# Hard-coded credentials.

Passwords and keys built into the code, or weak credentials. Every Advisory and CVE whose weakness (CWE) is one of these, newest first.

## Records, newest first (an older page)

- [Scrapy HTTP authentication credentials potentially leaked to target websites](https://agentprime.io/advisories/GHSA-jwqp-28gf-p498.md)
  `GHSA-jwqp-28gf-p498`, `CVE-2021-41125`, `PYSEC-2021-363` · PyPI `scrapy`: affected `<1.8.1 || >=2.0.0, <2.5.1`, fixed in `1.8.1`, `2.5.1` · CVSS 5.7 Medium · Not analysed yet · Published 6 Oct 2021 · Tags: Information disclosure, Hard-coded credentials
- [ECOA BAS controller - Insufficiently Protected Credentials-2](https://agentprime.io/advisories/CVE-2021-41300.md)
  `CVE-2021-41300` · CVE record: ECOA ECS Router Controller ECS (FLASH) and 4 more · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 30 Sept 2021 · Tags: Hard-coded credentials
- [ECOA BAS controller - Use of Hard-coded Credentials](https://agentprime.io/advisories/CVE-2021-41299.md)
  `CVE-2021-41299` · CVE record: ECOA ECS Router Controller ECS (FLASH) and 4 more · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 30 Sept 2021 · Tags: Hard-coded credentials
- [ECOA BAS controller - Insufficiently Protected Credentials-1](https://agentprime.io/advisories/CVE-2021-41297.md)
  `CVE-2021-41297` · CVE record: ECOA ECS Router Controller ECS (FLASH) and 4 more · CVSS 8.8 High · Not analysed yet · Published 30 Sept 2021 · Tags: Hard-coded credentials
- [ECOA BAS controller - Weak Password Requirements](https://agentprime.io/advisories/CVE-2021-41296.md)
  `CVE-2021-41296` · CVE record: ECOA ECS Router Controller ECS (FLASH) and 4 more · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 30 Sept 2021 · Tags: Hard-coded credentials
- [Hard-coded credentials in D-Link](https://agentprime.io/advisories/CVE-2021-21913.md)
  `CVE-2021-21913` · CVE record: D-Link · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 23 Sept 2021 · Tags: Hard-coded credentials
- [Hard-coded Credentials in Enbra Wireless M-Bus devices](https://agentprime.io/advisories/CVE-2021-34571.md)
  `CVE-2021-34571` · CVE record: Enbra AT-WMBUS-16-2 and 2 more · CVSS 6.5 Medium · Not analysed yet · Published 16 Sept 2021 · Tags: Hard-coded credentials
- [Insufficiently Protected Credentials Vulnerability in QSW-M2116P-2T2S and QuNetSwitch](https://agentprime.io/advisories/CVE-2021-28813.md)
  `CVE-2021-28813` · CVE record: QNAP Systems Inc. QSW-M2116P-2T2S and 1 more · CVSS 9.6 Critical · Critical (CVSS 9+) · Not analysed yet · Published 10 Sept 2021 · Tags: Hard-coded credentials
- [Cisco Prime Infrastructure and Cisco Evolved Programmable Network Manager Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2021-34733.md)
  `CVE-2021-34733` · CVE record: Cisco Cisco Prime Infrastructure · CVSS 5.5 Medium · Not analysed yet · Published 2 Sept 2021 · Tags: Hard-coded credentials
- [In WirelessHART-Gateway versions 3.0.7 to 3.0.9 hard-coded credentials have been found](https://agentprime.io/advisories/CVE-2021-34565.md)
  `CVE-2021-34565` · CVE record: Phoenix Contact WHA-GW-F2D2-0-AS- Z2-ETH and 1 more · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 31 Aug 2021 · Tags: Hard-coded credentials
- [A vulnerability in WirelessHART-Gateway <= 3.0.9 could lead to information exposure of sensitive information](https://agentprime.io/advisories/CVE-2021-34560.md)
  `CVE-2021-34560` · CVE record: Phoenix Contact WHA-GW-F2D2-0-AS- Z2-ETH and 1 more · CVSS 5.5 Medium · Not analysed yet · Published 31 Aug 2021 · Tags: Hard-coded credentials
- [D-Link DVG-3104MS version 1.0.2.0.3, 1.0.2.0.4, and 1.0.2.0.4E contains hard-coded credentials for undocumented user accounts in the '/etc/passwd' file.](https://agentprime.io/advisories/CVE-2021-39613.md)
  `CVE-2021-39613` · CVE record · CVSS 8.8 High · Not analysed yet · Published 23 Aug 2021 · Tags: Hard-coded credentials
- [Password in Memory Vulnerability in Retail Operations Product and Counterparty Settlement and Billing (CSB)](https://agentprime.io/advisories/CVE-2021-35529.md)
  `CVE-2021-35529` · CVE record: Hitachi ABB Power Grids Retail Operations and 1 more · CVSS 7.7 High · Not analysed yet · Published 20 Aug 2021 · Tags: Hard-coded credentials
- [Hard-coded credentials in Ypsomed mylife Cloud, mylife Mobile Application](https://agentprime.io/advisories/CVE-2021-27503.md)
  `CVE-2021-27503` · CVE record: Ypsomed mylife Cloud, mylife Mobile Application · No CVSS score · Not analysed yet · Published 2 Aug 2021 · Tags: Hard-coded credentials
- [Insufficiently protected credentials in Ypsomed mylife Cloud, mylife Mobile Application](https://agentprime.io/advisories/CVE-2021-27495.md)
  `CVE-2021-27495` · CVE record: Ypsomed mylife Cloud, mylife Mobile Application · No CVSS score · Not analysed yet · Published 30 Jul 2021 · Tags: Hard-coded credentials
- [Insufficiently protected credentials in Ypsomed mylife Cloud, mylife Mobile Application](https://agentprime.io/advisories/CVE-2021-27491.md)
  `CVE-2021-27491` · CVE record: Ypsomed mylife Cloud, mylife Mobile Application · No CVSS score · Not analysed yet · Published 30 Jul 2021 · Tags: Hard-coded credentials
- [Hard-coded password in Dell Data Protection Advisor](https://agentprime.io/advisories/CVE-2020-5351.md)
  `CVE-2020-5351` · CVE record: Dell Data Protection Advisor · CVSS 7.5 High · Not analysed yet · Published 28 Jul 2021 · Tags: Hard-coded credentials
- [Akkadian Provisioning Manager Engine (PME) Hard-Coded Credentials](https://agentprime.io/advisories/CVE-2021-31579.md)
  `CVE-2021-31579` · CVE record: Akkadian Provisioning Manager Engine (PME) · CVSS 8.2 High · Not analysed yet · Published 22 Jul 2021 · Tags: Hard-coded credentials
- [Cisco SD-WAN vManage Software Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2021-34700.md)
  `CVE-2021-34700` · CVE record: Cisco Cisco SD-WAN vManage · CVSS 5.5 Medium · Not analysed yet · Published 22 Jul 2021 · Tags: Hard-coded credentials
- [Hard-coded credentials in EVlink City (EVC1S22P4 / EVC1S7P4 all versions prior to R8 V3.4.0.1)…](https://agentprime.io/advisories/CVE-2021-22730.md)
  `CVE-2021-22730` · CVE record: EVlink City (EVC1S22P4 / EVC1S7P4 all versions prior to R8 V3.4.0.1), EVlink Parking (EVW2 / EVF2 / EV.2 all versions prior to R8 V3.4.0.1), and EVlink Smart Wallbox (EVB1A all versions prior to R8 V3.4.0.1 ) · No CVSS score · Not analysed yet · Published 21 Jul 2021 · Tags: Hard-coded credentials
- [Hard-coded password in EVlink City (EVC1S22P4 / EVC1S7P4 all versions prior to R8 V3.4.0.1)…](https://agentprime.io/advisories/CVE-2021-22729.md)
  `CVE-2021-22729` · CVE record: EVlink City (EVC1S22P4 / EVC1S7P4 all versions prior to R8 V3.4.0.1), EVlink Parking (EVW2 / EVF2 / EV.2 all versions prior to R8 V3.4.0.1), and EVlink Smart Wallbox (EVB1A all versions prior to R8 V3.4.0.1 ) · No CVSS score · Not analysed yet · Published 21 Jul 2021 · Tags: Hard-coded credentials
- [Hard-coded credentials in EVlink City (EVC1S22P4 / EVC1S7P4 all versions prior to R8 V3.4.0.1)…](https://agentprime.io/advisories/CVE-2021-22707.md)
  `CVE-2021-22707` · CVE record: EVlink City (EVC1S22P4 / EVC1S7P4 all versions prior to R8 V3.4.0.1), EVlink Parking (EVW2 / EVF2 / EV.2 all versions prior to R8 V3.4.0.1), and EVlink Smart Wallbox (EVB1A all versions prior to R8 V3.4.0.1 ) · No CVSS score · EPSS 0.65 · Not analysed yet · Published 21 Jul 2021 · Tags: Hard-coded credentials
- [Hard-coded credentials in Dell Networking](https://agentprime.io/advisories/CVE-2020-5349.md)
  `CVE-2020-5349` · CVE record: Dell Networking · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 19 Jul 2021 · Tags: Hard-coded credentials
- [Basic-auth app bundle credential exposure in gatsby-source-wordpress](https://agentprime.io/advisories/GHSA-rqjw-p5vr-c695.md)
  `GHSA-rqjw-p5vr-c695`, `CVE-2021-32770` · npm `gatsby-source-wordpress`: affected `<4.0.8 || >=5.0.0, <5.9.2`, fixed in `4.0.8`, `5.9.2` · CVSS 7.5 High · Not analysed yet · Published 19 Jul 2021 · Tags: Information disclosure, Hard-coded credentials
- [Learningdigital.com, Inc. Orca HCM - Hard-code password](https://agentprime.io/advisories/CVE-2021-35965.md)
  `CVE-2021-35965` · CVE record: Learningdigital.com, Inc. Orca HCM · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 19 Jul 2021 · Tags: Hard-coded credentials
- [TAIWAN SECOM CO., LTD., Door Access Control and Personnel Attendance Management system - Use of Hard-coded Credentials](https://agentprime.io/advisories/CVE-2021-35961.md)
  `CVE-2021-35961` · CVE record: TAIWAN SECOM CO., LTD., Door Access Control and Personnel Attendance Management system · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 16 Jul 2021 · Tags: Hard-coded credentials
- [Hard-coded password in D-Link](https://agentprime.io/advisories/CVE-2021-21818.md)
  `CVE-2021-21818` · CVE record: D-Link · CVSS 7.5 High · Not analysed yet · Published 16 Jul 2021 · Tags: Hard-coded credentials
- [Hard-coded credentials in D-Link](https://agentprime.io/advisories/CVE-2021-21820.md)
  `CVE-2021-21820` · CVE record: D-Link · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 16 Jul 2021 · Tags: Hard-coded credentials
- [Contrail Cloud: Hardcoded credentials for RabbitMQ service](https://agentprime.io/advisories/CVE-2021-0279.md)
  `CVE-2021-0279` · CVE record: Juniper Networks Contrail Cloud · CVSS 8.6 High · Not analysed yet · Published 15 Jul 2021 · Tags: Hard-coded credentials
- [Insufficiently protected credentials in EcoStruxure Control Expert (all versions prior to V15.0 SP1…](https://agentprime.io/advisories/CVE-2021-22781.md)
  `CVE-2021-22781` · CVE record: EcoStruxure Control Expert (all versions prior to V15.0 SP1, including all versions of Unity Pro), EcoStruxure Process Expert (all versions, including all versions of EcoStruxure Hybrid DCS), and SCADAPack RemoteConnect for x70, all versions · No CVSS score · Not analysed yet · Published 14 Jul 2021 · Tags: Hard-coded credentials
- [Insufficiently protected credentials in EcoStruxure Control Expert (all versions prior to V15.0 SP1…](https://agentprime.io/advisories/CVE-2021-22780.md)
  `CVE-2021-22780` · CVE record: EcoStruxure Control Expert (all versions prior to V15.0 SP1, including all versions of Unity Pro), EcoStruxure Process Expert (all versions, including all versions of EcoStruxure Hybrid DCS), and SCADAPack RemoteConnect for x70, all versions · No CVSS score · Not analysed yet · Published 14 Jul 2021 · Tags: Hard-coded credentials
- [Insufficiently protected credentials in EcoStruxure Control Expert (all versions prior to V15.0 SP1…](https://agentprime.io/advisories/CVE-2021-22778.md)
  `CVE-2021-22778` · CVE record: EcoStruxure Control Expert (all versions prior to V15.0 SP1, including all versions of Unity Pro), EcoStruxure Process Expert (all versions, including all versions of EcoStruxure Hybrid DCS), and SCADAPack RemoteConnect for x70, all versions · No CVSS score · Not analysed yet · Published 14 Jul 2021 · Tags: Hard-coded credentials
- [Weak password in API gateway in EdgeX Foundry Edinburgh, Fuji, Geneva, and Hanoi releases allows remote attackers to obtain authentication token via dictionary-based password attack when OAuth2 authe…](https://agentprime.io/advisories/CVE-2021-32753.md)
  `CVE-2021-32753` · CVE record: edgexfoundry edgex-go · CVSS 8.3 High · Not analysed yet · Published 9 Jul 2021 · Tags: Broken access control, Authentication bypass, Hard-coded credentials
- [Unauthenticated credential leak and business logic flaw in Kaseya VSA <= v9.5.6](https://agentprime.io/advisories/CVE-2021-30116.md)
  `CVE-2021-30116` · CVE record · CVSS 10.0 Critical · Critical (KEV, CVSS 9+, CVSS 7+ and EPSS) · In CISA KEV, ransomware · EPSS 0.86 · Not analysed yet · Published 9 Jul 2021 · Tags: Hard-coded credentials
- [QSAN SANOS - Use of Hard-coded Credentials](https://agentprime.io/advisories/CVE-2021-32535.md)
  `CVE-2021-32535` · CVE record: QSAN SANOS · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 7 Jul 2021 · Tags: Hard-coded credentials
- [QSAN Storage Manager - Use of Hard-coded Password-2](https://agentprime.io/advisories/CVE-2021-32525.md)
  `CVE-2021-32525` · CVE record: QSAN Storage Manager · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 7 Jul 2021 · Tags: Hard-coded credentials
- [QSAN Storage Manager, XEVO, SANOS - Use of Hard-coded Password](https://agentprime.io/advisories/CVE-2021-32521.md)
  `CVE-2021-32521` · CVE record: QSAN Storage Manager and 2 more · CVSS 7.3 High · Not analysed yet · Published 7 Jul 2021 · Tags: Hard-coded credentials
- [QSAN Storage Manager - Use of Hard-coded Cryptographic Key](https://agentprime.io/advisories/CVE-2021-32520.md)
  `CVE-2021-32520` · CVE record: QSAN Storage Manager · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 7 Jul 2021 · Tags: Hard-coded credentials
- [Hard-coded credentials in Arlo Q Plus](https://agentprime.io/advisories/CVE-2021-31505.md)
  `CVE-2021-31505` · CVE record: Arlo Q Plus · CVSS 6.8 Medium · Not analysed yet · Published 29 Jun 2021 · Tags: Hard-coded credentials
- [Phoenix Contact: Undocumented FTP acces in certain AXL F BK and IL BK devices](https://agentprime.io/advisories/CVE-2021-33540.md)
  `CVE-2021-33540` · CVE record: Phoenix Contact AXL F BK and 1 more · CVSS 7.3 High · Not analysed yet · Published 25 Jun 2021 · Tags: Hard-coded credentials
- [WEIDMUELLER: WLAN devices affected by Hard-coded Credentials vulnerability](https://agentprime.io/advisories/CVE-2021-33531.md)
  `CVE-2021-33531` · CVE record: Weidmüller IE-WL(T)-BL-AP-CL-XX and 1 more · CVSS 8.8 High · Not analysed yet · Published 25 Jun 2021 · Tags: Hard-coded credentials
- [WEIDMUELLER: WLAN devices affected by Hard-coded Credentials vulnerability](https://agentprime.io/advisories/CVE-2021-33529.md)
  `CVE-2021-33529` · CVE record: Weidmüller IE-WL(T)-BL-AP-CL-XX and 1 more · CVSS 7.5 High · Not analysed yet · Published 25 Jun 2021 · Tags: Hard-coded credentials
- [Hard-coded credentials in Synology Calendar](https://agentprime.io/advisories/CVE-2021-34812.md)
  `CVE-2021-34812` · CVE record: Synology Synology Calendar · CVSS 5.8 Medium · Not analysed yet · Published 18 Jun 2021 · Tags: Hard-coded credentials
- [Hard-coded credentials in GE Reason RPV311](https://agentprime.io/advisories/CVE-2021-31477.md)
  `CVE-2021-31477` · CVE record: GE Reason RPV311 · CVSS 6.3 Medium · Not analysed yet · Published 16 Jun 2021 · Tags: Hard-coded credentials
- [Hard-coded cryptographic key in ZOLL Defibrillator Dashboard](https://agentprime.io/advisories/CVE-2021-27481.md)
  `CVE-2021-27481` · CVE record: ZOLL Defibrillator Dashboard · No CVSS score · Not analysed yet · Published 16 Jun 2021 · Tags: Hard-coded credentials
- [Cisco ThousandEyes Recorder Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2021-1537.md)
  `CVE-2021-1537` · CVE record: Cisco Cisco ThousandEyes Recorder Application · CVSS 6.2 Medium · Not analysed yet · Published 4 Jun 2021 · Tags: Hard-coded credentials
- [Hard-coded credentials in ceph-ansible](https://agentprime.io/advisories/CVE-2020-1716.md)
  `CVE-2020-1716` · CVE record: ceph-ansible · No CVSS score · Not analysed yet · Published 28 May 2021 · Tags: Hard-coded credentials
- [Insufficiently protected credentials in ceph-dashboard](https://agentprime.io/advisories/CVE-2020-27839.md)
  `CVE-2020-27839` · CVE record: ceph-dashboard · No CVSS score · Not analysed yet · Published 26 May 2021 · Tags: Hard-coded credentials
- [Insufficiently protected credentials in Versa Director, Versa Analytics, Versa VOS](https://agentprime.io/advisories/CVE-2019-25030.md)
  `CVE-2019-25030` · CVE record: Versa Director, Versa Analytics, Versa VOS · No CVSS score · Not analysed yet · Published 26 May 2021 · Tags: Hard-coded credentials
- [SITEL CAP/PRX hardcoded credentials](https://agentprime.io/advisories/CVE-2021-32454.md)
  `CVE-2021-32454` · CVE record: SITEL CAP/PRX · CVSS 9.6 Critical · Critical (CVSS 9+) · Not analysed yet · Published 17 May 2021 · Tags: Hard-coded credentials
- [Hard-coded credentials in SonicWall Email Security Virtual Appliance](https://agentprime.io/advisories/CVE-2021-20025.md)
  `CVE-2021-20025` · CVE record: SonicWall Email Security Virtual Appliance · No CVSS score · Not analysed yet · Published 13 May 2021 · Tags: Hard-coded credentials
- [Insufficiently protected credentials in NooBaa](https://agentprime.io/advisories/CVE-2021-3528.md)
  `CVE-2021-3528` · CVE record: NooBaa · No CVSS score · Not analysed yet · Published 13 May 2021 · Tags: Hard-coded credentials
- [WAGO: Managed Switches: Unauthorized access to password hashes](https://agentprime.io/advisories/CVE-2021-20997.md)
  `CVE-2021-20997` · CVE record: WAGO 0852-0303 and 4 more · CVSS 7.5 High · Not analysed yet · Published 13 May 2021 · Tags: Hard-coded credentials
- [Improper permission handling in Apache Solr](https://agentprime.io/advisories/GHSA-jgcr-fg3g-qvw8.md)
  `GHSA-jgcr-fg3g-qvw8`, `BIT-solr-2021-29262`, `CVE-2021-29262` · Maven `org.apache.solr:solr-core`: affected `<8.8.2`, fixed in `8.8.2` · CVSS 7.5 High · Not analysed yet · Published 10 May 2021 · Tags: Hard-coded credentials, CWE-279
- [Hard-coded credentials in WISE-PaaS/RMM](https://agentprime.io/advisories/CVE-2021-27437.md)
  `CVE-2021-27437` · CVE record: WISE-PaaS/RMM · No CVSS score · Not analysed yet · Published 7 May 2021 · Tags: Hard-coded credentials
- [MERIT LILIN ENT.CO.,LTD. P2/Z2/P3/Z3 IP camera - Broken Authentication](https://agentprime.io/advisories/CVE-2021-30167.md)
  `CVE-2021-30167` · CVE record: MERIT LILIN ENT.CO.,LTD. P2/Z2/P3/Z3 IP camera firmware · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 28 Apr 2021 · Tags: Hard-coded credentials
- [EDIMAX Technology Co., Ltd. HD Wireless Day & Night Network Camera IC-3140W - Hard-coded password](https://agentprime.io/advisories/CVE-2021-30165.md)
  `CVE-2021-30165` · CVE record: EDIMAX Technology Co., Ltd. IC-3140W · CVSS 7.5 High · Not analysed yet · Published 27 Apr 2021 · Tags: Hard-coded credentials
- [Hard-coded cryptographic key in Siemens Siveillance Video Open Network Bridge](https://agentprime.io/advisories/CVE-2021-27392.md)
  `CVE-2021-27392` · CVE record: Siemens Siveillance Video Open Network Bridge · No CVSS score · Not analysed yet · Published 22 Apr 2021 · Tags: Hard-coded credentials
- [Hard-coded cryptographic key in Siemens Opcenter Quality and others](https://agentprime.io/advisories/CVE-2021-27389.md)
  `CVE-2021-27389` · CVE record: Siemens Opcenter Quality and 1 more · No CVSS score · Not analysed yet · Published 22 Apr 2021 · Tags: Hard-coded credentials
- [cSRX: Use of Hard-coded Cryptographic Keys allows an attacker to take control of the device through device management services.](https://agentprime.io/advisories/CVE-2021-0266.md)
  `CVE-2021-0266` · CVE record: Juniper Networks Junos OS · CVSS 8.1 High · Not analysed yet · Published 22 Apr 2021 · Tags: Hard-coded credentials

Newest: <https://agentprime.io/advisories/tag/hard-coded-credentials.md>
Older: <https://agentprime.io/advisories/tag/hard-coded-credentials.md?cursor=WyIyMDIxLTA0LTIyVDE5OjM3OjIzLjY1NTAwMFoiLCJDVkUtMjAyMS0wMjY2Il0>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?tag=hard-coded-credentials&cursor=WyIyMDIxLTEwLTEyVDEzOjM3OjQ2LjY4ODAwMFoiLCJDVkUtMjAyMS0zODQ1NiJd>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/tag/hard-coded-credentials/?cursor=WyIyMDIxLTEwLTEyVDEzOjM3OjQ2LjY4ODAwMFoiLCJDVkUtMjAyMS0zODQ1NiJd>. Everything for agents: <https://agentprime.io/llms.txt>.