Lucene search
K

34 matches found

NVD
NVD
added 2026/04/28 10:16 p.m.1 views

CVE-2026-41446

Snap One WattBox 800 and 820 series firmware versions prior to 2.10.0.0 contain undisclosed diagnostic HTTP endpoints that require only the device MAC address and service tag for authentication, both of which are printed in plaintext on the physical device label. Attackers with access to the devi...

9.8CVSS0.00433EPSS
Exploits0References1
CVE
CVE
added 2026/04/28 9:15 p.m.13 views

CVE-2026-41446

The affected product is the Snap One WattBox 800 and 820 series running firmware

9.8CVSS5.6AI score0.00433EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2026/04/28 9:15 p.m.1 views

CVE-2026-41446 WattBox 800 & 820 Series < 2.10.0.0 RCE via Diagnostic Endpoints

Snap One WattBox 800 and 820 series firmware versions prior to 2.10.0.0 contain undisclosed diagnostic HTTP endpoints that require only the device MAC address and service tag for authentication, both of which are printed in plaintext on the physical device label. Attackers with access to the devi...

9.8CVSS5.6AI score0.00433EPSS
Exploits0References1
Cvelist
Cvelist
added 2026/04/28 9:15 p.m.29 views

CVE-2026-41446 WattBox 800 & 820 Series < 2.10.0.0 RCE via Diagnostic Endpoints

Snap One WattBox 800 and 820 series firmware versions prior to 2.10.0.0 contain undisclosed diagnostic HTTP endpoints that require only the device MAC address and service tag for authentication, both of which are printed in plaintext on the physical device label. Attackers with access to the devi...

9.8CVSS0.00433EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2026/04/28 9:15 p.m.1 views

CVE-2026-41446

Snap One WattBox 800 and 820 series firmware versions prior to 2.10.0.0 contain undisclosed diagnostic HTTP endpoints that require only the device MAC address and service tag for authentication, both of which are printed in plaintext on the physical device label. Attackers with access to the devi...

9.8CVSS5.6AI score0.00433EPSS
Exploits0References2
CNNVD
CNNVD
added 2026/04/28 12:0 a.m.6 views

Snap One Wattbox 信任管理问题漏洞

The Snap One Wattbox is a series of power solutions developed by Snap One Corporation. The Snap One WattBox 800 and 820, versions prior to 2.10.0.0, had a trust management vulnerability. This vulnerability stemmed from the inclusion of undisclosed diagnostic HTTP endpoints, which could allow...

9.8CVSS6.1AI score0.00433EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2026/04/28 12:0 a.m.3 views

PT-2026-35820

Name of the Vulnerable Software and Affected Versions Snap One WattBox 800 and 820 series versions prior to 2.10.0.0 Description Undisclosed diagnostic HTTP endpoints require only the device MAC address and service tag for authentication. Both values are printed in plaintext on the physical devic...

9.8CVSS6.1AI score0.00433EPSS
Exploits0References4
EUVD
EUVD
added 2025/10/07 12:30 a.m.3 views

EUVD-2018-1983

Malware in sbrugna...

10CVSS8.9AI score0.01937EPSS
Exploits0References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.4 views

EUVD-2008-2547

Malware in sbrugna...

4.9CVSS6.3AI score0.00355EPSS
Exploits0References8
OpenVAS
OpenVAS
added 2025/05/29 12:0 a.m.14 views

Ubuntu: Security Advisory (USN-7541-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS7.2AI score0.00392EPSS
Exploits1References2
Tenable Nessus
Tenable Nessus
added 2025/03/05 12:0 a.m.8 views

Linux Distros Unpatched Vulnerability : CVE-2023-37788

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - goproxy v1.1 was discovered to contain an issue which can lead to a Denial of service DoS via unspecified vectors. CVE-2023-37788 Note that Nessus relies on the...

7.5CVSS6.7AI score0.00841EPSS
Exploits1References4
OpenVAS
OpenVAS
added 2025/02/21 12:0 a.m.13 views

Ubuntu: Security Advisory (USN-7281-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5.3CVSS5.5AI score0.01193EPSS
Exploits0References2
The Hacker News
The Hacker News
added 2024/06/10 11:20 a.m.13 views

Azure Service Tags Vulnerability: Microsoft Warns of Potential Abuse by Hackers

Microsoft is warning about the potential abuse of Azure Service Tags by malicious actors to forge requests from a trusted service and get around firewall rules, thereby allowing them to gain unauthorized access to cloud resources. "This case does highlight an inherent risk in using service tags a...

7.9AI score
Exploits0
CNNVD
CNNVD
added 2023/07/13 12:0 a.m.3 views

Google Android Automotive OS 访问控制错误漏洞

Google Android Automotive OS is an operating system and platform from Google Inc. that runs directly on in-vehicle hardware. Google Android Automotive OS suffers from a security vulnerability that stems from a notification access rights dialog where a malicious application can embed a very long...

5.5CVSS5.7AI score0.0007EPSS
Exploits0References2
Exploit DB
Exploit DB
added 2020/02/06 12:0 a.m.141 views

TapinRadio 2.12.3 - &#039;username&#039; Denial of Service (PoC)

Exploit Title: TapinRadio 2.12.3 - 'username' Denial of Service PoC Discovery by: chuyreds Discovery Date: 2020-02-05 Vendor Homepage: http://www.raimersoft.com/rarmaradio.html Software Link : http://www.raimersoft.com/downloads/tapinradiosetupx64.exe Tested Version: 2.12.3 Vulnerability Type:...

7.4AI score
Exploits0
exploitpack
exploitpack
added 2020/01/06 12:0 a.m.17 views

RemShutdown 2.9.0.0 - Name Denial of Service (PoC)

RemShutdown 2.9.0.0 - Name Denial of Service PoC Exploit Title: RemShutdown 2.9.0.0 - 'Name' Denial of Service PoC Exploit Author : Ismail Tasdelen Exploit Date: 2020-01-06 Vendor Homepage : http://www.nsauditor.com/ Link Software : http://www.nsauditor.com/downloads/remshutdownsetup.exe Tested o...

7.3AI score
Exploits0
Exploit DB
Exploit DB
added 2020/01/06 12:0 a.m.220 views

SpotIM 2.2 - &#039;Name&#039; Denial Of Service

Exploit Title: SpotIM 2.2 - 'Name' Denial Of Service Exploit Author : Ismail Tasdelen Exploit Date: 2020-01-06 Vendor Homepage : http://www.nsauditor.com/ Link Software : http://www.nsauditor.com/downloads/spotimsetup.exe Tested on OS: Windows 10 CVE : N/A ''' Proof of Concept PoC:...

7.4AI score
Exploits0
The Hacker News
The Hacker News
added 2019/05/02 8:14 a.m.76 views

Pre-Installed Software Flaw Exposes Most Dell Computers to Remote Hacking

If you use a Dell computer, then beware — hackers could compromise your system remotely. Bill Demirkapi, a 17-year-old independent security researcher, has discovered a critical remote code execution vulnerability in the Dell SupportAssist utility that comes pre-installed on most Dell computers...

8.8CVSS2AI score0.17617EPSS
Exploits0
OpenVAS
OpenVAS
added 2015/12/03 12:0 a.m.23 views

Dell Foundation Services <= 2.3.3800.0A00 Information Disclosure Vulnerability - Active Check

An issue in Dell Foundation Services, version 2.3.3800.0A00 and below, can be exploited by a malicious website to leak the Dell service tag of a Dell system, which can be used for tracking purposes, or for social engineering. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might ...

7.2AI score
Exploits0References1
Exploit DB
Exploit DB
added 2010/08/03 12:0 a.m.14 views

PMSoftware Simple Web Server 2.1 - &#039;From:&#039; Header Processing Remote Denial of Service

source: https://www.securityfocus.com/bid/42155/info PMSoftware Simple Web Server is prone to a denial-of-service vulnerability. Remote attackers can exploit this issue to cause the application to stop responding, denying service to legitimate users. Simple Web Server 2.1 is vulnerable; other...

7.4AI score
Exploits0
Rows per page
Query Builder