Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 09 Oct 2026 22:20:37 +0000 CVE-2025-13776 — Hard-coded database credentials in Finka software https://cve.radiocsirt.org/vuln/cve-2025-13776 <p><strong>Affected:</strong> TIK-SOFT Finka-FK, TIK-SOFT Finka-KPR, TIK-SOFT Finka-Płace, TIK-SOFT Finka-Faktura, TIK-SOFT Finka-Magazyn, TIK-SOFT Finka-STW</p> <p>Multiple Finka programs use hard-coded Firebird database credentials (shared across all instances of this software). A malicious attacker in local network who knows default credentials is able to read and edit database content.</p> <p>This vulnerability has been fixed in version: Finka-FK 18.5, Finka-KPR 16.6, Finka-Płace 13.4, Finka-Faktura 18.3, Finka-Magazyn 8.3, Finka-STW 12.3</p> <p><strong>Affected:</strong> TIK-SOFT Finka-FK, TIK-SOFT Finka-KPR, TIK-SOFT Finka-Płace, TIK-SOFT Finka-Faktura, TIK-SOFT Finka-Magazyn, TIK-SOFT Finka-STW</p> <p>Multiple Finka programs use hard-coded Firebird database credentials (shared across all instances of this software). A malicious attacker in local network who knows default credentials is able to read and edit database content.</p> <p>This vulnerability has been fixed in version: Finka-FK 18.5, Finka-KPR 16.6, Finka-Płace 13.4, Finka-Faktura 18.3, Finka-Magazyn 8.3, Finka-STW 12.3</p> https://cve.radiocsirt.org/vuln/cve-2025-13776