Hard-coded credentials.

A vulnerability was found in the Application Server of Desktop Alert PingAlert version 6.1.0.11 to 6.1.1.2.

• Hard-coded credentials

Hard-coded encryption keys in Twonky Server

• Lynxtechnology Twonky Server
• Hard-coded credentials

LibreNMS has Weak Password Policy

• Hard-coded credentials

<25.11.0 · fixed in 25.11.0

Hard-coded credentials in Fortinet FortiWeb

• Fortinet FortiWeb
• Hard-coded credentials

The password change endpoint in Open Source Point of Sale 3.4.1 allows users to set their account password to an empty string due to missing server-side validation.

• Hard-coded credentials

NixOS has hardcoded credentials in Onlyoffice module

• NixOS nixpkgs
• Hard-coded credentials

Digiwin｜EasyFlow GP - Insufficiently Protected Credentials

• Digiwin EasyFlow GP
• Hard-coded credentials

Digiwin｜EasyFlow GP - Insufficiently Protected Credentials

• Digiwin EasyFlow GP
• Hard-coded credentials

QaTraq 6.9.2 ships with administrative account credentials which are enabled in default installations and permit immediate login via the web application login page.

• Hard-coded credentials

shsuishang ShopSuite ModulithShop RSA/OAuth2/Database hard-coded credentials

• shsuishang ShopSuite ModulithShop
• Hard-coded credentials

General Industrial Controls Lynx+ Gateway Weak Password Requirements

• General Industrial Controls Lynx+ Gateway
• Hard-coded credentials

AstrBot is vulnerable to RCE with hard-coded JWT signing keys

• Hard-coded credentials
• CWE-345

<3.5.18 · fixed in 3.5.18

AIX Insufficiently Protected Credentials

• IBM AIX
• IBM VIOS
• Hard-coded credentials

Sogexia Android App Compile Affected SDK v35, Max SDK 32 and fixed in v36, was discovered to contain hardcoded encryption keys in the encryption_helper.dart file

• Hard-coded credentials

Hard-coded credentials in AuthN component of NVIDIA AIStore

• AuthN component of NVIDIA AIStore
• Hard-coded credentials

Insufficiently protected credentials in Axis Communications AB AXIS OS

• Axis Communications AB AXIS OS
• Hard-coded credentials

Information Disclosure vulnerability in SAP Business One (SLD)

• SAP_SE SAP Business One (SLD)
• Hard-coded credentials

Insecure key & Secret Management vulnerability in SQL Anywhere Monitor (Non-Gui)

• SAP_SE SQL Anywhere Monitor (Non-Gui)
• Hard-coded credentials

Download Manager <= 3.3.30 - Unauthenticated Cron Trigger due to Hardcoded Cron Key

• codename065 Download Manager
• Hard-coded credentials

Ubia Ubox

• Ubia Ubox Android
• Ubia Ubox IOS
• Hard-coded credentials

KiotViet Sync <= 1.8.5 - Use of Hard-coded Password to Authorization Bypass

• mykiot KiotViet Sync
• Hard-coded credentials

Insufficiently Protected Credentials in Radiometrics VizAir

• Radiometrics VizAir
• Hard-coded credentials

Shuffle Master Deck Mate 2 Hard-coded Credentials & Exposed Services

• Light & Wonder, Inc. / SHFL Entertainment, Inc. / Shuffle Master, Inc. Deck Mate 2
• Hard-coded credentials

PHPGurukul News Portal settings.py hard-coded key

• PHPGurukul News Portal
• Hard-coded credentials
• CWE-320

Multiple Devices are Sharing the Same Secrets for SDKSocket (TCP/5000)

• Azure Access Technology BLU-IC2
• Azure Access Technology BLU-IC4
• Hard-coded credentials

Insufficient Password Policy

• Azure Access Technology BLU-IC2
• Azure Access Technology BLU-IC4
• Hard-coded credentials

Nagios Log Server < 2024R2.0.2 AD/LDAP Import Password Not Obfuscated

• Nagios Log Server
• Information disclosure
• Hard-coded credentials

MLflow Weak Password Requirements Authentication Bypass Vulnerability

• Hard-coded credentials

<2.22.0rc0 · fixed in 2.22.0rc0

Unprotected access to parts of the application in Epsilon RH by Grupo Castilla

• Grupo Castilla Epsilon RH
• Hard-coded credentials

GitHub Workflow Updater stored the optional Github token in plaintext

• RichardoC github-workflow-updater-extension
• Hard-coded credentials

Hard-coded credentials in PLANEX COMMUNICATIONS INC. MZK-DP300N

• PLANEX COMMUNICATIONS INC. MZK-DP300N
• Hard-coded credentials

Weak Password Policy

• Azure Access Technology BLU-IC2
• Azure Access Technology BLU-IC4
• Hard-coded credentials

Unsecure access configuration

• SICK AG TLOC100-100 with Firmware <7.1.1
• Hard-coded credentials

Private Key Disclosure Vulnerability in ZTE ZXMP M721 Product

• ZTE ZXMP M721
• Hard-coded credentials

Improper handling of OTP/TOTP/HOTP values in NetKnights GmbH privacyIDEA Authenticator v.4.3.0 on Android allows local attackers with root access to bypass two factor authentication.

• Information disclosure
• Hard-coded credentials

Shuffle Master Deck Mate 2 Insecure Update Chain

• Light & Wonder, Inc. / SHFL Entertainment, Inc. / Shuffle Master, Inc. Deck Mate 2
• Hard-coded credentials
• Weak cryptography or TLS

Microweber CMS 2.0 has Weak Password Requirements.

• Hard-coded credentials

Oxford Nanopore Technologies MinKNOW Insufficiently Protected Credentials

• Oxford Nanopore Technologies MinKNOW
• Hard-coded credentials

Allstar Reviewbot has Authentication Bypass via Hard-coded Webhook Secret in github.com/ossf/allstar

• Hard-coded credentials
• CWE-453

<0.0.0-20250721181116-e004ecb540d6 · fixed in 0.0.0-20250721181116-e004ecb540d6

Use of Hard-coded Credentials vulnerability in Ghost Robotics' Vision 60

• Ghost Robotics Vision 60
• Hard-coded credentials

Sauter: Hard-coded Authentication Credentials

• Sauter modulo 6 devices modu680-AS
• Sauter modulo 6 devices modu660-AS
• Hard-coded credentials

NeuVector is shipping cryptographic material into its binary

• Hard-coded credentials

>=0.0.0-20230727023453-1c4957d53911, <0.0.0-20251020133207-084a437033b4 || >=5.3.0, <5.4.7 · fixed in 0.0.0-20251020133207-084a437033b4, 5.4.7

Usage of Hardcoded FTP Credentials EfficientLab WorkExaminer Professional

• EfficientLab WorkExaminer Professional
• Hard-coded credentials

The Reolink desktop application uses a hard-coded and predictable AES encryption key to encrypt user configuration files allowing attackers with local access to decrypt sensitive application data sto…

• Hard-coded credentials

The Reolink Desktop Application 8.18.12 contains hardcoded credentials as the Initialization Vector (IV) in its AES-CFB encryption implementation allowing attackers with access to the application env…

• Hard-coded credentials

Flowring Technology｜Agentflow - Use of Hard-coded Cryptographic Key

• Flowring Technology Agentflow
• Hard-coded credentials

Hard-coded credentials in Moxa EDR-G9010 Series and others

• Moxa EDR-G9010 Series
• Moxa EDR-8010 Series
• Hard-coded credentials

HCL Traveler for Microsoft Outlook (HTMO) is susceptible to a credential leakage

• HCL Software Traveler for Microsoft Outlook
• Hard-coded credentials

Hard-coded cryptographic key in NEOJAPAN Inc. desknet's NEO

• NEOJAPAN Inc. desknet's NEO
• Hard-coded credentials

Felan Framework <= 1.1.4 - Hardcoded Credentials

• RiceTheme Felan Framework
• Hard-coded credentials

A hard-coded weak password vulnerability has been discovered in all Magic-branded devices from Chinese network equipment manufacturer H3C.

• Hard-coded credentials

Hardcoded credentials in gsigel14 ATLAS-EPIC commit f29312c (2025-05-26).

• Hard-coded credentials

Creativeitem Academy LMS up to and including 6.14 uses a hardcoded default JWT secret for token signing.

• Hard-coded credentials

Argo Workflow may expose artifact repository credentials

• Hard-coded credentials

<3.6.12 || >=3.7.0, <3.7.3 · fixed in 3.6.12, 3.7.3

Tenda RP3 Pro Firmware Update force_upgrade.sh hard-coded password

• Tenda RP3 Pro
• Hard-coded credentials
• CWE-255

IBM Security Verify Access hard coded credentials

• IBM Security Verify Access
• IBM Verify Identity Access Container
• Hard-coded credentials

Tomofun Furbo 360/Furbo Mini Root Account hard-coded password

• Tomofun Furbo 360
• Tomofun Furbo Mini
• Hard-coded credentials
• CWE-255

Tomofun Furbo 360/Furbo Mini MQTT Client Certificate furbo_img hard-coded credentials

• Tomofun Furbo 360
• Tomofun Furbo Mini
• Hard-coded credentials

code-projects Hospital Management System express-session hard-coded key

• code-projects Hospital Management System
• Hard-coded credentials
• CWE-320

Newforma Info Exchange (NIX) insufficiently protected credentials

• Newforma Project Center
• Hard-coded credentials
• Information disclosure