Hard-coded credentials.

Galaxy Software Services Vitals ESP - Use of Hard-coded Cryptographic Key

• Galaxy Software Services Vitals ESP
• Hard-coded credentials

Weintek Weincloud Improper Authentication

• Weintek Weincloud
• Hard-coded credentials

Weave GitOps Terraform Controller Information Disclosure Vulnerability

• Information disclosure
• Hard-coded credentials

<0.14.4 || >=0.15.0-rc.1, <0.15.0-rc.5 · fixed in 0.14.4, 0.15.0-rc.5

An issue found in DERICIA Co.

• Hard-coded credentials

Hard-coded cryptographic key in SonicWall GMS and others

• SonicWall GMS
• SonicWall Analytics
• Hard-coded credentials

Jenkins mabl Plugin vulnerable to exposure of system-scooped credentials

• Hard-coded credentials

<0.0.47 · fixed in 0.0.47

Active Directory Federation Service Security Feature Bypass Vulnerability

• Microsoft Windows Server 2019
• Microsoft Windows Server 2019 (Server Core installation)
• Hard-coded credentials

SmartBPM.NET - Use of Hard-Coded Credentials - 2

• SamrtSoft SmartBPM.NET
• Hard-coded credentials

SmartBPM.NET - Use of Hard-Coded Credentials - 1

• SamrtSoft SmartBPM.NET
• Hard-coded credentials

PiiGAB M-Bus Weak Password Requirements

• PiiGAB M-Bus SoftwarePack
• Hard-coded credentials

PiiGAB M-Bus Use of Hard-coded Credentials

• PiiGAB M-Bus SoftwarePack
• Hard-coded credentials

Apache InLong has Weak Password Requirements in Apache InLong

• Hard-coded credentials

>=1.1.0, <1.47.0 · fixed in 1.47.0

Apache Superset vulnerable to Exposure of Sensitive Information

• Information disclosure
• Hard-coded credentials

>=1.3.0, <2.1.0 · fixed in 2.1.0

Hard-coded cryptographic key in MilesightVPN

• MilesightVPN
• Hard-coded credentials

Usage of Hard-coded Credentials

• AMI MegaRAC_SPx
• Hard-coded credentials

hard coded cryptographic key

• AMI MegaRAC_SPx
• Hard-coded credentials

The King's Temple Church website Leaked Stripe API Key in Public Code Repository

• tktchurch website
• Information disclosure
• Hard-coded credentials

Weak passwords allowed in cloudexplorer-lite

• CloudExplorer-Dev CloudExplorer-Lite
• Hard-coded credentials

Weak Password Requirements in cloudexplorer-dev/cloudexplorer-lite

• cloudexplorer-dev/cloudexplorer-lite
• Hard-coded credentials

EmbedPress <= 3.7.3 - Sensitive Information Exposure

• wpdevteam EmbedPress – PDF Embedder, Embed YouTube Videos, 3D FlipBook, Social feeds, Docs & more
• Hard-coded credentials

Advantech R-SeeNet Use of Hard-coded Credentials

• Advantech R-SeeNet
• Hard-coded credentials

Enphase Installer Toolkit Android App Use of Hard-coded Credentials

• Enphase Installer Toolkit
• Hard-coded credentials

Hard-coded credentials in Hewlett Packard Enterprise (HPE) HPE Insight Remote Support

• Hewlett Packard Enterprise (HPE) HPE Insight Remote Support
• Hard-coded credentials

An issue was discovered on NOKIA Airscale ASIKA Single RAN devices before 21B.

• Hard-coded credentials

OTCMS hard-coded password

• OTCMS
• Hard-coded credentials

Rockwell Automation FactoryTalk System Services Vulnerable To Use Of Hard-Coded Cryptographic Key

• Rockwell Automation FactoryTalk System Services
• Hard-coded credentials

Hard-coded credentials in Siemens CP-8031 MASTER MODULE and others

• Siemens CP-8031 MASTER MODULE
• Siemens CP-8050 MASTER MODULE
• Hard-coded credentials

PTC Vuforia Studio Insufficiently Protected Credentials

• PTC Vuforia Studio
• Hard-coded credentials

The AES Key-IV pair used by the TP-Link TAPO C200 camera V3 (EU) on firmware version 1.1.22 Build 220725 is reused across all cameras.

• Hard-coded credentials

Privilege escalation to root

• ABB Ltd. ASPECT®-Enterprise
• ABB Ltd. NEXUS Series
• Hard-coded credentials

Authentication bypass vulnerability in MELSEC iQ-R Series / iQ-F Series EtherNet/IP Modules

• Mitsubishi Electric Corporation MELSEC iQ-R Series EtherNet/IP module RJ71EIP91
• Mitsubishi Electric Corporation MELSEC iQ-F Series EtherNet/IP module FX5-ENET/IP
• Hard-coded credentials

Authentication bypass vulnerability in MELSEC iQ-R Series / iQ-F Series EtherNet/IP Modules

• Mitsubishi Electric Corporation MELSEC iQ-R Series EtherNet/IP module RJ71EIP91
• Mitsubishi Electric Corporation MELSEC iQ-F Series EtherNet/IP module FX5-ENET/IP
• Hard-coded credentials

Insufficiently protected credentials in Mozilla Firefox

• Mozilla Firefox
• Hard-coded credentials

Hitron Technologies Inc. CODA-5310 - Hard-coded Cryptographic Key

• Hitron Technologies Inc. Hitron CODA-5310
• Hard-coded credentials

Sprecher: Sprecon maintenance access with hardcoded credentials

• Sprecher Automation SPRECON-E CPU PU243x
• Sprecher Automation SPRECON-E CPU PU244x
• Hard-coded credentials

Draytek Vigor Routers firmware versions below 3.9.6/4.2.4, Access Points firmware versions below v1.4.0, Switches firmware versions below 2.6.7, and Myvigor firmware versions below 2.3.2 were discove…

• Hard-coded credentials

Hard-coded credentials in SAISON INFORMATION SYSTEMS CO.,LTD. DataSpider Servista

• SAISON INFORMATION SYSTEMS CO.,LTD. DataSpider Servista
• Hard-coded credentials

Avaya IX Workforce Engagement - CWE-522: Insufficiently Protected Credentials

• Avaya IX Workforce Engagement
• Hard-coded credentials

ROZCOM client

• ROZCOM client
• Hard-coded credentials

Insufficiently Protected ChatBot Credentials in tgstation-server

• tgstation-server
• Hard-coded credentials

Pimcore customers' list user password hash is disclosed

• Hard-coded credentials
• CWE-257

<3.3.10 · fixed in 3.3.10

In WFTPD 3.25, usernames and password hashes are stored in an openly viewable wftpd.ini configuration file within the WFTPD directory.

• Hard-coded credentials

[minikube] ssh server with default password

• Kubernetes minikube
• Hard-coded credentials

Hard-coded credentials in JINS Inc. JINS MEME CORE

• JINS Inc. JINS MEME CORE
• Hard-coded credentials

Hard-coded credentials in BirdDog STUDIO R3 and others

• BirdDog STUDIO R3
• BirdDog 4K QUAD
• Hard-coded credentials

Weak credentials in Snap One OvrC Cloud

• Snap One OvrC Cloud
• Hard-coded credentials

MXsecurity Hardcoded Credential Vulnerability

• Moxa MXsecurity Series
• Hard-coded credentials

Hazelcast vulnerable to unmasked password exposure

• Information disclosure
• Hard-coded credentials

>=4.0-BETA-1, <=4.2.8 || >=5.0-BETA-1, <5.0.5 || >=5.1-BETA-1, <5.1.6 || >=5.2-BETA-1, <5.2.4 || >=5.3.0-BETA-1, <5.3.0 · fixed in 5.0.5, 5.1.6, 5.2.4, 5.3.0

cnoa OA hard-coded password

• OA
• Hard-coded credentials

Jenkins Azure VM Agents Plugin missing permission checks

• Hard-coded credentials

<853.v4a · fixed in 853.v4a

Jenkins NS-ND Integration Performance Publisher Plugin displays credentials without masking

• Hard-coded credentials

<4.11.0.48 · fixed in 4.11.0.48

Jenkins Code Dx Plugin stores API keys in plain text

• Hard-coded credentials
• CWE-256

<4.0.0 · fixed in 4.0.0

Jenkins Code Dx Plugin displays API keys in plain text

• Hard-coded credentials
• CWE-256

<4.0.0 · fixed in 4.0.0

An Information disclosure vulnerability in /be/rpc.php in Jedox GmbH Jedox 2020.2.5 allow remote, authenticated users with permissions to modify database connections to disclose a connections' cleart…

• Hard-coded credentials

USR USR-G806 Web Management Page hard-coded password

• USR-G806
• Hard-coded credentials

Insufficiently protected credentials in Intel(R) DCM software

• Intel(R) DCM software
• Hard-coded credentials

Shenzen Tenda Technology IP Camera CP3 V11.10.00.2211041355 does not defend against physical access to U-Boot via the UART: the Wi-Fi password is shown, and the hardcoded boot password can be inserte…

• Weak cryptography or TLS
• Hard-coded credentials

Shenzen Tenda Technology IP Camera CP3 V11.10.00.2211041355 was discovered to contain a hard-coded default password for the RTSP feed.

• Hard-coded credentials

Shenzen Tenda Technology IP Camera CP3 V11.10.00.2211041355 was discovered to contain a hard-coded default password for root which is stored using weak encryption.

• Hard-coded credentials

Weak password requirements in Seiko Solutions Inc. SkyBridge MB-A200, SkyBridge BASIC MB-A130…

• Seiko Solutions Inc. SkyBridge MB-A200, SkyBridge BASIC MB-A130, and SkySpider MB-R210
• Hard-coded credentials