CVE-2023-25437

An issue was discovered in vTech VCS754 version 1.1.1.A before 1.1.1.H, allows attackers to gain escalated privileges and gain sensitive information due to cleartext passwords passed in the raw HTML...

EUVD-2022-50605

Malicious code in bioql PyPI...

EUVD-2023-29392

Malicious code in bioql PyPI...

CVE-2022-47848

An issue was discovered in Bezeq Vtech NB403-IL version BZ2.02.07.09.13.01 and Vtech IAD604-IL versions BZ2.02.07.09.13.01, BZ2.02.07.09.13T, and BZ2.02.07.09.09T, allows remote attackers to gain sensitive information via rootDesc.xml page of the UPnP service...

CVE-2022-47848

An issue was discovered in Bezeq Vtech NB403-IL version BZ2.02.07.09.13.01 and Vtech IAD604-IL versions BZ2.02.07.09.13.01, BZ2.02.07.09.13T, and BZ2.02.07.09.09T, allows remote attackers to gain sensitive information via rootDesc.xml page of the UPnP service...

CVE-2022-47848

An issue was discovered in Bezeq Vtech NB403-IL version BZ2.02.07.09.13.01 and Vtech IAD604-IL versions BZ2.02.07.09.13.01, BZ2.02.07.09.13T, and BZ2.02.07.09.09T, allows remote attackers to gain sensitive information via rootDesc.xml page of the UPnP service...

CVE-2022-47848

An issue was discovered in Bezeq Vtech NB403-IL version BZ2.02.07.09.13.01 and Vtech IAD604-IL versions BZ2.02.07.09.13.01, BZ2.02.07.09.13T, and BZ2.02.07.09.09T, allows remote attackers to gain sensitive information via rootDesc.xml page of the UPnP service...

Design/Logic Flaw

An issue was discovered in Bezeq Vtech NB403-IL version BZ2.02.07.09.13.01 and Vtech IAD604-IL versions BZ2.02.07.09.13.01, BZ2.02.07.09.13T, and BZ2.02.07.09.09T, allows remote attackers to gain sensitive information via rootDesc.xml page of the UPnP service...

CVE-2022-47848

An issue was discovered in Bezeq Vtech NB403-IL version BZ2.02.07.09.13.01 and Vtech IAD604-IL versions BZ2.02.07.09.13.01, BZ2.02.07.09.13T, and BZ2.02.07.09.09T, allows remote attackers to gain sensitive information via rootDesc.xml page of the UPnP service...

CVE-2022-47848: Improper Authentication

An issue was discovered in Bezeq Vtech NB403-IL version BZ2.02.07.09.13.01 and Vtech IAD604-IL versions BZ2.02.07.09.13.01, BZ2.02.07.09.13T, and BZ2.02.07.09.09T, allows remote attackers to gain sensitive information via rootDesc.xml page of the UPnP service...

PT-2023-15491 · Vtech · Vtech Iad604-Il +1

Name of the Vulnerable Software and Affected Versions: Bezeq Vtech NB403-IL version BZ 2.02.07.09.13.01 Vtech IAD604-IL versions BZ 2.02.07.09.13.01, BZ 2.02.07.09.13T, and BZ 2.02.07.09.09T Description: An issue was discovered that allows remote attackers to gain sensitive information via the...

CVE-2022-47848

The CVE-2022-47848 issue affects Bezeq Vtech NB403-IL (BZ_2.02.07.09.13.01) and Vtech IAD604-IL (BZ_2.02.07.09.13.01, 13T, 09T). Description: remote attackers can obtain sensitive information via the UPnP service’s rootDesc.xml page, indicating an information disclosure via UPnP. Root cause: expo...

CVE-2023-25437

An issue was discovered in vTech VCS754 version 1.1.1.A before 1.1.1.H, allows attackers to gain escalated privileges and gain sensitive information due to cleartext passwords passed in the raw HTML...

CVE-2023-25437

An issue was discovered in vTech VCS754 version 1.1.1.A before 1.1.1.H, allows attackers to gain escalated privileges and gain sensitive information due to cleartext passwords passed in the raw HTML...

Hardcoded credentials

An issue was discovered in vTech VCS754 version 1.1.1.A before 1.1.1.H, allows attackers to gain escalated privileges and gain sensitive information due to cleartext passwords passed in the raw HTML...

CVE-2023-25437

An issue was discovered in vTech VCS754 version 1.1.1.A before 1.1.1.H, allows attackers to gain escalated privileges and gain sensitive information due to cleartext passwords passed in the raw HTML...

CVE-2023-25437

The CVE-2023-25437 issue affects vTech VCS754; vulnerable components are in versions 1.1.1.A through 1.1.1.G where cleartext passwords are passed in the raw HTML. This root cause enables attackers to escalate privileges and access sensitive information. Remediation per connected sources is to upg...

CVE-2023-25437

An issue was discovered in vTech VCS754 version 1.1.1.A before 1.1.1.H, allows attackers to gain escalated privileges and gain sensitive information due to cleartext passwords passed in the raw HTML...

CVE-2023-25437: Cleartext Transmission of Sensitive Information

An issue was discovered in vTech VCS754 version 1.1.1.A before 1.1.1.H, allows attackers to gain escalated privileges and gain sensitive information due to cleartext passwords passed in the raw HTML...

PT-2023-20059 · Vtech · Vtech Vcs754

Name of the Vulnerable Software and Affected Versions: vTech VCS754 versions 1.1.1.A through 1.1.1.G Description: An issue was discovered that allows attackers to gain escalated privileges and gain sensitive information due to cleartext passwords passed in the raw HTML. Recommendations: For...