Prisma Industriale Checkweigher PrismaWEB 1.21 allows remote attackers to discover the hardcoded prisma password for the prismaweb account by reading user/scripts/login_par.js.

An issue was discovered on certain DrayTek Vigor routers before July 2022 such as the Vigor3910 before 4.3.1.1. /cgi-bin/wlogin.cgi has a buffer overflow via the username or password to the aa or ab field.

A command injection vulnerability has been reported in Fortinet FortiSandbox. The vulnerability is due insufficient validation of start_vnc request parameters used in the admin web service.

The file-management scripts in the management GUI in Symantec Web Gateway 5.0.x before 5.0.3 allow remote attackers to upload arbitrary code to a designated pathname, and possibly execute this code, via unspecified vectors.

Threat Encyclopedia

1238569

ICS Prisma Industriale Checkweigher PrismaWEB 1.21 Hard-coded Credentials (CVE-2018-9161)

Critical

2026/06/24

1238577

WEB DrayTek Vigor Routers Stack-based Buffer Overflow (CVE-2022-32548)

Critical

2026/06/24

1238572

WEB Fortinet FortiSandbox start_vnc Command Injection (CVE-2026-25089)

Critical

2026/06/24

1238578

WEB Symantec Web Gateway Arbitrary .PHP File Upload (CVE-2012-0299)

Critical

2026/06/24