered to utilize a weak hashing algorithm to protect the root password, possibly allowing attackers to obtain root credentials and privileges via a bruteforce attack...

5.8AI score0.0019EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/06/04 12:00 a.m.28 views

PT-2026-46241

T3 Technology CPE models T625Pro v1.0.07, T6825G v1.0.03, and T7281 v1.0.03 were discovered to contain a hardcoded password for root access under the "superadmin" account...

5.8AI score0.00421EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
added 2026/06/04 12:00 a.m.10 views

CVE-2026-35905

T3 Technology CPE models T625Pro v1.0.07, T6825G v1.0.03, and T7281 v1.0.03 were discovered to contain a hardcoded password for root access under the "superadmin" account...

5.5AI score0.00421EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
added 2026/06/04 12:00 a.m.28 views

PT-2026-46255

GNCC GP5 v7.1.76 was discovered to utilize a weak hashing algorithm to protect the root password, possibly allowing attackers to obtain root credentials and privileges via a bruteforce attack...

5.8AI score0.0019EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
added 2026/06/04 12:00 a.m.22 views

CVE-2026-36182

GNCC GP5 v7.1.76 was discovered to utilize a weak hashing algorithm to protect the root password, possibly allowing attackers to obtain root credentials and privileges via a bruteforce attack...

5.5AI score0.0019EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2026/06/04 12:00 a.m.52 views

CVE-2026-36182

GNCC GP5 v7.1.76 was discovered to utilize a weak hashing algorithm to protect the root password, possibly allowing attackers to obtain root credentials and privileges via a bruteforce attack...

0.0019EPSS
SaveExploits0References1
NVD
NVD
added 2026/05/29 7:16 p.m.25 views

CVE-2026-40425

The administrator account for the Danelec MacGregor Voyage Data Recorder web interface can directly edit sensitive files related to authentication, potentially changing the root password...

6.9CVSS0.00376EPSS
SaveExploits0References3
EUVD
EUVD
added 2026/05/29 5:47 p.m.29 views

EUVD-2026-33403

The administrator account for the Danelec MacGregor Voyage Data Recorder web interface can directly edit sensitive files related to authentication, potentially changing the root password...

6.9CVSS5.8AI score0.00376EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2026/05/29 5:47 p.m.15 views

CVE-2026-40425 MacGregor Voyage Data Recorder (VDR) G4e Files or Directories Accessible to External Parties

The administrator account for the Danelec MacGregor Voyage Data Recorder web interface can directly edit sensitive files related to authentication, potentially changing the root password...

6.9CVSS5.8AI score0.00376EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2026/05/29 5:47 p.m.46 views

CVE-2026-40425 MacGregor Voyage Data Recorder (VDR) G4e Files or Directories Accessible to External Parties

The administrator account for the Danelec MacGregor Voyage Data Recorder web interface can directly edit sensitive files related to authentication, potentially changing the root password...

6.9CVSS0.00376EPSS
SaveExploits0References3
CVE
CVE
added 2026/05/29 5:47 p.m.45 views

CVE-2026-40425

CVE-2026-40425 affects the Danelec MacGregor Voyage Data Recorder (VDR) web interface. The vulnerability allows the administrator account to directly edit sensitive authentication-related files, potentially changing the root password. This is supported by ICS-CERT/DHS metrics indicating impact to...

6.9CVSS5.8AI score0.00376EPSS
SaveExploits0References3Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/05/29 5:47 p.m.15 views

CVE-2026-40425

The administrator account for the Danelec MacGregor Voyage Data Recorder web interface can directly edit sensitive files related to authentication, potentially changing the root password...

6.9CVSS5.8AI score0.00376EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2026/05/29 12:00 a.m.25 views

PT-2026-44925

Name of the Vulnerable Software and Affected Versions Danelec MacGregor Voyage Data Recorder affected versions not specified Description The administrator account for the web interface allows direct editing of sensitive authentication files, which could enable an unauthorized change of the root...

6.9CVSS5.5AI score0.00376EPSS
SaveExploits0References6
CNNVD
CNNVD
added 2026/05/29 12:00 a.m.21 views

Danelec Marine Danelec MacGregor Voyage Data Recorder 安全漏洞

The Danelec Marine Danelec MacGregor Voyage Data Recorder is a series of ship navigation data recording systems developed by Danelec Marine. There is a security vulnerability associated with the Danelec Marine Danelec MacGregor Voyage Data Recorder. This vulnerability stems from the possibility f...

6.9CVSS5.8AI score0.00376EPSS
SaveExploits0References4
NVD
NVD
added 2026/05/27 2:16 p.m.29 views

CVE-2026-36538

Netis AC1200 Router NC21 V4.0.1.4296 contains a hard-coded root credential stored in /etc/shadow.sample. The password for the root account is set to the trivially weak value root, allowing an attacker with access to the device to authenticate as root and gain full control of the underlying...

7.3CVSS0.00301EPSS
SaveExploits0References1
Rows per page
Query Builder