# Hard-coded credentials.

Passwords and keys built into the code, or weak credentials. Every Advisory and CVE whose weakness (CWE) is one of these, newest first.

## Records, newest first (an older page)

- [Insufficiently protected credentials in Dell Networking OS10](https://agentprime.io/advisories/CVE-2022-29089.md)
  `CVE-2022-29089` · CVE record: Dell Dell Networking OS10 · CVSS 6.4 Medium · Not analysed yet · Published 28 Sept 2022 · Tags: Hard-coded credentials
- [Use of Hard-coded Credentials in UWP3.0 allows SuperUser authentication bypass in Car Park Server.](https://agentprime.io/advisories/CVE-2022-28812.md)
  `CVE-2022-28812` · CVE record: Carlo Gavazzi UWP 3.0 Monitoring Gateway and Controller and 3 more · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 28 Sept 2022 · Tags: Hard-coded credentials
- [Hard-coded credentials in Carlo Gavazzi UWP3.0 allows for authentication bypass and full control of the device](https://agentprime.io/advisories/CVE-2022-22522.md)
  `CVE-2022-22522` · CVE record: Carlo Gavazzi UWP 3.0 Monitoring Gateway and Controller and 3 more · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 28 Sept 2022 · Tags: Hard-coded credentials
- [Chipolo ONE Bluetooth tracker (2020) Chipolo iOS app version 4.13.0 is vulnerable to Incorrect Access Control.](https://agentprime.io/advisories/CVE-2022-37193.md)
  `CVE-2022-37193` · CVE record · CVSS 7.4 High · Not analysed yet · Published 27 Sept 2022 · Tags: Hard-coded credentials
- [Contec FXA3200 version 1.13 and under were discovered to contain a hard coded hash password for root stored in the component /etc/shadow.](https://agentprime.io/advisories/CVE-2022-36159.md)
  `CVE-2022-36159` · CVE record · CVSS 8.8 High · Not analysed yet · Published 26 Sept 2022 · Tags: Hard-coded credentials
- [Weak Password Requirements in ikus060/minarca](https://agentprime.io/advisories/CVE-2022-3268.md)
  `CVE-2022-3268` · CVE record: ikus060 ikus060/minarca · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 22 Sept 2022 · Tags: Hard-coded credentials
- [Jenkins BigPanda Notifier Plugin stores BigPanda API key unencrypted](https://agentprime.io/advisories/GHSA-j7xv-fc46-hgpg.md)
  `GHSA-j7xv-fc46-hgpg`, `CVE-2022-41247` · Maven `org.jenkins-ci.plugins:bigpanda-jenkins`: affected `<=1.4.0`, no fixed version yet · CVSS 3.3 Low · Not analysed yet · Published 22 Sept 2022 · Tags: Hard-coded credentials, CWE-256
- [API token stored in plain text by Jenkins CONS3RT Plugin](https://agentprime.io/advisories/GHSA-fmq9-r4p2-8272.md)
  `GHSA-fmq9-r4p2-8272`, `CVE-2022-41255` · Maven `org.jenkins-ci.plugins:cons3rt`: affected `<=1.0.0`, no fixed version yet · CVSS 3.3 Low · Not analysed yet · Published 22 Sept 2022 · Tags: Hard-coded credentials, CWE-256
- [Delta Electronics DIAEnergy Use of Hard-coded Credentials](https://agentprime.io/advisories/CVE-2022-3214.md)
  `CVE-2022-3214` · CVE record: Delta Electronics DIAEnergy · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 16 Sept 2022 · Tags: Hard-coded credentials
- [rdiffweb contains Weak Password Requirements](https://agentprime.io/advisories/GHSA-mp5p-g2jv-r8qw.md)
  `GHSA-mp5p-g2jv-r8qw`, `CVE-2022-3179`, `PYSEC-2022-272` · PyPI `rdiffweb`: affected `>=2.4.1, <2.4.2`, fixed in `2.4.2` · CVSS 7.1 High · Not analysed yet · Published 14 Sept 2022 · Tags: Hard-coded credentials
- [Contec Health CMS8000](https://agentprime.io/advisories/CVE-2022-38069.md)
  `CVE-2022-38069` · CVE record: Contec Health CMS8000 CONTEC ICU CCU Vital Signs Patient Monitor · CVSS 4.3 Medium · Not analysed yet · Published 13 Sept 2022 · Tags: Hard-coded credentials
- [An insufficiently protected credential vulnerability affects HCL VersionVault Express](https://agentprime.io/advisories/CVE-2022-27560.md)
  `CVE-2022-27560` · CVE record: HCL Software HCL VersionVault Express · CVSS 6.0 Medium · Not analysed yet · Published 30 Aug 2022 · Tags: Hard-coded credentials
- [Le-yan Co., Ltd. Personnel and Salary Management System - Hard-coded password](https://agentprime.io/advisories/CVE-2022-38116.md)
  `CVE-2022-38116` · CVE record: Le-yan Co., Ltd. Personnel and Salary Management System · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 30 Aug 2022 · Tags: Hard-coded credentials
- [python-oslo-utils has improper password parsing](https://agentprime.io/advisories/GHSA-wmqq-r32m-87c5.md)
  `GHSA-wmqq-r32m-87c5`, `CVE-2022-0718`, `PYSEC-2022-258` · PyPI `oslo-utils`: affected `<4.10.1`, fixed in `4.10.1` · CVSS 4.9 Medium · Not analysed yet · Published 29 Aug 2022 · Tags: Hard-coded credentials, Information disclosure
- [HCL iNotes is susceptible to a Broken Password Strength Checks vulnerability.](https://agentprime.io/advisories/CVE-2022-27558.md)
  `CVE-2022-27558` · CVE record: HCL Software HCL iNotes · CVSS 5.9 Medium · Not analysed yet · Published 29 Aug 2022 · Tags: Hard-coded credentials
- [Insufficiently protected credentials in Odyssey](https://agentprime.io/advisories/CVE-2021-43767.md)
  `CVE-2021-43767` · CVE record: Odyssey · No CVSS score · Not analysed yet · Published 25 Aug 2022 · Tags: Hard-coded credentials
- [RabbitMQ password stored in plain text by Jenkins CollabNet Plugins Plugin](https://agentprime.io/advisories/GHSA-qh87-2qvh-5jf8.md)
  `GHSA-qh87-2qvh-5jf8`, `CVE-2022-38665` · Maven `org.jenkins-ci.plugins:collabnet`: affected `<2.0.9`, fixed in `2.0.9` · CVSS 3.3 Low · Not analysed yet · Published 24 Aug 2022 · Tags: Hard-coded credentials, CWE-256
- [Improper masking of credentials Jenkins in Git Plugin](https://agentprime.io/advisories/GHSA-jxmw-3gxf-fprh.md)
  `GHSA-jxmw-3gxf-fprh`, `CVE-2022-38663` · Maven `org.jenkins-ci.plugins:git`: affected `<4.11.5`, fixed in `4.11.5` · CVSS 4.3 Medium · Not analysed yet · Published 24 Aug 2022 · Tags: Hard-coded credentials
- [Missing password strength check in notrinos/notrinos-erp](https://agentprime.io/advisories/GHSA-qhm8-69qh-g76j.md)
  `GHSA-qhm8-69qh-g76j`, `CVE-2022-2927`, `PKSA-7v6v-7tw6-32md` · Packagist `notrinos/notrinos-erp`: affected `<0.7`, fixed in `0.7` · CVSS 7.3 High · Not analysed yet · Published 23 Aug 2022 · Tags: Hard-coded credentials
- [Incorrect implementation of lockout feature in Keycloak](https://agentprime.io/advisories/GHSA-xv7h-95r7-595j.md)
  `GHSA-xv7h-95r7-595j`, `CVE-2021-3513` · Maven `org.keycloak:keycloak-parent`: affected `<13.0.0`, fixed in `13.0.0` · CVSS 7.5 High · Not analysed yet · Published 23 Aug 2022 · Tags: Information disclosure, Hard-coded credentials
- [Use of Hard-coded Credentials in AgileConfig.Client](https://agentprime.io/advisories/GHSA-mj5w-w588-j6xg.md)
  `GHSA-mj5w-w588-j6xg`, `CVE-2022-35540` · NuGet `AgileConfig.Client`: affected `<1.6.8`, fixed in `1.6.8` · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 19 Aug 2022 · Tags: Hard-coded credentials
- [Insufficiently protected credentials in version](https://agentprime.io/advisories/CVE-2022-29507.md)
  `CVE-2022-29507` · CVE record: version · CVSS 5.5 Medium · Not analysed yet · Published 18 Aug 2022 · Tags: Hard-coded credentials
- [Insufficiently protected credentials in version](https://agentprime.io/advisories/CVE-2022-30296.md)
  `CVE-2022-30296` · CVE record: version · CVSS 7.5 High · Not analysed yet · Published 18 Aug 2022 · Tags: Hard-coded credentials
- [Insufficiently protected credentials in version](https://agentprime.io/advisories/CVE-2022-26844.md)
  `CVE-2022-26844` · CVE record: version · CVSS 7.8 High · Not analysed yet · Published 18 Aug 2022 · Tags: Hard-coded credentials
- [Insufficiently protected credentials in Intel(R) AMT and Intel(R) Standard Manageability](https://agentprime.io/advisories/CVE-2022-30944.md)
  `CVE-2022-30944` · CVE record: Intel(R) AMT and Intel(R) Standard Manageability · CVSS 5.5 Medium · Not analysed yet · Published 18 Aug 2022 · Tags: Hard-coded credentials
- [Insufficiently protected credentials in Intel(R) AMT and Intel(R) Standard Manageability](https://agentprime.io/advisories/CVE-2022-30601.md)
  `CVE-2022-30601` · CVE record: Intel(R) AMT and Intel(R) Standard Manageability · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 18 Aug 2022 · Tags: Hard-coded credentials
- [Hardcoded encryption key IV in Exago WebReportsApi.dll](https://agentprime.io/advisories/CVE-2022-1400.md)
  `CVE-2022-1400` · CVE record: Device42 CMDB · CVSS 7.1 High · Not analysed yet · Published 16 Aug 2022 · Tags: Hard-coded credentials
- [Insufficiently protected credentials in Airspan AirVelocity](https://agentprime.io/advisories/CVE-2022-36307.md)
  `CVE-2022-36307` · CVE record: Airspan AirVelocity · No CVSS score · Not analysed yet · Published 16 Aug 2022 · Tags: Hard-coded credentials
- [Insufficiently protected credentials in foreman-installer](https://agentprime.io/advisories/CVE-2020-10710.md)
  `CVE-2020-10710` · CVE record: foreman-installer · No CVSS score · Not analysed yet · Published 16 Aug 2022 · Tags: Hard-coded credentials
- [Hard-coded password in TCL LinkHub Mesh Wifi](https://agentprime.io/advisories/CVE-2022-22144.md)
  `CVE-2022-22144` · CVE record: TCL LinkHub Mesh Wifi · CVSS 7.5 High · Not analysed yet · Published 5 Aug 2022 · Tags: Hard-coded credentials
- [Raneto v0.17.0 employs weak password complexity requirements](https://agentprime.io/advisories/GHSA-7942-2fx8-qhpf.md)
  `GHSA-7942-2fx8-qhpf`, `CVE-2022-35143` · npm `raneto`: affected `<0.17.1`, fixed in `0.17.1` · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 5 Aug 2022 · Tags: Hard-coded credentials
- [ITPison OMICARD EDM - Use of Hard-coded Credentials](https://agentprime.io/advisories/CVE-2022-32965.md)
  `CVE-2022-32965` · CVE record: ITPison OMICARD EDM · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 4 Aug 2022 · Tags: Hard-coded credentials
- [Hard-coded credentials in Vinchin Backup and Recovery](https://agentprime.io/advisories/CVE-2022-35866.md)
  `CVE-2022-35866` · CVE record: Vinchin Backup and Recovery · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 3 Aug 2022 · Tags: Hard-coded credentials
- [Weak password requirements in Bosch BF-OS](https://agentprime.io/advisories/CVE-2022-36301.md)
  `CVE-2022-36301` · CVE record: Bosch BF-OS · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 1 Aug 2022 · Tags: Hard-coded credentials
- [HCL Commerce could allow a local attacker to obtain sensitive personal information (CVE-2021-27785)](https://agentprime.io/advisories/CVE-2021-27785.md)
  `CVE-2021-27785` · CVE record: HCL Software HCL Commerce · CVSS 3.9 Low · Not analysed yet · Published 29 Jul 2022 · Tags: Hard-coded credentials
- [Ovarro TBox Use of Hard-coded Cryptographic Key](https://agentprime.io/advisories/CVE-2021-22644.md)
  `CVE-2021-22644` · CVE record: Ovarro TBox · CVSS 7.5 High · Not analysed yet · Published 28 Jul 2022 · Tags: Hard-coded credentials
- [Ovarro TBox Insufficiently Protected Credentials](https://agentprime.io/advisories/CVE-2021-22640.md)
  `CVE-2021-22640` · CVE record: Ovarro TBox · CVSS 7.5 High · Not analysed yet · Published 28 Jul 2022 · Tags: Hard-coded credentials
- [The Motorola ACE1000 RTU through 2022-05-02 ships with a hardcoded SSH private key and initialization scripts (such as /etc/init.d/sshd_service) only generate a new key if no private-key file exists.](https://agentprime.io/advisories/CVE-2022-30271.md)
  `CVE-2022-30271` · CVE record · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 26 Jul 2022 · Tags: Hard-coded credentials
- [Hard-coded credentials in Atlassian Questions For Confluence](https://agentprime.io/advisories/CVE-2022-26138.md)
  `CVE-2022-26138` · CVE record: Atlassian Questions For Confluence · CVSS 9.8 Critical · Critical (KEV, CVSS 9+, CVSS 7+ and EPSS) · In CISA KEV · EPSS 0.98 · Not analysed yet · Published 20 Jul 2022 · Tags: Hard-coded credentials
- [Insufficiently protected credentials in Anchore Inc. Anchore Enterprise and others](https://agentprime.io/advisories/CVE-2022-1766.md)
  `CVE-2022-1766` · CVE record: Anchore Inc. Anchore Enterprise and 1 more · No CVSS score · Not analysed yet · Published 20 Jul 2022 · Tags: Hard-coded credentials
- [ICSA-22-200-01 MiCODUS MV720 GPS tracker Use of Hard-coded Credentials](https://agentprime.io/advisories/CVE-2022-2107.md)
  `CVE-2022-2107` · CVE record: MiCODUS MV720 · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 20 Jul 2022 · Tags: Hard-coded credentials
- [HCL BigFix Web Reports authorized users may see sensitive information in clear text](https://agentprime.io/advisories/CVE-2022-27544.md)
  `CVE-2022-27544` · CVE record: HCL Software HCL BigFix · CVSS 5.0 Medium · Not analysed yet · Published 19 Jul 2022 · Tags: Hard-coded credentials
- [Protecting AWS credentials stored in plaintext on My Cloud Home](https://agentprime.io/advisories/CVE-2022-22998.md)
  `CVE-2022-22998` · CVE record: Western Digital My Cloud Home · CVSS 8.0 High · Not analysed yet · Published 12 Jul 2022 · Tags: Hard-coded credentials
- [Use of Hard-coded Credentials in Nacos](https://agentprime.io/advisories/GHSA-2g86-r6w2-wqqr.md)
  `GHSA-2g86-r6w2-wqqr`, `CVE-2021-43116` · Maven `com.alibaba.nacos:nacos-client`: affected `<=2.0.3`, no fixed version yet · CVSS 8.8 High · Not analysed yet · Published 6 Jul 2022 · Tags: Authentication bypass, Hard-coded credentials
- [Hard-coded credentials in OMRON Corporation Machine automation controller NJ series…](https://agentprime.io/advisories/CVE-2022-34151.md)
  `CVE-2022-34151` · CVE record: OMRON Corporation Machine automation controller NJ series, Machine automation controller NX series, Automation software 'Sysmac Studio', and Programmable Terminal (PT) NA series · CVSS 9.4 Critical · Critical (CVSS 9+) · Not analysed yet · Published 4 Jul 2022 · Tags: Hard-coded credentials
- [Token stored in plain text by Jenkins Cisco Spark Plugin](https://agentprime.io/advisories/GHSA-wppp-xqfv-6cm7.md)
  `GHSA-wppp-xqfv-6cm7`, `CVE-2022-34808` · Maven `org.jenkins-ci.plugins:cisco-spark`: affected `<=1.1.1`, no fixed version yet · CVSS 3.3 Low · Not analysed yet · Published 1 Jul 2022 · Tags: Hard-coded credentials
- [Password stored in plain text by Jenkins RQM Plugin](https://agentprime.io/advisories/GHSA-m59q-vgq9-75cr.md)
  `GHSA-m59q-vgq9-75cr`, `CVE-2022-34809` · Maven `net.praqma:rqm-plugin`: affected `<=2.8`, no fixed version yet · CVSS 3.3 Low · Not analysed yet · Published 1 Jul 2022 · Tags: Hard-coded credentials, CWE-256
- [Plaintext Storage of a Password in Jenkins Elasticsearch Query Plugin](https://agentprime.io/advisories/GHSA-h5h5-m2mc-j2pv.md)
  `GHSA-h5h5-m2mc-j2pv`, `CVE-2022-34807` · Maven `org.jenkins-ci.plugins:elasticsearch-query`: affected `<=1.2`, no fixed version yet · CVSS 3.3 Low · Not analysed yet · Published 1 Jul 2022 · Tags: Hard-coded credentials, CWE-256
- [Plaintext Storage of a Password in Jenkins Jigomerge Plugin](https://agentprime.io/advisories/GHSA-h5g3-v72x-hc6f.md)
  `GHSA-h5g3-v72x-hc6f`, `CVE-2022-34806` · Maven `org.jenkins-ci.plugins:jigomerge`: affected `<=0.9`, no fixed version yet · CVSS 3.3 Low · Not analysed yet · Published 1 Jul 2022 · Tags: Hard-coded credentials, CWE-256
- [Plaintext Storage of a Password in Jenkins Skype notifier Plugin](https://agentprime.io/advisories/GHSA-gvmr-mp5q-9wvw.md)
  `GHSA-gvmr-mp5q-9wvw`, `CVE-2022-34805` · Maven `org.jenkins-ci.plugins:skype-notifier`: affected `<=1.1.0`, no fixed version yet · CVSS 3.3 Low · Not analysed yet · Published 1 Jul 2022 · Tags: Hard-coded credentials, CWE-256
- [Passwords stored in plain text by Jenkins hpe-network-virtualization plugin](https://agentprime.io/advisories/GHSA-36j8-f33j-vjwq.md)
  `GHSA-36j8-f33j-vjwq`, `CVE-2022-34816` · Maven `org.jenkins-ci.plugins:hpe-network-virtualization`: affected `=1.0`, no fixed version yet · CVSS 3.3 Low · Not analysed yet · Published 1 Jul 2022 · Tags: Hard-coded credentials, CWE-256
- [Jenkins OpsGenie Plugin Plaintext Storage of a Password vulnerability](https://agentprime.io/advisories/GHSA-273c-fjw8-v2w8.md)
  `GHSA-273c-fjw8-v2w8`, `CVE-2022-34803` · Maven `org.jenkins-ci.plugins:opsgenie`: affected `<=1.9`, no fixed version yet · CVSS 4.3 Medium · Not analysed yet · Published 1 Jul 2022 · Tags: Hard-coded credentials, CWE-256
- [Plaintext Storage of a Password in Jenkins Build Notifications Plugin](https://agentprime.io/advisories/GHSA-v3r8-6vfj-pppf.md)
  `GHSA-v3r8-6vfj-pppf`, `CVE-2022-34800` · Maven `tools.devnull:build-notifications`: affected `<=1.5.0`, no fixed version yet · CVSS 3.3 Low · Not analysed yet · Published 1 Jul 2022 · Tags: Hard-coded credentials, CWE-256
- [Plaintext Storage of a Password in Jenkins RocketChat Notifier Plugin](https://agentprime.io/advisories/GHSA-pgp9-x83g-v8x8.md)
  `GHSA-pgp9-x83g-v8x8`, `CVE-2022-34802` · Maven `org.jenkins-ci.plugins:rocketchatnotifier`: affected `<=1.5.2`, no fixed version yet · CVSS 3.3 Low · Not analysed yet · Published 1 Jul 2022 · Tags: Hard-coded credentials, CWE-256
- [Jenkins Deployment Dashboard Plugin has Insufficiently Protected Credentials](https://agentprime.io/advisories/GHSA-5mxg-p5qh-2gch.md)
  `GHSA-5mxg-p5qh-2gch`, `CVE-2022-34796` · Maven `org.jenkins-ci.plugins:ec2-deployment-dashboard`: affected `<=1.0.10`, no fixed version yet · CVSS 4.3 Medium · Not analysed yet · Published 1 Jul 2022 · Tags: Hard-coded credentials, Broken access control
- [Plaintext Storage of a Password in Jenkins Deployment Dashboard Plugin](https://agentprime.io/advisories/GHSA-56hc-wf49-2h96.md)
  `GHSA-56hc-wf49-2h96`, `CVE-2022-34799` · Maven `org.jenkins-ci.plugins:ec2-deployment-dashboard`: affected `<=1.0.10`, no fixed version yet · CVSS 3.3 Low · Not analysed yet · Published 1 Jul 2022 · Tags: Hard-coded credentials, CWE-256
- [PingID Windows Login prior to 2.8 does not properly set permissions on the Windows Registry entries used to store sensitive API keys under some circumstances](https://agentprime.io/advisories/CVE-2022-23725.md)
  `CVE-2022-23725` · CVE record: Ping Identity PingID Windows Login · CVSS 7.7 High · Not analysed yet · Published 30 Jun 2022 · Tags: Authentication bypass, Hard-coded credentials
- [Hard-coded credentials in Yokogawa Electric Corporation STARDOM Controller](https://agentprime.io/advisories/CVE-2022-30997.md)
  `CVE-2022-30997` · CVE record: Yokogawa Electric Corporation STARDOM Controller · CVSS 6.3 Medium · Not analysed yet · Published 28 Jun 2022 · Tags: Hard-coded credentials
- [Secheron SEPCOS Control and Protection Relay](https://agentprime.io/advisories/CVE-2022-1668.md)
  `CVE-2022-1668` · CVE record: Secheron SEPCOS Control and Protection Relay firmware package · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 24 Jun 2022 · Tags: Hard-coded credentials
- [Secheron SEPCOS Control and Protection Relay](https://agentprime.io/advisories/CVE-2022-1666.md)
  `CVE-2022-1666` · CVE record: Secheron SEPCOS Control and Protection Relay firmware package · CVSS 6.5 Medium · Not analysed yet · Published 24 Jun 2022 · Tags: Hard-coded credentials

Newest: <https://agentprime.io/advisories/tag/hard-coded-credentials.md>
Older: <https://agentprime.io/advisories/tag/hard-coded-credentials.md?cursor=WyIyMDIyLTA2LTI0VDE1OjAwOjI5LjU4NTAwMFoiLCJDVkUtMjAyMi0xNjY2Il0>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?tag=hard-coded-credentials&cursor=WyIyMDIyLTA5LTI5VDAwOjE1OjAwLjAwMDAwMFoiLCJHSFNBLTh3eGYtYzQ1dy1nNjZnIl0>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/tag/hard-coded-credentials/?cursor=WyIyMDIyLTA5LTI5VDAwOjE1OjAwLjAwMDAwMFoiLCJHSFNBLTh3eGYtYzQ1dy1nNjZnIl0>. Everything for agents: <https://agentprime.io/llms.txt>.