叡揚資訊 Vitals ESP - Use of Hard-coded Cryptographic Key

Description

PoC

None yet. Search at https://trap.biu.life/?ref=rss

References

• https://www.twcert.org.tw/tw/cp-132-7224-4fe1f-1.html
• https://www.twcert.org.tw/newepaper/cp-151-7224-4fe1f-3.html
• https://www.dreamjtech.com/7458/
• https://nvd.nist.gov/vuln/detail/CVE-2023-37291
• https://www.cve.org/CVERecord?id=CVE-2023-37291
• https://www.twcert.org.tw/en/cp-139-7383-5b70e-2.html
• https://www.twcert.org.tw/tw/lp-132-1-7-60.html

Related Vulnerabilities

• PoCCVE-2026-18072: Advanced Responsive Video Embedder 10.8.7/10.8.8 - Hardcoded Backdoor Authentication Bypass
• PoCarangodb-auth-bypass: ArangoDB - Authentication Bypass via URL-Encoded Underscore (%5f) to RCE
• PoCCVE-2026-56265: Crawl4AI < 0.8.7 - Hardcoded JWT Signing Key Authentication Bypass
• PoCCVE-2026-44825: Apache Solr 9.4.0-9.10.1 / 10.0.0 - Hardcoded Default Credentials
• 盛源｜DMS+ (非行動端) - Use of Hard-coded Credentials
• 博格資訊管理顧問｜ERP App - Use of Hard-coded Credentials
• 叡揚資訊｜Vitals ESP - 存在2個漏洞
• 九佳易管理系统 PrivilegedCodeDestroy SQL注入漏洞
• PoCCVE-2025-69971: FUXA <= 1.2.7 - Hardcoded JWT Secret Authentication Bypass
• WordPress Drag and Drop Multiple File Upload for WooCommerce dnd_codedropz_upload_wc 文件上传漏洞（CVE-2025-4403）
• 九佳易 Interface/licx/PrivilegedCodeDestroy.asmx/UpdatePrivilegedState SQL 注入漏洞