Lucene search
+L

2 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/12/27 12:00 a.m.•1 views

CVE-2025-15107: Use of Hard-coded Cryptographic Key

A security vulnerability has been detected in actiontech sqle up to 4.2511.0. The impacted element is an unknown function of the file sqle/utils/jwt.go of the component JWT Secret Handler. The manipulation of the argument JWTSecretKey leads to use of hard-coded cryptographic key . The attack is...

8.1CVSS4.3AI score0.00618EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2025/12/27 12:00 a.m.•2 views

PT-2025-54681

A security vulnerability has been detected in actiontech sqle up to 4.2511.0. The impacted element is an unknown function of the file sqle/utils/jwt.go of the component JWT Secret Handler. The manipulation of the argument JWTSecretKey leads to use of hard-coded cryptographic key. The attack is...

8.1CVSS0.00618EPSS
SaveExploits1References9
Rows per page
Query Builder