# Hard-coded credentials.

Passwords and keys built into the code, or weak credentials. Every Advisory and CVE whose weakness (CWE) is one of these, newest first.

## Records, newest first (an older page)

- [Remote Backups Application Discloses Stored Credentials](https://agentprime.io/advisories/CVE-2022-29839.md)
  `CVE-2022-29839` · CVE record: Western Digital My Cloud · CVSS 4.1 Medium · Not analysed yet · Published 9 Dec 2022 · Tags: Hard-coded credentials
- [Hard-coded credentials in BUFFALO INC. Buffalo network devices](https://agentprime.io/advisories/CVE-2022-34840.md)
  `CVE-2022-34840` · CVE record: BUFFALO INC. Buffalo network devices · CVSS 6.5 Medium · Not analysed yet · Published 7 Dec 2022 · Tags: Hard-coded credentials
- [MegaRAC Default Credentials Vulnerability](https://agentprime.io/advisories/CVE-2022-40259.md)
  `CVE-2022-40259` · CVE record: AMI MegaRAC SPx12 and 1 more · CVSS 8.3 High · Not analysed yet · Published 5 Dec 2022 · Tags: Hard-coded credentials
- [Craft CMS discloses password hashes](https://agentprime.io/advisories/GHSA-h972-v458-m892.md)
  `GHSA-h972-v458-m892`, `CVE-2022-37783`, `PKSA-rgy6-34nm-mk1h` · Packagist `craftcms/cms`: affected `>=3.0.0, <3.7.33`, fixed in `3.7.33` · CVSS 7.5 High · Not analysed yet · Published 5 Dec 2022 · Tags: Information disclosure, Hard-coded credentials
- [MegaRAC Default Credentials Vulnerability](https://agentprime.io/advisories/CVE-2022-40242.md)
  `CVE-2022-40242` · CVE record: AMI MegaRAC SPx12 and 1 more · CVSS 7.5 High · Not analysed yet · Published 5 Dec 2022 · Tags: Hard-coded credentials
- [Insufficiently protected credentials in FUJI SOFT INCORPORATED +F FS040U software](https://agentprime.io/advisories/CVE-2022-43442.md)
  `CVE-2022-43442` · CVE record: FUJI SOFT INCORPORATED +F FS040U software · CVSS 4.6 Medium · Not analysed yet · Published 5 Dec 2022 · Tags: Hard-coded credentials
- [When aborting a SFTP connection, MobaXterm before v22.1 sends a hardcoded password to the server.](https://agentprime.io/advisories/CVE-2022-38337.md)
  `CVE-2022-38337` · CVE record · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 5 Dec 2022 · Tags: Hard-coded credentials
- [A default username and password for an administrator account was discovered in ZKTeco ZKTime 10.0 through 11.1.0, builds 20180901, 20190510.1, 20200309.3, 20200930, 20201231, and 20210220.](https://agentprime.io/advisories/CVE-2021-39434.md)
  `CVE-2021-39434` · CVE record · CVSS 7.5 High · Not analysed yet · Published 5 Dec 2022 · Tags: Hard-coded credentials
- [Weak password requirements in thisAAY Lazy Mouse](https://agentprime.io/advisories/CVE-2022-45482.md)
  `CVE-2022-45482` · CVE record: thisAAY Lazy Mouse · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 2 Dec 2022 · Tags: Hard-coded credentials
- [Book Store Management System v1.0 was discovered to contain hardcoded credentials which allows attackers to escalate privileges and access the admin panel.](https://agentprime.io/advisories/CVE-2022-44097.md)
  `CVE-2022-44097` · CVE record · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 30 Nov 2022 · Tags: Hard-coded credentials
- [Sanitization Management System v1.0 was discovered to contain hardcoded credentials which allows attackers to escalate privileges and access the admin panel.](https://agentprime.io/advisories/CVE-2022-44096.md)
  `CVE-2022-44096` · CVE record · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 30 Nov 2022 · Tags: Hard-coded credentials
- [Realtek RTL8111EP-CG/RTL8111FP-CG - Use of Hard-coded Credentials](https://agentprime.io/advisories/CVE-2022-32967.md)
  `CVE-2022-32967` · CVE record: Realtek RTL8111EP-CG and 1 more · CVSS 2.1 Low · Not analysed yet · Published 29 Nov 2022 · Tags: Hard-coded credentials
- [Airtable.js credentials exposed in browser builds](https://agentprime.io/advisories/CVE-2022-46155.md)
  `CVE-2022-46155` · CVE record: Airtable airtable.js · CVSS 7.6 High · Not analysed yet · Published 29 Nov 2022 · Tags: Hard-coded credentials
- [HCL Launch is vulnerable to Insufficiently Protected LDAP Search Credentials (CVE-2022-42445)](https://agentprime.io/advisories/CVE-2022-42445.md)
  `CVE-2022-42445` · CVE record: HCL Software HCL Launch · CVSS 4.9 Medium · Not analysed yet · Published 28 Nov 2022 · Tags: Hard-coded credentials
- [ERP solution Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2022-41157.md)
  `CVE-2022-41157` · CVE record: Webcash Co.,Ltd sERP Server 2.0 · CVSS 8.1 High · Not analysed yet · Published 25 Nov 2022 · Tags: Hard-coded credentials
- [Insufficiently protected credentials in Mitsubishi Electric Corporation GX Works3](https://agentprime.io/advisories/CVE-2022-29833.md)
  `CVE-2022-29833` · CVE record: Mitsubishi Electric Corporation GX Works3 · CVSS 6.8 Medium · Not analysed yet · Published 24 Nov 2022 · Tags: Hard-coded credentials
- [Hard-coded password in Mitsubishi Electric Corporation GX Works3](https://agentprime.io/advisories/CVE-2022-29831.md)
  `CVE-2022-29831` · CVE record: Mitsubishi Electric Corporation GX Works3 · CVSS 7.5 High · Not analysed yet · Published 24 Nov 2022 · Tags: Hard-coded credentials
- [Hard-coded cryptographic key in Mitsubishi Electric Corporation GX Works3 and others](https://agentprime.io/advisories/CVE-2022-29830.md)
  `CVE-2022-29830` · CVE record: Mitsubishi Electric Corporation GX Works3 and 1 more · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 24 Nov 2022 · Tags: Hard-coded credentials
- [Hard-coded cryptographic key in Mitsubishi Electric Corporation GX Works3 and others](https://agentprime.io/advisories/CVE-2022-29829.md)
  `CVE-2022-29829` · CVE record: Mitsubishi Electric Corporation GX Works3 and 3 more · CVSS 6.8 Medium · Not analysed yet · Published 24 Nov 2022 · Tags: Hard-coded credentials
- [Hard-coded cryptographic key in Mitsubishi Electric Corporation GX Works3](https://agentprime.io/advisories/CVE-2022-29828.md)
  `CVE-2022-29828` · CVE record: Mitsubishi Electric Corporation GX Works3 · CVSS 6.8 Medium · Not analysed yet · Published 24 Nov 2022 · Tags: Hard-coded credentials
- [Hard-coded cryptographic key in Mitsubishi Electric Corporation GX Works3](https://agentprime.io/advisories/CVE-2022-29827.md)
  `CVE-2022-29827` · CVE record: Mitsubishi Electric Corporation GX Works3 · CVSS 6.8 Medium · Not analysed yet · Published 24 Nov 2022 · Tags: Hard-coded credentials
- [Hard-coded password in Mitsubishi Electric Corporation GX Works3 and others](https://agentprime.io/advisories/CVE-2022-29825.md)
  `CVE-2022-29825` · CVE record: Mitsubishi Electric Corporation GX Works3 and 2 more · CVSS 5.6 Medium · Not analysed yet · Published 24 Nov 2022 · Tags: Hard-coded credentials
- [Apache Dolphin Scheduler has insufficiently protected credentials](https://agentprime.io/advisories/GHSA-jvc3-wjf6-7c6c.md)
  `GHSA-jvc3-wjf6-7c6c`, `CVE-2022-26885` · Maven `org.apache.dolphinscheduler:dolphinscheduler-common`: affected `<2.0.6`, fixed in `2.0.6` · CVSS 7.5 High · Not analysed yet · Published 24 Nov 2022 · Tags: Information disclosure, Hard-coded credentials
- [Plaintext storage of password after a reset in org.xwiki.platform:xwiki-platform-security-authentication-default](https://agentprime.io/advisories/GHSA-q2hm-2h45-v5g3.md)
  `GHSA-q2hm-2h45-v5g3`, `CVE-2022-41933` · Maven `org.xwiki.platform:xwiki-platform-security-authentication-default`: affected `>=13.1RC1, <13.10.8 || >=14.0.0, <14.4.3`, fixed in `13.10.8`, `14.4.3` · CVSS 6.2 Medium · Not analysed yet · Published 21 Nov 2022 · Tags: Information disclosure, Hard-coded credentials
- [IBM UrbanCode Deploy information disclosure](https://agentprime.io/advisories/CVE-2022-40751.md)
  `CVE-2022-40751` · CVE record: IBM UrbanCode Deploy · CVSS 4.9 Medium · Not analysed yet · Published 17 Nov 2022 · Tags: Hard-coded credentials
- [Plaintext Storage of a Password in Jenkins NS-ND Integration Performance Publisher Plugin](https://agentprime.io/advisories/GHSA-x2w2-5552-fjv6.md)
  `GHSA-x2w2-5552-fjv6`, `CVE-2022-45392` · Maven `io.jenkins.plugins:cavisson-ns-nd-integration`: affected `<4.8.0.146`, fixed in `4.8.0.146` · CVSS 6.5 Medium · Not analysed yet · Published 16 Nov 2022 · Tags: Hard-coded credentials, CWE-256
- [Jenkins Reverse Proxy Auth Plugin vulnerable due to plaintext storage of passwords](https://agentprime.io/advisories/GHSA-wcjj-qm5v-j4pc.md)
  `GHSA-wcjj-qm5v-j4pc`, `CVE-2022-45384` · Maven `org.jenkins-ci.main:reverse-proxy-auth-plugin`: affected `>=1.7.3, <1.7.4`, fixed in `1.7.4` · CVSS 6.5 Medium · Not analysed yet · Published 16 Nov 2022 · Tags: Hard-coded credentials, CWE-256
- [Liferay Portal and Liferay DXP Includes LDAP Credentials in the Page URL](https://agentprime.io/advisories/GHSA-f43m-hhj4-q3jg.md)
  `GHSA-f43m-hhj4-q3jg`, `BIT-liferay-2022-42132`, `CVE-2022-42132` · Maven `com.liferay:com.liferay.portal.settings.authentication.ldap.web` and 2 more: affected `<5.0.13`, fixed in `5.0.13` · CVSS 5.9 Medium · Not analysed yet · Published 15 Nov 2022 · Tags: Information disclosure, Hard-coded credentials
- [Siyucms v6.1.7 was discovered to contain a remote code execution (RCE) vulnerability in the background.](https://agentprime.io/advisories/CVE-2022-43030.md)
  `CVE-2022-43030` · CVE record · CVSS 7.2 High · Not analysed yet · Published 14 Nov 2022 · Tags: Hard-coded credentials
- [patrickfuller camp up to and including commit bbd53a256ed70e79bd8758080936afbf6d738767 is vulnerable to Incorrect Access Control.](https://agentprime.io/advisories/CVE-2022-37109.md)
  `CVE-2022-37109` · CVE record · CVSS 9.8 Critical · Critical (CVSS 9+, CVSS 7+ and EPSS) · EPSS 0.49 · Not analysed yet · Published 14 Nov 2022 · Tags: Hard-coded credentials
- [Insufficiently protected credentials in Intel(R) AMT SDK, Intel(R) EMA and Intel(R) MC](https://agentprime.io/advisories/CVE-2022-26341.md)
  `CVE-2022-26341` · CVE record: Intel(R) AMT SDK, Intel(R) EMA and Intel(R) MC · CVSS 8.2 High · Not analysed yet · Published 11 Nov 2022 · Tags: Hard-coded credentials
- [Exfiltration of hashed SMB credentials on Windows via file:// redirect](https://agentprime.io/advisories/GHSA-p2jh-44qj-pf2v.md)
  `GHSA-p2jh-44qj-pf2v`, `CVE-2022-36077` · npm `electron`: affected `<18.3.7 || >=19.0.0-beta.1, <19.0.11 || >=20.0.0-beta.1, <20.0.1`, fixed in `18.3.7`, `19.0.11`, `20.0.1` · CVSS 7.2 High · Not analysed yet · Published 10 Nov 2022 · Tags: Information disclosure, Hard-coded credentials
- [POWERCOM CO., LTD. UPSMON PRO - Insufficiently Protected Credentials](https://agentprime.io/advisories/CVE-2022-38121.md)
  `CVE-2022-38121` · CVE record: POWERCOM CO., LTD. UPSMON PRO · CVSS 6.5 Medium · Not analysed yet · Published 10 Nov 2022 · Tags: Hard-coded credentials
- [Hardcoded credentials in Kaden PICOFLUX AiR](https://agentprime.io/advisories/CVE-2021-34577.md)
  `CVE-2021-34577` · CVE record: Kaden PICOFLUX AiR · CVSS 6.5 Medium · Not analysed yet · Published 9 Nov 2022 · Tags: Hard-coded credentials
- [Patterson Dental Eaglesoft 21 has AES-256 encryption but there are two ways to obtain a keyfile: (1) keybackup.data > License > Encryption Key or (2) Eaglesoft.Server.Configuration.data > DbEncryptKe…](https://agentprime.io/advisories/CVE-2022-37710.md)
  `CVE-2022-37710` · CVE record · CVSS 7.8 High · Not analysed yet · Published 6 Nov 2022 · Tags: Hard-coded credentials
- [BD Totalys MultiProcessor - Hardcoded Credentials](https://agentprime.io/advisories/CVE-2022-40263.md)
  `CVE-2022-40263` · CVE record: Becton Dickson (BD) BD Totalys MultiProcessor · CVSS 6.6 Medium · Not analysed yet · Published 4 Nov 2022 · Tags: Hard-coded credentials
- [Hard-coded cryptographic key in Cisco Secure Web Appliance and others](https://agentprime.io/advisories/CVE-2022-20868.md)
  `CVE-2022-20868` · CVE record: Cisco Cisco Secure Web Appliance and 2 more · CVSS 4.7 Medium · Not analysed yet · Published 3 Nov 2022 · Tags: Hard-coded credentials
- [phpMyFAQ contains Weak Password Requirements](https://agentprime.io/advisories/GHSA-2rr3-rv49-p42f.md)
  `GHSA-2rr3-rv49-p42f`, `CVE-2022-3754`, `PKSA-w85v-kqzw-m21r` · Packagist `thorsten/phpmyfaq`: affected `<3.1.8`, fixed in `3.1.8` · CVSS 7.5 High · Not analysed yet · Published 29 Oct 2022 · Tags: Hard-coded credentials
- [Bazel leaks user credentials through the remote assets API](https://agentprime.io/advisories/CVE-2022-3474.md)
  `CVE-2022-3474` · CVE record: Google LLC Bazel · CVSS 5.1 Medium · Not analysed yet · Published 26 Oct 2022 · Tags: Hard-coded credentials
- [Plaintext storage of tokens in pulp_ansible](https://agentprime.io/advisories/GHSA-qv37-mfjf-42h8.md)
  `GHSA-qv37-mfjf-42h8`, `CVE-2022-3644`, `PYSEC-2026-900` · PyPI `pulp-ansible`: affected `<0.15.0`, fixed in `0.15.0` · CVSS 5.5 Medium · Not analysed yet · Published 25 Oct 2022 · Tags: Hard-coded credentials, CWE-256
- [Hard-coded credentials in abode systems, inc. iota All-In-One Security Kit](https://agentprime.io/advisories/CVE-2022-29889.md)
  `CVE-2022-29889` · CVE record: abode systems, inc. iota All-In-One Security Kit · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 25 Oct 2022 · Tags: Hard-coded credentials
- [Hard-coded credentials in abode systems, inc. iota All-In-One Security Kit](https://agentprime.io/advisories/CVE-2022-29477.md)
  `CVE-2022-29477` · CVE record: abode systems, inc. iota All-In-One Security Kit · CVSS 8.6 High · Not analysed yet · Published 25 Oct 2022 · Tags: Hard-coded credentials
- [Juiker app - Hard-coded Credentials](https://agentprime.io/advisories/CVE-2022-38117.md)
  `CVE-2022-38117` · CVE record: Juiker Juiker app · CVSS 5.5 Medium · Not analysed yet · Published 24 Oct 2022 · Tags: Hard-coded credentials
- [Hard-coded TLS Certificate](https://agentprime.io/advisories/CVE-2021-4228.md)
  `CVE-2021-4228` · CVE record: Lanner Inc IAC-AST2500A · CVSS 5.8 Medium · EPSS 0.10 · Not analysed yet · Published 24 Oct 2022 · Tags: Hard-coded credentials
- [A credential-exposure vulnerability in the support-bundle mechanism in Gradle Enterprise 2022.3 through 2022.3.3 allows remote attackers to access a subset of application data (e.g., cleartext creden…](https://agentprime.io/advisories/CVE-2022-41575.md)
  `CVE-2022-41575` · CVE record · CVSS 7.5 High · Not analysed yet · Published 21 Oct 2022 · Tags: Hard-coded credentials
- [In PCTechSoft PCSecure V5.0.8.xw, use of Hard-coded Credentials in configuration files leads to admin panel access.](https://agentprime.io/advisories/CVE-2022-42176.md)
  `CVE-2022-42176` · CVE record · CVSS 7.8 High · Not analysed yet · Published 20 Oct 2022 · Tags: Hard-coded credentials
- [API keys stored in plain text by Jenkins Katalon Plugin](https://agentprime.io/advisories/GHSA-35rx-7pc8-6963.md)
  `GHSA-35rx-7pc8-6963`, `CVE-2022-43419` · Maven `org.jenkins-ci.plugins:katalon`: affected `<1.0.33`, fixed in `1.0.33` · CVSS 4.3 Medium · Not analysed yet · Published 19 Oct 2022 · Tags: Hard-coded credentials, CWE-256
- [The web app client of TP-Link AX10v1 V1_211117 uses hard-coded cryptographic keys when communicating with the router.](https://agentprime.io/advisories/CVE-2022-41540.md)
  `CVE-2022-41540` · CVE record · CVSS 5.9 Medium · Not analysed yet · Published 18 Oct 2022 · Tags: Hard-coded credentials
- [go-admin (aka GO Admin) 2.0.12 uses the string go-admin as a production JWT key.](https://agentprime.io/advisories/CVE-2022-42980.md)
  `CVE-2022-42980` · CVE record · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 17 Oct 2022 · Tags: Hard-coded credentials
- [Insufficiently protected credentials in Nessus Professional](https://agentprime.io/advisories/CVE-2022-28291.md)
  `CVE-2022-28291` · CVE record: Nessus Professional · CVSS 6.5 Medium · Not analysed yet · Published 17 Oct 2022 · Tags: Hard-coded credentials
- [Insufficiently protected credentials in Business-central](https://agentprime.io/advisories/CVE-2019-14840.md)
  `CVE-2019-14840` · CVE record: Business-central · CVSS 7.5 High · Not analysed yet · Published 17 Oct 2022 · Tags: Hard-coded credentials
- [Adobe ColdFusion Use of Hard-coded Credentials Application denial-of-service](https://agentprime.io/advisories/CVE-2022-38420.md)
  `CVE-2022-38420` · CVE record: Adobe ColdFusion · CVSS 7.5 High · Critical (CVSS 7+ and EPSS) · EPSS 0.45 · Not analysed yet · Published 14 Oct 2022 · Tags: Hard-coded credentials
- [Insufficiently protected credentials in Siemens SIMATIC Drive Controller family and others](https://agentprime.io/advisories/CVE-2022-38465.md)
  `CVE-2022-38465` · CVE record: Siemens SIMATIC Drive Controller family and 4 more · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 11 Oct 2022 · Tags: Hard-coded credentials
- [Hard-coded cryptographic key in Dell Enterprise SONiC OS](https://agentprime.io/advisories/CVE-2022-34425.md)
  `CVE-2022-34425` · CVE record: Dell Enterprise SONiC OS · CVSS 7.5 High · Not analysed yet · Published 10 Oct 2022 · Tags: Hard-coded credentials
- [etcd has no minimum password length](https://agentprime.io/advisories/GHSA-4993-m7g5-r9hh.md)
  `GHSA-4993-m7g5-r9hh`, `CVE-2020-15115` · Go `go.etcd.io/etcd/client/v3`: affected `<3.3.23 || >=3.4.0, <3.4.10`, fixed in `3.3.23`, `3.4.10` · CVSS 5.8 Medium · Not analysed yet · Published 6 Oct 2022 · Tags: Hard-coded credentials
- [Weak Password Requirements in GitHub repository ikus060/rdiffweb prior to 2.5.0a4.](https://agentprime.io/advisories/GHSA-7wr6-fj4x-893v.md)
  `GHSA-7wr6-fj4x-893v`, `CVE-2022-3376`, `PYSEC-2022-43157` · PyPI `rdiffweb`: affected `<2.4.11a1`, fixed in `2.4.11a1` · CVSS 3.5 Low · Not analysed yet · Published 6 Oct 2022 · Tags: Hard-coded credentials
- [FlyteAdmin's Default OAuth Authorization Server secret must be rotated](https://agentprime.io/advisories/GHSA-67x4-qr35-qvrm.md)
  `GHSA-67x4-qr35-qvrm`, `CVE-2022-39273`, `GO-2022-1043` · Go `github.com/flyteorg/flyteadmin`: affected `<1.1.44`, fixed in `1.1.44` · CVSS 4.8 Medium · Not analysed yet · Published 5 Oct 2022 · Tags: Hard-coded credentials
- [Cisco Software-Defined Application Visibility and Control on Cisco vManage Static Username and Password Vulnerability](https://agentprime.io/advisories/CVE-2022-20844.md)
  `CVE-2022-20844` · CVE record: Cisco Cisco SD-WAN vManage · CVSS 5.3 Medium · Not analysed yet · Published 30 Sept 2022 · Tags: Hard-coded credentials
- [Insufficiently protected credentials in IBM Robotic Process Automation](https://agentprime.io/advisories/CVE-2022-39168.md)
  `CVE-2022-39168` · CVE record: IBM Robotic Process Automation · CVSS 4.6 Medium · Not analysed yet · Published 29 Sept 2022 · Tags: Hard-coded credentials
- [Weak Password Requirements in GitHub repository ikus060/rdiffweb prior to 2.4.9.](https://agentprime.io/advisories/GHSA-8wxf-c45w-g66g.md)
  `GHSA-8wxf-c45w-g66g`, `CVE-2022-3326`, `PYSEC-2022-297` · PyPI `rdiffweb`: affected `<2.4.9`, fixed in `2.4.9` · CVSS 5.4 Medium · Not analysed yet · Published 29 Sept 2022 · Tags: Hard-coded credentials

Newest: <https://agentprime.io/advisories/tag/hard-coded-credentials.md>
Older: <https://agentprime.io/advisories/tag/hard-coded-credentials.md?cursor=WyIyMDIyLTA5LTI5VDAwOjE1OjAwLjAwMDAwMFoiLCJHSFNBLTh3eGYtYzQ1dy1nNjZnIl0>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?tag=hard-coded-credentials&cursor=WyIyMDIyLTEyLTEyVDAxOjQ5OjEwLjAwODAwMFoiLCJDVkUtMjAyMi0yNjQxIl0>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/tag/hard-coded-credentials/?cursor=WyIyMDIyLTEyLTEyVDAxOjQ5OjEwLjAwODAwMFoiLCJDVkUtMjAyMi0yNjQxIl0>. Everything for agents: <https://agentprime.io/llms.txt>.