CVE-2025-65855

CVE-2025-65855 HelpFlash IoT Aggiornamento OTA Molteplici Vulnerabilità Riepilogo Molteplici vulnerabilità nel meccanismo di aggiornamento del firmware OTA del dispositivo HelpFlash IoT di Netun Solutions consentono a un attaccante con breve accesso fisico di eseguire codice arbitrario. CVE ID:...

CVE-2026-13768

CVE-2026-13768: Credenziale privilegiata dell'IoT Hub — Enumerazione della flotta, RCE sul dispositivo e pivot nella rete domestica Advisory Campo| Valore ---|--- CVE| CVE-2026-13768 ICSA| ICSA-26-183-03 Gardyn IoT Hub CVSS 3.1| 10.0 Critico Vector 3.1| CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:...

CVE-2024-22734

CVE-2024-22734 Exploit PoC per CVE-2024-22734 Questa repository contiene il sorgente dell'exploit Proof of Concept PoC per CVE-2024-22734 , una vulnerabilità scoperta da Bryan Smith di Redline Cyber Security. Per informazioni dettagliate sulla vulnerabilità, fare riferimento al nostro post sul...

CVE-2023-41508

CVE-2023-41508 CVE-2023-41508 - Una password hardcoded in Super Store Finder v3.6 consente agli aggressori di accedere al pannello di amministrazione. Tipo di vulnerabilità Controllo degli accessi non corretto Fornitore del prodotto Super Store Finder Base del codice del prodotto interessato Supe...

ccs

Code-Anmeldedaten-Scanner Dieses Skript soll eine große, vielfältige Codebasis nach fest codierten Anmeldedaten oder in Konfigurationsdateien vorhandenen Anmeldedaten durchsuchen. Diese stellen ein ernstes Sicherheitsproblem dar und sind äußerst schwer zu erkennen und zu verwalten. Der spezifisch...

CVE-2026-24166

NVIDIA UFM Enterprise has a vulnerability in its session management component caused by a hard-coded cryptographic key . An attacker with local access could exploit this to extract information, potentially leading to information disclosure and escalation of privileges . The CVSS 3.1 score is 5.1 ...

EUVD-2026-65612

NVIDIA UFM Enterprise contains a vulnerability in the session management component, where an attacker could use a hard-coded cryptographic key to extract information. A successful exploit of this vulnerability might lead to information disclosure and escalation of privileges...

CVE-2026-59769

FA-50 all versions contain hard-coded credentials. An attacker, who knows the credentials and has access to the vessel's internal network, can operate the settings screen using that credentials to alter the identification number...

CVE-2017-6640-POC

CVE-2017-6640-POC Prova de conceito para CVE-2017-6640 como extensão burp Cisco Prime Data Center Network Manager DCNM implementa credenciais estáticas. Veja também: https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170607-dcnm2 Mais especificamente, a interface web...

EUVD-2026-65319

FA-50 all versions contain hard-coded credentials. An attacker, who knows the credentials and has access to the vessel's internal network, can operate the settings screen using that credentials to alter the identification number...

CVE-2026-59769

FA-50 all versions contain hard-coded credentials. An attacker, who knows the credentials and has access to the vessel's internal network, can operate the settings screen using that credentials to alter the identification number...

CVE-2026-59769

Furuno FA-50 (all versions) contains hard-coded credentials that, if known to an attacker with access to the vessel's internal network, allow operation of the settings screen to alter the identification number . The vulnerability is rated CVSS 3.1: 9.1 (CRITICAL) and CVSS 4.0: 8.8 (HIGH) , reflec...

EVlink City < R8 V3.4.0.1 - Authentication Bypass

A CWE-798: Use of Hard-coded Credentials vulnerability exists in EVlink City EVC1S22P4 / EVC1S7P4 all versions prior to R8 V3.4.0.1, EVlink Parking EVW2 / EVF2 / EV.2 all versions prior to R8 V3.4.0.1, and EVlink Smart Wallbox EVB1A all versions prior to R8 V3.4.0.1 that could allow an attacker t...

GitLab CE/EE - Hard-Coded Credentials

GitLab CE/EE contains a hard-coded credentials vulnerability. A hardcoded password was set for accounts registered using an OmniAuth provider e.g. OAuth, LDAP, SAML, allowing attackers to potentially take over accounts. This template attempts to passively identify vulnerable versions of GitLab...

TOTOLINK CP450 v4.1.0cu.747_B20191224 - Hard-Coded Password Vulnerability

A critical vulnerability has been discovered in TOTOLINK CP450 version 4.1.0cu.747B20191224. This vulnerability affects an unknown part of the file /webcste/cgi-bin/product.ini of the Telnet Service component. The issue stems from the use of a hard-coded password, which can be exploited remotely...

ZyXel USG - Hardcoded Credentials

A hardcoded credential vulnerability was identified in the 'zyfwp' user account in some Zyxel firewalls and AP controllers. The account was designed to deliver automatic firmware updates to connected access points through FTP. id: CVE-2020-29583 info: name: ZyXel USG - Hardcoded Credentials autho...

Gladinet CentreStack < 16.4.10315.56368 Use of Hard-coded Key Leads to Unauthenticated RCE

Gladinet CentreStack through 16.1.10296.56315 fixed in 16.4.10315.56368 has a deserialization vulnerability due to the CentreStack portal's hardcoded machineKey use, as exploited in the wild in March 2025. This enables threat actors who know the machineKey to serialize a payload for server-side...

CVE-2026-14483_exploit

CVE-2026-14483 — Realtyna WPL / Organic IDX: Nicht authentifizierter beliebiger Datei-Upload → RCE Nicht authentifizierter beliebiger Datei-Upload, der in dem Realtyna WPL / Organic IDX WordPress-Plugin real-estate-listing-realtyna-wpl ≤ 5.2.0 zu RCE führt. Das Plugin registriert einen "I/O-Diens...

SecretScrub

SecretScrub O SecretScrub vai eliminar todos os seus segredos sujos embutidos no código. Este script processa arquivos no formato de arquivo SARIF, que é gerado por várias ferramentas de análise estática. A ferramenta examina um diretório no sistema de arquivos e cria uma nova cópia do diretório...

CVE-2022-42176

PCSecure V5.0.8.xw - L'uso di credenziali hard-coded nei file di configurazione porta all'accesso al pannello di amministrazione Sommario Fornitore: PCTechSoft SAS Prodotto: PCSecure Versionei interessatae: 5.0.8.xw Nome in codice: PapiQuieroPollo00 Vulnerabilità Tipo: Uso di credenziali hard-cod...