CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
SimpleHelp Remote Support Software Privilege Escalation Vulnerability (CVE-2024-57726) Advisory
[Affected Scope] SimpleHelp remote support software v5.5.7 and earlier versions
[Impact] Low-privilege technician accounts can generate API keys with excessive permissions, leading to full server administrator privilege escalation
[Mitigation] Immediately upgrade to SimpleHelp v5.5.8 or later, and audit all existing API keys for unauthorized creation
EyesOfNetwork 5.3 Hardcoded API Key Vulnerability (CVE-2020-8657) Technical Advisory
[Affected Scope] EyesOfNetwork version 5.3 and prior
[Impact] The default installation uses a hardcoded API key ('EONAPI_KEY'), allowing unauthenticated remote attackers to calculate and generate admin access tokens to compromise the system
[Mitigation] Immediately replace the hardcoded API key with a unique cryptographically secure string and upgrade to the patched version