Hard-coded credentials.

Weak password requirements in Seiko Solutions Inc. SkyBridge MB-A100/110

• Seiko Solutions Inc. SkyBridge MB-A100/110
• Hard-coded credentials

PostgresNIO processes unencrypted bytes from man-in-the-middle

• vapor postgres-nio
• Hard-coded credentials

Hard-coded password in Siemens SIMATIC Cloud Connect 7 CC712 and others

• Siemens SIMATIC Cloud Connect 7 CC712
• Siemens SIMATIC Cloud Connect 7 CC716
• Hard-coded credentials

Information Disclosure vulnerability in SAP BusinessObjects Platform

• SAP_SE SAP BusinessObjects Platform
• Hard-coded credentials

Milesight NCR/Camera CWE-522: Insufficiently Protected Credentials

• Milesight NCR/Camera
• Hard-coded credentials

Hard-coded cryptographic key in Axis Communications AB AXIS OS

• Axis Communications AB AXIS OS
• Hard-coded credentials

Hard-coded credentials in Fortinet FortiNAC

• Fortinet FortiNAC
• Hard-coded credentials

Insufficiently protected credentials in Fortinet FortiNAC

• Fortinet FortiNAC
• Hard-coded credentials

European Chemicals Agency IUCLID 6.x before 6.27.6 allows authentication bypass because a weak hard-coded secret is used for JWT signing.

• Hard-coded credentials

Insufficiently protected credentials in Lenovo XClarity Controller

• Lenovo XClarity Controller
• Hard-coded credentials

Sage 300 through 2022 uses a hard-coded 40-byte blowfish key to encrypt and decrypt user passwords and SQL connection strings stored in ISAM database files in the shared data directory.

• Hard-coded credentials

The optional Web Screens feature for Sage 300 through version 2022 uses a hard-coded 40-byte blowfish key ("PASS_KEY") to encrypt and decrypt the database connection string for the PORTAL database fo…

• Hard-coded credentials

The optional Global Search feature for Sage 300 through version 2022 uses a set of hard-coded credentials for the accompanying Apache Solr instance.

• Hard-coded credentials

The optional Web Screens and Global Search features for Sage 300 through version 2022 use a hard-coded 40-byte blowfish key ("LandlordPassKey") to encrypt and decrypt secrets stored in configuration…

• Hard-coded credentials

Impersonation through User-Controlled Token

• Synopsys Code Dx
• Hard-coded credentials

Potential leak of authentication data to 3rd parties

• Hard-coded credentials

<1.8.0 · fixed in 1.8.0

Sangoma FreePBX 1805 through 2302 (when obtained as a ,.ISO file) places AMPDBUSER, AMPDBPASS, AMPMGRUSER, and AMPMGRPASS in the list of global variables.

• Hard-coded credentials

Hard-coded credentials in Zoho ManageEngine Multiple Products

• Zoho ManageEngine Multiple Products
• Hard-coded credentials

An issue was discovered in Fighting Cock Information System 1.0, which uses default credentials, but does not force nor prompt the administrators to change the credentials.

• Hard-coded credentials

HPE OneView and HPE OneView Global Dashboard appliance dumps may expose authentication tokens

• Hewlett Packard Enterprise HPE OneView
• Hewlett Packard Enterprise HPE OneView Global Dashboard
• Hard-coded credentials

Insufficiently protected credentials in Hewlett Packard Enterprise (HPE) HPE OneView

• Hewlett Packard Enterprise (HPE) HPE OneView
• Hard-coded credentials

Insufficiently protected credentials in Hewlett Packard Enterprise (HPE) HPE OneView

• Hewlett Packard Enterprise (HPE) HPE OneView
• Hard-coded credentials

Insufficiently protected credentials in Hewlett Packard Enterprise (HPE) HPE OneView

• Hewlett Packard Enterprise (HPE) HPE OneView
• Hard-coded credentials

Insufficiently protected credentials in Hewlett Packard Enterprise (HPE) HPE OneView

• Hewlett Packard Enterprise (HPE) HPE OneView
• Hard-coded credentials

Insufficiently protected credentials in Hewlett Packard Enterprise (HPE) HPE OneView

• Hewlett Packard Enterprise (HPE) HPE OneView
• Hard-coded credentials

PWS Personal Weather Station Dashboard (PWS_Dashboard) LTS December 2020 (2012_lts) allows remote code execution by injecting PHP code into settings.php.

• Hard-coded credentials

Expo SDK has an OAuth vulnerability

• Hard-coded credentials

<48.0.0 · fixed in 48.0.0

EnterpriseDB EDB Postgres Advanced Server (EPAS) before 14.6.0 logs unredacted passwords in situations where optional parameters are used with CREATE/ALTER USER/GROUP/ROLE, and redacting was configur…

• Hard-coded credentials

Ribose RNP before 0.15.1 does not implement a required step in a cryptographic algorithm, resulting in weaker encryption than on the tin of the algorithm.

• Hard-coded credentials

Incorrect Access Control in Tripleplay Platform releases prior to Caveman 3.4.0 allows authenticated user to modify other users passwords via a crafted request payload

• Hard-coded credentials

Weak Password Requirements in GitHub repository modoboa/modoboa prior to 2.1.0.

• Hard-coded credentials

<2.1.0 · fixed in 2.1.0

@nuxtlabs/github-module made Use of Hard-coded Credentials

• Hard-coded credentials

<1.6.2 · fixed in 1.6.2

Electra Central AC unit – Easily calculated password

• Electra Central AC unit
• Hard-coded credentials

Electra Central AC unit – Hardcoded Credentials

• Electra Central AC unit
• Hard-coded credentials

TP-Link Tapo C310 1.3.0 devices allow access to the RTSP video feed via credentials of User --- and Password TPL075526460603.

• Hard-coded credentials

Weak Password Requirements in calibreweb

• Hard-coded credentials

<0.6.20 · fixed in 0.6.20

Weak credentials in TP-Link Corporation Limited T2600G-28SQ

• TP-Link Corporation Limited T2600G-28SQ
• Hard-coded credentials

Aten PE8108 2.4.232 is vulnerable to Incorrect Access Control.

• Hard-coded credentials

Aten PE8108 2.4.232 is vulnerable to Incorrect Access Control.

• Hard-coded credentials

Hard-coded credentials in Wolt Delivery: Food and more

• Wolt Delivery: Food and more
• Hard-coded credentials

IBM Sterling Order Management information disclosure

• IBM Sterling Order Management
• Hard-coded credentials

phpMyFAQ has weak password requirements

• Hard-coded credentials

<3.1.12 · fixed in 3.1.12

Authentication bypass in UniRPC's udadmin service

• Rocket Software UniData
• Rocket Software UniVerse
• Hard-coded credentials

Insufficiently protected credentials in JetBrains IntelliJ IDEA

• JetBrains IntelliJ IDEA
• Hard-coded credentials

Insufficiently protected credentials in CP Plus KVMS Pro

• CP Plus KVMS Pro
• Hard-coded credentials

VARTA: Multiple devices prone to hard-coded credentials

• VARTA Storage Element backup
• VARTA Storage Element S1
• Hard-coded credentials

Insufficiently protected credentials in Devolutions Remote Desktop Manager

• Devolutions Remote Desktop Manager
• Hard-coded credentials

MGT-COMMERCE CloudPanel Shared Certificate

• MGT-COMMERCE CloudPanel
• Hard-coded credentials

An issue discovered in MEGAFEIS, BOFEI DBD+ Application for IOS & Android v1.4.4 allows attacker to gain access to sensitive account information via insecure password policy.

• Hard-coded credentials

A Hard Coded Admin Credentials issue in the Web-UI Admin Panel in Propius MachineSelector 6.6.0 and 6.6.1 allows remote attackers to gain access to the admin panel Propiusadmin.php, which allows taki…

• Hard-coded credentials

Panindex uses hard coded cyptographic key

• px-org PanIndex
• Hard-coded credentials

Easy!Appointments uses hard-coded credentials

• Hard-coded credentials

<=1.4.3 · no fixed version yet

Update share links to use FRP instead of SSH tunneling

• Hard-coded credentials

<3.13.1 · fixed in 3.13.1

Cisco FXOS Software and UCS Manager Software Configuration Backup Static Key Vulnerability

• Cisco Unified Computing System (Managed)
• Hard-coded credentials

Aztech WMB250AC Mesh Routers Firmware Version 016 2020 is vulnerable to PHP Type Juggling in file /var/www/login.php, allows attackers to gain escalated privileges only when specific conditions regar…

• Hard-coded credentials

Prolink router PRS1841 was discovered to contain hardcoded credentials for its Telnet and FTP services.

• Hard-coded credentials

Insufficiently protected credentials in Fortinet FortiNAC

• Fortinet FortiNAC
• Hard-coded credentials

Ricoh mp_c4504ex devices with firmware 1.06 mishandle credentials.

• Hard-coded credentials

AMI MegaRAC SPX devices allow Password Disclosure through Redfish.

• Hard-coded credentials

Netgear ProSAFE 24 Port 10/100 FS726TP - CWE-522: Insufficiently Protected Credentials.

• Netgear ProSAFE 24 Port 10/100 FS726TP
• Hard-coded credentials