CVE-2026-100306 TDuck survey form through 6.0 Write Password Bypass via Client-Side Enforcement

TDuck survey form through 6.0 fails to validate write passwords on submission endpoints, enforcing the check only on the front end. Remote unauthenticated attackers can submit form entries directly to public submission APIs without providing the password by using the form key from share links...

Leak of SNMP write password via SNMP read community in NETGEAR WG102 - Prosafe 802.11g Access Point

Dear all, after informing Netgear about the unsafe handling of passwords on their WG102 Access Points nothing happened for several weeks. To inform other users about the potential threat to their networks I decided to share my findings. WG102 offers the the typical SNMP write & SNMP read communit...

Netgear WG102 Leaks SNMP write password with read access

No description provided by source. Dear all, after informing Netgear about the unsafe handling of passwords on their WG102 Access Points nothing happened for several weeks. To inform other users about the potential threat to their networks I decided to share my findings. WG102 offers the the...

Netgear WG102 Leaks SNMP write password with read access

Exploit for hardware platform in category remote exploits ======================================================== Netgear WG102 Leaks SNMP write password with read access ======================================================== Dear all, after informing Netgear about the unsafe handling of...

Netgear WG102 - Leaks SNMP Write Password With Read Access

Dear all, after informing Netgear about the unsafe handling of passwords on their WG102 Access Points nothing happened for several weeks. To inform other users about the potential threat to their networks I decided to share my findings. WG102 offers the the typical SNMP write & SNMP read communit...

CVE-2005-0440

ELOG before 2.5.7 allows remote attackers to bypass authentication and download a configuration file that contains a sensitive write password via a modified URL...

CVE-2005-0440: Undefined Security Weakness

ELOG before 2.5.7 allows remote attackers to bypass authentication and download a configuration file that contains a sensitive write password via a modified URL...