Hard-coded credentials.

demozx gf_cms JWT Authentication auth.go init hard-coded credentials

• demozx gf_cms
• Hard-coded credentials

Silverpeas vulnerable to password complexity rule bypass

• Hard-coded credentials

<=6.4.2 · no fixed version yet

H3C GR1100-P v100R009 was discovered to use a hardcoded password in /etc/shadow, which allows attackers to log in as root.

• Hard-coded credentials

H3C Magic B1ST v100R012 was discovered to contain a hardcoded password vulnerability in /etc/shadow, which allows attackers to log in as root.

• Hard-coded credentials

H3C R3010 v100R002L02 was discovered to contain a hardcoded password vulnerability in /etc/shadow, which allows attackers to log in as root.

• Hard-coded credentials

IBM InfoSphere Information Server information disclosure

• IBM InfoSphere Information Server
• Hard-coded credentials

SourceCodester Prison Management System Profile Image insufficiently protected credentials

• SourceCodester Prison Management System
• Hard-coded credentials

Authentication Bypass in GNCC's GC2 Indoor Security Camera 1080P allows an attacker with physical access to gain a privileged command shell via the UART Debugging Port.

• Hard-coded credentials

Identical Hardcoded Root Password for All Devices in GNCC's GC2 Indoor Security Camera 1080P allows an attacker with physical access to retrieve the root password for all similar devices

• Hard-coded credentials

Zoom Workplace Apps and SDKs - Protection Mechanism Failure

• Zoom Communications Inc. Zoom Workplace Apps and SDKs
• Hard-coded credentials

NetBird uses a static initialization vector (IV) in github.com/netbirdio/netbird

• Hard-coded credentials

>=0.23.2, <0.29.2 · fixed in 0.29.2

Hard-coded credentials in AMD Radeon™ RX 6000 Series Graphics Cards and others

• AMD Radeon™ RX 6000 Series Graphics Cards
• AMD Radeon™ PRO W6000 Series Graphics Cards
• Hard-coded credentials

IBM Common Licensing information disclosure

• IBM Common Licensing
• Hard-coded credentials

Weak password requirements in Siemens Location Intelligence family

• Siemens Location Intelligence family
• Hard-coded credentials

Firewalla BTLE Weak Credentials

• Firewalla Box Software
• Hard-coded credentials

Vonets WiFi Bridges Use of Hard-coded Credentials

• Vonets VAR1200-H
• Vonets VAR1200-L
• Hard-coded credentials

Journyx Unauthenticated Password Reset Bruteforce

• Journyx (jtime)
• Hard-coded credentials
• CWE-334

D-Link DIR-300 REVA FIRMWARE v1.06B05_WW contains hardcoded credentials in the Telnet service.

• Hard-coded credentials

Apereo CAS vulnerable to credential leaks for LDAP authentication

• Information disclosure
• Hard-coded credentials

>=6.5.0, <6.6.6 · fixed in 6.6.6

Hard-coded credentials in ZEXELON CO., LTD. ZWX-2000CSW2-HN

• ZEXELON CO., LTD. ZWX-2000CSW2-HN
• Hard-coded credentials

Forminator <= 1.29.1 - HubSpot Developer API Key Sensitive Information Exposure

• wpmudev Forminator Forms – Contact Form, Payment Form & Custom Form Builder
• Hard-coded credentials

An issue in Horizon Business Services Inc.

• Hard-coded credentials

Cosy+ devices running a firmware 21.x below 21.2s10 or a firmware 22.x below 22.1s3 use a unique key to encrypt the configuration parameters.

• Hard-coded credentials

TOTOLINK CP450 Telnet Service product.ini hard-coded password

• TOTOLINK CP450
• Hard-coded credentials

TOTOLINK LR1200 shadow.sample hard-coded password

• TOTOLINK LR1200
• Hard-coded credentials

In D-Link DIR-860L REVA FIRMWARE PATCH 1.10..B04, the Telnet service contains hardcoded credentials, enabling attackers to log in remotely to the Telnet service and perform arbitrary commands.

• Hard-coded credentials

D-Link DIR-820LW REVB FIRMWARE PATCH 2.03.B01_TC contains hardcoded credentials in the Telnet service, enabling attackers to log in remotely to the Telnet service and perform arbitrary commands.

• Hard-coded credentials

TOTOLINK A3000RU product.ini hard-coded password

• TOTOLINK A3000RU
• Hard-coded credentials

TOTOLINK A3600R Telnet Service product.ini hard-coded password

• TOTOLINK A3600R
• Hard-coded credentials

TOTOLINK A3300R shadow.sample hard-coded password

• TOTOLINK A3300R
• Hard-coded credentials

The MSI installer for Splashtop Streamer for Windows before 3.6.2.0 uses a temporary folder with weak permissions during installation.

• Hard-coded credentials

Hard-coded Credentials Vulnerability

• SyroTech SY-GPON-1110-WDONT router
• Hard-coded credentials

AdTran 834-5 HDC17600021F1 (SmartOS 11.1.1.1) devices enable the SSH service by default and have a hidden, undocumented, hard-coded support account whose password is based on the devices MAC address.

• Hard-coded credentials

Hardcoded MSSQL Credentials

• PerkinElmer ProcessPlus
• Hard-coded credentials

Hard-coded cryptographic key in Cisco Intelligent Node Manager and others

• Cisco Intelligent Node Manager
• Cisco Intelligent Node Software
• Hard-coded credentials

Agent takeover

• ManageEngine DDI Central
• Hard-coded credentials

Insufficiently protected credentials in Devolutions Remote Desktop Manager

• Devolutions Remote Desktop Manager
• Hard-coded credentials

Tenda i29V1.0 V1.0.0.5 was discovered to contain a hardcoded password for root.

• Hard-coded credentials

Johnson Controls Software House C●CURE 9000 installer password strength

• Johnson Controls Software House C•CURE 9000
• Hard-coded credentials

Weak credentials in Longse Technology LBH30FE200W and others

• Longse Technology LBH30FE200W
• Zamel ZMB-01/C
• Hard-coded credentials

WP2Speed Faster – Optimize PageSpeed Insights Score 90-100 <= 1.0.1 - Improper Authorization due to use of Hardcoded Credentials

• WP2Speed Faster – Optimize PageSpeed Insights Score 90-100
• Hard-coded credentials

ifm: Hardcoded telnet credentials in Smart PLC

• ifm Smart PLC AC14xx Firmware
• ifm Smart PLC AC4xxS Firmware
• Hard-coded credentials

ifm: Use of Hard-coded Credentials

• ifm Smart PLC AC14xx Firmware
• ifm Smart PLC AC4xxS Firmware
• Hard-coded credentials

ZKTeco ZKBio CVSecurity v6.1.1 was discovered to contain a hardcoded cryptographic key.

• Hard-coded credentials

Hard-coded password in LevelOne WBR-6013

• LevelOne WBR-6013
• Hard-coded credentials

The Avalara for Salesforce CPQ app before 7.0 for Salesforce allows attackers to read an API key.

• Hard-coded credentials
• Information disclosure

mySCADA myPRO Use of Hard-coded Password

• mySCADA myPRO
• Hard-coded credentials

Insufficiently protected credentials in Kiloview P1/P2 devices

• Kiloview P1/P2
• Hard-coded credentials

Weak Password Requirements in Kiloview P1/P2 devices

• Kiloview P1/P2
• Hard-coded credentials

Use of Hard-coded Credentials in Kiloview P1/P2 devices

• Kiloview P1/P2
• Hard-coded credentials

Insufficiently protected credentials in JetBrains TeamCity

• JetBrains TeamCity
• Hard-coded credentials

Insufficiently protected credentials in JetBrains TeamCity

• JetBrains TeamCity
• Hard-coded credentials

Hard-coded credentials in Kakao piccoma Corp. "Piccoma" App for Android and others

• Kakao piccoma Corp. "Piccoma" App for Android
• Kakao piccoma Corp. "Piccoma" App for iOS
• Hard-coded credentials

TEST_KEY used in example dcp_tool reference implementation

• usbarmory mxs-dcp
• Hard-coded credentials

Use of Hard-coded Credentials in TELSAT marKoni FM Transmitter

• Markoni-D (Compact) FM Transmitters
• Markoni-DH (Exciter+Amplifiers) FM Transmitters
• Hard-coded credentials

Improper Access Control in Talya Informatics' Elektraweb

• Talya Informatics Elektraweb
• Authentication bypass
• Information disclosure

luci-app-lucky v2.8.3 was discovered to contain hardcoded credentials.

• Hard-coded credentials

A hardcoded privileged ID within Lumisxp v15.0.x to v16.1.x allows attackers to bypass authentication and access internal pages and other sensitive information.

• Hard-coded credentials

Brocade Fabric OS versions prior to v9.0 have default community strings

• Brocade Fabric OS
• Hard-coded credentials

Hard Coded Credential

• Baicells Snap Router
• Hard-coded credentials