Hard-coded credentials.

Remote Backups Application Discloses Stored Credentials

• Western Digital My Cloud
• Hard-coded credentials

Hard-coded credentials in BUFFALO INC. Buffalo network devices

• BUFFALO INC. Buffalo network devices
• Hard-coded credentials

MegaRAC Default Credentials Vulnerability

• AMI MegaRAC SPx12
• AMI MegaRAC SPx13
• Hard-coded credentials

Craft CMS discloses password hashes

• Information disclosure
• Hard-coded credentials

>=3.0.0, <3.7.33 · fixed in 3.7.33

MegaRAC Default Credentials Vulnerability

• AMI MegaRAC SPx12
• AMI MegaRAC SPx13
• Hard-coded credentials

Insufficiently protected credentials in FUJI SOFT INCORPORATED +F FS040U software

• FUJI SOFT INCORPORATED +F FS040U software
• Hard-coded credentials

When aborting a SFTP connection, MobaXterm before v22.1 sends a hardcoded password to the server.

• Hard-coded credentials

A default username and password for an administrator account was discovered in ZKTeco ZKTime 10.0 through 11.1.0, builds 20180901, 20190510.1, 20200309.3, 20200930, 20201231, and 20210220.

• Hard-coded credentials

Weak password requirements in thisAAY Lazy Mouse

• thisAAY Lazy Mouse
• Hard-coded credentials

Book Store Management System v1.0 was discovered to contain hardcoded credentials which allows attackers to escalate privileges and access the admin panel.

• Hard-coded credentials

Sanitization Management System v1.0 was discovered to contain hardcoded credentials which allows attackers to escalate privileges and access the admin panel.

• Hard-coded credentials

Realtek RTL8111EP-CG/RTL8111FP-CG - Use of Hard-coded Credentials

• Realtek RTL8111EP-CG
• Realtek RTL8111FP-CG
• Hard-coded credentials

Airtable.js credentials exposed in browser builds

• airtable.js
• Hard-coded credentials

HCL Launch is vulnerable to Insufficiently Protected LDAP Search Credentials (CVE-2022-42445)

• HCL Software HCL Launch
• Hard-coded credentials

ERP solution Remote Code Execution Vulnerability

• Webcash Co.,Ltd sERP Server 2.0
• Hard-coded credentials

Insufficiently protected credentials in Mitsubishi Electric Corporation GX Works3

• Mitsubishi Electric Corporation GX Works3
• Hard-coded credentials

Hard-coded password in Mitsubishi Electric Corporation GX Works3

• Mitsubishi Electric Corporation GX Works3
• Hard-coded credentials

Hard-coded cryptographic key in Mitsubishi Electric Corporation GX Works3 and others

• Mitsubishi Electric Corporation GX Works3
• Mitsubishi Electric Corporation Motion Control Setting(GX Works3 related software)
• Hard-coded credentials

Hard-coded cryptographic key in Mitsubishi Electric Corporation GX Works3 and others

• Mitsubishi Electric Corporation GX Works3
• Mitsubishi Electric Corporation GT Designer3 Version1 (GOT2000)
• Hard-coded credentials

Hard-coded cryptographic key in Mitsubishi Electric Corporation GX Works3

• Mitsubishi Electric Corporation GX Works3
• Hard-coded credentials

Hard-coded cryptographic key in Mitsubishi Electric Corporation GX Works3

• Mitsubishi Electric Corporation GX Works3
• Hard-coded credentials

Hard-coded password in Mitsubishi Electric Corporation GX Works3 and others

• Mitsubishi Electric Corporation GX Works3
• Mitsubishi Electric Corporation GT Designer3 Version1 (GOT2000)
• Hard-coded credentials

Apache Dolphin Scheduler has insufficiently protected credentials

• Information disclosure
• Hard-coded credentials

<2.0.6 · fixed in 2.0.6

Plaintext storage of password after a reset in org.xwiki.platform:xwiki-platform-security-authentication-default

• Information disclosure
• Hard-coded credentials

>=13.1RC1, <13.10.8 || >=14.0.0, <14.4.3 · fixed in 13.10.8, 14.4.3

IBM UrbanCode Deploy information disclosure

• IBM UrbanCode Deploy
• Hard-coded credentials

Plaintext Storage of a Password in Jenkins NS-ND Integration Performance Publisher Plugin

• Hard-coded credentials
• CWE-256

<4.8.0.146 · fixed in 4.8.0.146

Jenkins Reverse Proxy Auth Plugin vulnerable due to plaintext storage of passwords

• Hard-coded credentials
• CWE-256

>=1.7.3, <1.7.4 · fixed in 1.7.4

Liferay Portal and Liferay DXP Includes LDAP Credentials in the Page URL

• Information disclosure
• Hard-coded credentials

<5.0.13 · fixed in 5.0.13

Siyucms v6.1.7 was discovered to contain a remote code execution (RCE) vulnerability in the background.

• Hard-coded credentials

patrickfuller camp up to and including commit bbd53a256ed70e79bd8758080936afbf6d738767 is vulnerable to Incorrect Access Control.

• Hard-coded credentials

Insufficiently protected credentials in Intel(R) AMT SDK, Intel(R) EMA and Intel(R) MC

• Intel(R) AMT SDK, Intel(R) EMA and Intel(R) MC
• Hard-coded credentials

Exfiltration of hashed SMB credentials on Windows via file:// redirect

• Information disclosure
• Hard-coded credentials

<18.3.7 || >=19.0.0-beta.1, <19.0.11 || >=20.0.0-beta.1, <20.0.1 · fixed in 18.3.7, 19.0.11, 20.0.1

POWERCOM CO., LTD. UPSMON PRO - Insufficiently Protected Credentials

• POWERCOM CO., LTD. UPSMON PRO
• Hard-coded credentials

Hardcoded credentials in Kaden PICOFLUX AiR

• Kaden PICOFLUX AiR
• Hard-coded credentials

Patterson Dental Eaglesoft 21 has AES-256 encryption but there are two ways to obtain a keyfile: (1) keybackup.data > License > Encryption Key or (2) Eaglesoft.Server.Configuration.data > DbEncryptKe…

• Hard-coded credentials

BD Totalys MultiProcessor - Hardcoded Credentials

• Becton Dickson (BD) BD Totalys MultiProcessor
• Hard-coded credentials

Hard-coded cryptographic key in Cisco Secure Web Appliance and others

• Cisco Secure Web Appliance
• Cisco Secure Email
• Hard-coded credentials

phpMyFAQ contains Weak Password Requirements

• Hard-coded credentials

<3.1.8 · fixed in 3.1.8

Bazel leaks user credentials through the remote assets API

• Google LLC Bazel
• Hard-coded credentials

Plaintext storage of tokens in pulp_ansible

• Hard-coded credentials
• CWE-256

<0.15.0 · fixed in 0.15.0

Hard-coded credentials in abode systems, inc. iota All-In-One Security Kit

• abode systems, inc. iota All-In-One Security Kit
• Hard-coded credentials

Hard-coded credentials in abode systems, inc. iota All-In-One Security Kit

• abode systems, inc. iota All-In-One Security Kit
• Hard-coded credentials

Juiker app - Hard-coded Credentials

• Juiker app
• Hard-coded credentials

Hard-coded TLS Certificate

• Lanner Inc IAC-AST2500A
• Hard-coded credentials

A credential-exposure vulnerability in the support-bundle mechanism in Gradle Enterprise 2022.3 through 2022.3.3 allows remote attackers to access a subset of application data (e.g., cleartext creden…

• Hard-coded credentials

In PCTechSoft PCSecure V5.0.8.xw, use of Hard-coded Credentials in configuration files leads to admin panel access.

• Hard-coded credentials

API keys stored in plain text by Jenkins Katalon Plugin

• Hard-coded credentials
• CWE-256

<1.0.33 · fixed in 1.0.33

The web app client of TP-Link AX10v1 V1_211117 uses hard-coded cryptographic keys when communicating with the router.

• Hard-coded credentials

go-admin (aka GO Admin) 2.0.12 uses the string go-admin as a production JWT key.

• Hard-coded credentials

Insufficiently protected credentials in Nessus Professional

• Nessus Professional
• Hard-coded credentials

Insufficiently protected credentials in Business-central

• Business-central
• Hard-coded credentials

Adobe ColdFusion Use of Hard-coded Credentials Application denial-of-service

• Adobe ColdFusion
• Hard-coded credentials

Insufficiently protected credentials in Siemens SIMATIC Drive Controller family and others

• Siemens SIMATIC Drive Controller family
• Siemens SIMATIC ET 200SP Open Controller CPU 1515SP PC (incl. SIPLUS variants)
• Hard-coded credentials

Hard-coded cryptographic key in Dell Enterprise SONiC OS

• Dell Enterprise SONiC OS
• Hard-coded credentials

etcd has no minimum password length

• Hard-coded credentials

<3.3.23 || >=3.4.0, <3.4.10 · fixed in 3.3.23, 3.4.10

Weak Password Requirements in GitHub repository ikus060/rdiffweb prior to 2.5.0a4.

• Hard-coded credentials

<2.4.11a1 · fixed in 2.4.11a1

FlyteAdmin's Default OAuth Authorization Server secret must be rotated

• Hard-coded credentials

<1.1.44 · fixed in 1.1.44

Cisco Software-Defined Application Visibility and Control on Cisco vManage Static Username and Password Vulnerability

• Cisco SD-WAN vManage
• Hard-coded credentials

Insufficiently protected credentials in IBM Robotic Process Automation

• IBM Robotic Process Automation
• Hard-coded credentials

Weak Password Requirements in GitHub repository ikus060/rdiffweb prior to 2.4.9.

• Hard-coded credentials

<2.4.9 · fixed in 2.4.9