agentprime: Hard-coded credentialsEvery new Hard-coded credentials Advisory and CVE.https://agentprime.io/CVE-2026-88979: Kubeflow Pipelines: Unauthenticated SSRF vulnerability in Kubeflow Pipelines TensorBoard proxyhttps://agentprime.io/advisories/CVE-2026-88979/https://agentprime.io/advisories/CVE-2026-88979/CVSS 5.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 05 Nov 2026 22:14:38 GMTCVECVE-2026-119757: BTCPay Server < 2.4.2 LND Macaroon Credential File Disclosurehttps://agentprime.io/advisories/CVE-2026-119757/https://agentprime.io/advisories/CVE-2026-119757/CVSS 9.3 (Critical). Critical: CVSS score 9.3: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Thu, 05 Nov 2026 21:44:41 GMTCVEcriticalCVE-2026-123135: langgenius dify Sandbox Run __init__.py hard-coded credentialshttps://agentprime.io/advisories/CVE-2026-123135/https://agentprime.io/advisories/CVE-2026-123135/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 05 Nov 2026 18:45:12 GMTCVEkaniko can send the build's Azure (Entra ID) access token to lookalike ACR registry hostshttps://agentprime.io/advisories/GHSA-5q7h-w9jf-cx97/https://agentprime.io/advisories/GHSA-5q7h-w9jf-cx97/github.com/chainguard-dev/kaniko <1.25.20, fixed in 1.25.20. CVSS 9.3 (Critical). Critical: CVSS score 9.3: 9.0 or more. Published by the GitHub Advisory Database. Not analysed by agentprime yet.Thu, 05 Nov 2026 17:48:54 GMTGogithub.com/chainguard-dev/kanikocriticalCVE-2026-115739: Hard-coded cryptographic key in Trellix DLP on-prem extensionshttps://agentprime.io/advisories/CVE-2026-115739/https://agentprime.io/advisories/CVE-2026-115739/CVSS 6.0 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 05 Nov 2026 15:15:02 GMTCVECVE-2026-97355: Apache OFBiz: Hard-coded Credentials in AdminServer Enable Unauthenticated Denial of Servicehttps://agentprime.io/advisories/CVE-2026-97355/https://agentprime.io/advisories/CVE-2026-97355/Published by the CVE Program. Not analysed by agentprime yet.Thu, 05 Nov 2026 13:45:25 GMTCVECVE-2026-105330: Apache OFBiz: Use of Hard-coded Cryptographic Key in JWT Token Authentication Enables Unauthenticated Administrative Accesshttps://agentprime.io/advisories/CVE-2026-105330/https://agentprime.io/advisories/CVE-2026-105330/Published by the CVE Program. Not analysed by agentprime yet.Thu, 05 Nov 2026 13:40:03 GMTCVECVE-2026-123059: Keycloak admin client secret stored in cleartext in a ConfigMap in Eclipse BaSyx Helm Chartshttps://agentprime.io/advisories/CVE-2026-123059/https://agentprime.io/advisories/CVE-2026-123059/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 05 Nov 2026 13:13:17 GMTCVECVE-2026-123047: Keycloak admin user password stored in cleartext in a ConfigMap in Eclipse BaSyx Helm Chartshttps://agentprime.io/advisories/CVE-2026-123047/https://agentprime.io/advisories/CVE-2026-123047/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 05 Nov 2026 12:11:12 GMTCVECVE-2026-73116: Apache Juneau: REST client forwards credentials to a different origin when following HTTP redirectshttps://agentprime.io/advisories/CVE-2026-73116/https://agentprime.io/advisories/CVE-2026-73116/CVSS 10.0 (Critical). Critical: CVSS score 10.0: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Thu, 05 Nov 2026 11:53:52 GMTCVEcriticalCVE-2026-54378: VitaFit Cloud API Broken Access Control via S3 Token Endpointhttps://agentprime.io/advisories/CVE-2026-54378/https://agentprime.io/advisories/CVE-2026-54378/CVSS 9.3 (Critical). Critical: CVSS score 9.3: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Wed, 04 Nov 2026 22:09:16 GMTCVEcriticalCVE-2026-54374: VitaFit Android < 2.8.1.0 Hardcoded Credentials Disclosurehttps://agentprime.io/advisories/CVE-2026-54374/https://agentprime.io/advisories/CVE-2026-54374/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 04 Nov 2026 21:53:33 GMTCVECVE-2026-97693: Yuxi sandbox isolation failure allows cross-tenant access and internal service compromisehttps://agentprime.io/advisories/CVE-2026-97693/https://agentprime.io/advisories/CVE-2026-97693/CVSS 9.9 (Critical). Critical: CVSS score 9.9: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Wed, 04 Nov 2026 21:14:50 GMTCVEcriticalCVE-2026-113371: Nexus Repository 3 - Insufficiently Protected Credentials in Repository Signing Passphrasehttps://agentprime.io/advisories/CVE-2026-113371/https://agentprime.io/advisories/CVE-2026-113371/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 04 Nov 2026 20:01:20 GMTCVECVE-2026-113372: Nexus Repository 3 - Insufficiently Protected Credentials in YUM Repository Signing Keyhttps://agentprime.io/advisories/CVE-2026-113372/https://agentprime.io/advisories/CVE-2026-113372/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 04 Nov 2026 20:01:19 GMTCVECVE-2026-121971: Symfony: ScopingHttpClient Sends the Credentials of Its Default Scope to Other Origins Through Network-Path Referenceshttps://agentprime.io/advisories/CVE-2026-121971/https://agentprime.io/advisories/CVE-2026-121971/CVSS 8.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 04 Nov 2026 17:43:34 GMTCVECVE-2026-121144: Hardcoded Credentials Vulnerability in Tata Motors iRA and iRA.ev mobile applicationhttps://agentprime.io/advisories/CVE-2026-121144/https://agentprime.io/advisories/CVE-2026-121144/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 04 Nov 2026 12:29:57 GMTCVECVE-2026-121609: Qihoo 360 Whole Home Router M5 Boot Script mpt start hard-coded credentialshttps://agentprime.io/advisories/CVE-2026-121609/https://agentprime.io/advisories/CVE-2026-121609/CVSS 10.0 (Critical). Critical: CVSS score 10.0: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Wed, 04 Nov 2026 01:45:46 GMTCVEcriticalCVE-2026-92199: Quest Foglight for Databases EncryptionUtil Hardcoded Encyption Key Local Privilege Escalation Vulnerabilityhttps://agentprime.io/advisories/CVE-2026-92199/https://agentprime.io/advisories/CVE-2026-92199/CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 03 Nov 2026 23:51:45 GMTCVECVE-2026-82154: Hard-coded cryptographic key in Dell OS Recovery toolhttps://agentprime.io/advisories/CVE-2026-82154/https://agentprime.io/advisories/CVE-2026-82154/CVSS 2.4 (Low). Published by the CVE Program. Not analysed by agentprime yet.Tue, 03 Nov 2026 20:30:15 GMTCVECVE-2026-113733: Password hash disclosure to "view only" admin users with custom user modelshttps://agentprime.io/advisories/CVE-2026-113733/https://agentprime.io/advisories/CVE-2026-113733/CVSS 2.1 (Low). Published by the CVE Program. Not analysed by agentprime yet.Tue, 03 Nov 2026 15:42:48 GMTCVECVE-2026-89292: Unauthenticated SSRF with MNESTIX_BACKEND_API_KEY disclosure in Eclipse Mnestix Browser server actions for configured Infrastructureshttps://agentprime.io/advisories/CVE-2026-89292/https://agentprime.io/advisories/CVE-2026-89292/CVSS 9.2 (Critical). Critical: CVSS score 9.2: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Tue, 03 Nov 2026 09:31:27 GMTCVEcriticalCVE-2026-119736: Attendo Admin Android 3.0.13 Hard-coded MQTT Broker Credentialshttps://agentprime.io/advisories/CVE-2026-119736/https://agentprime.io/advisories/CVE-2026-119736/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 02 Nov 2026 19:02:59 GMTCVECVE-2026-120209: AJ-Report through 1.7.1 Authentication Bypass leading to RCE via Share-Tokenhttps://agentprime.io/advisories/CVE-2026-120209/https://agentprime.io/advisories/CVE-2026-120209/CVSS 9.3 (Critical). Critical: CVSS score 9.3: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Sat, 31 Oct 2026 17:25:56 GMTCVEcritical@sigstore/oci sends the registry Authorization header to a cross-host blob-upload Locationhttps://agentprime.io/advisories/GHSA-j63v-mwhm-56jx/https://agentprime.io/advisories/GHSA-j63v-mwhm-56jx/@sigstore/oci <0.7.2, fixed in 0.7.2. CVSS 7.4 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.Fri, 30 Oct 2026 23:00:17 GMTnpm@sigstore/ociCVE-2026-116252: pgAdmin 4: Materialized view refresh redirects its connection through a crafted database namehttps://agentprime.io/advisories/CVE-2026-116252/https://agentprime.io/advisories/CVE-2026-116252/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 30 Oct 2026 19:55:20 GMTCVECVE-2026-116247: pgAdmin 4: libpq uses the pgAdmin service account's own password file and client certificatehttps://agentprime.io/advisories/CVE-2026-116247/https://agentprime.io/advisories/CVE-2026-116247/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 30 Oct 2026 19:55:16 GMTCVECVE-2026-116245: pgAdmin 4: Connection services are not restricted in server modehttps://agentprime.io/advisories/CVE-2026-116245/https://agentprime.io/advisories/CVE-2026-116245/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 30 Oct 2026 19:55:15 GMTCVECVE-2026-116244: pgAdmin 4: libpq uses the pgAdmin service account's Kerberos credentialshttps://agentprime.io/advisories/CVE-2026-116244/https://agentprime.io/advisories/CVE-2026-116244/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 30 Oct 2026 19:55:15 GMTCVECVE-2026-116242: pgAdmin 4: SSH tunnels use the pgAdmin service account's own SSH identityhttps://agentprime.io/advisories/CVE-2026-116242/https://agentprime.io/advisories/CVE-2026-116242/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 30 Oct 2026 19:55:13 GMTCVECVE-2026-7003: WIT SynApps Runtime 1.4.11 Hardcoded OAuth Credentials Disclosurehttps://agentprime.io/advisories/CVE-2026-7003/https://agentprime.io/advisories/CVE-2026-7003/CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 30 Oct 2026 18:58:29 GMTCVECVE-2026-61737: ng-antd-admin: Hardcoded JWT Secret allows Authentication Bypass in ng-antd-adminhttps://agentprime.io/advisories/CVE-2026-61737/https://agentprime.io/advisories/CVE-2026-61737/CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Fri, 30 Oct 2026 14:34:03 GMTCVEcriticalCVE-2026-61730: SOCFortress CoPilot: Unauthenticated Exposure of ScoutSuite Reports and Uploaded GCP Service-Account Key via Static Mounthttps://agentprime.io/advisories/CVE-2026-61730/https://agentprime.io/advisories/CVE-2026-61730/CVSS 9.3 (Critical). Critical: CVSS score 9.3: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Fri, 30 Oct 2026 14:25:53 GMTCVEcriticalCVE-2026-61729: SOCFortress CoPilot: Hardcoded Default Header Secret - Unauthenticated Active-Response Invocation and Alert Injectionhttps://agentprime.io/advisories/CVE-2026-61729/https://agentprime.io/advisories/CVE-2026-61729/CVSS 9.4 (Critical). Critical: CVSS score 9.4: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Fri, 30 Oct 2026 14:24:04 GMTCVEcriticalCVE-2026-119662: Songloft 2.9.0 before 2.13.6 Hardcoded Admin Credentials in Embedded Backendhttps://agentprime.io/advisories/CVE-2026-119662/https://agentprime.io/advisories/CVE-2026-119662/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 30 Oct 2026 14:16:22 GMTCVECVE-2026-91912: Hard-coded cryptographic key in Dell OpenManage Enterprisehttps://agentprime.io/advisories/CVE-2026-91912/https://agentprime.io/advisories/CVE-2026-91912/CVSS 7.3 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 30 Oct 2026 13:52:16 GMTCVECVE-2026-119597: OpenDeepWiki through 2.0.6 Hard-coded JWT Signing Key Admin Token Forgeryhttps://agentprime.io/advisories/CVE-2026-119597/https://agentprime.io/advisories/CVE-2026-119597/CVSS 9.3 (Critical). Critical: CVSS score 9.3: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Fri, 30 Oct 2026 13:18:17 GMTCVEcriticalCVE-2026-111502: Insufficiently protected credentials in Dell OpenManage Enterprisehttps://agentprime.io/advisories/CVE-2026-111502/https://agentprime.io/advisories/CVE-2026-111502/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 30 Oct 2026 12:16:50 GMTCVECVE-2026-119566: Prometheus through 3.15.1 Credential Leak via remote_write Cross-Host Redirectshttps://agentprime.io/advisories/CVE-2026-119566/https://agentprime.io/advisories/CVE-2026-119566/CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 30 Oct 2026 11:31:13 GMTCVECVE-2026-90861: Password Disclosure via Activity Logs Enabling Administrator Privilege Escalation in WS_FTP Serverhttps://agentprime.io/advisories/CVE-2026-90861/https://agentprime.io/advisories/CVE-2026-90861/CVSS 6.6 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 29 Oct 2026 15:47:45 GMTCVECVE-2026-84295: Improper Authentication in Progress WS_FTP Serverhttps://agentprime.io/advisories/CVE-2026-84295/https://agentprime.io/advisories/CVE-2026-84295/CVSS 10.0 (Critical). Critical: CVSS score 10.0: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Thu, 29 Oct 2026 15:45:08 GMTCVEcriticalCVE-2026-104314: Langflow OSS is affected by multiple vulnerabilitieshttps://agentprime.io/advisories/CVE-2026-104314/https://agentprime.io/advisories/CVE-2026-104314/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 29 Oct 2026 15:17:32 GMTCVECVE-2026-110192: Langflow OSS is affected by multiple vulnerabilitieshttps://agentprime.io/advisories/CVE-2026-110192/https://agentprime.io/advisories/CVE-2026-110192/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 29 Oct 2026 15:15:43 GMTCVECVE-2026-111419: Hardcoded API Token in Foxit Official Websitehttps://agentprime.io/advisories/CVE-2026-111419/https://agentprime.io/advisories/CVE-2026-111419/CVSS 8.6 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 29 Oct 2026 09:45:07 GMTCVECVE-2025-62841: Hard-coded Cryptographic Key #2https://agentprime.io/advisories/CVE-2025-62841/https://agentprime.io/advisories/CVE-2025-62841/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 29 Oct 2026 07:40:02 GMTCVECVE-2025-62839: Hard-coded Cryptographic Key #1https://agentprime.io/advisories/CVE-2025-62839/https://agentprime.io/advisories/CVE-2025-62839/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 29 Oct 2026 07:39:53 GMTCVECVE-2026-118601: Alpine iLX-F511 SSH Hard-Coded Credentials Remote Code Execution Vulnerabilityhttps://agentprime.io/advisories/CVE-2026-118601/https://agentprime.io/advisories/CVE-2026-118601/CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 28 Oct 2026 16:49:59 GMTCVECVE-2026-88967: Azure Monitor access token disclosure via SSRFhttps://agentprime.io/advisories/CVE-2026-88967/https://agentprime.io/advisories/CVE-2026-88967/CVSS 7.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 28 Oct 2026 16:49:57 GMTCVECVE-2026-87097: Insufficiently protected credentials in Acronis Cyber Protect 17https://agentprime.io/advisories/CVE-2026-87097/https://agentprime.io/advisories/CVE-2026-87097/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 28 Oct 2026 10:08:02 GMTCVECVE-2026-86384: Hard-coded cryptographic key in Dell PowerProtect Data Domainhttps://agentprime.io/advisories/CVE-2026-86384/https://agentprime.io/advisories/CVE-2026-86384/CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Wed, 28 Oct 2026 09:51:07 GMTCVEcritical