ccs

Code Credential Scanner This script is intended to scan a large, diverse codebase for hard-coded credentials, or credentials present in configuration files. These represent a serious security issue, and can be extremely hard to detect and manage. The specific focus of this script is to create a...

CVE-2017-6640-POC

CVE-2017-6640-POC Proof of concept for CVE-2017-6640 as burp extension Cisco Prime Data Center Network Manager DCNM implements a static credentials. See also: https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170607-dcnm2 More specifically, the Web UI requires users...

EUVD-2026-126011

A security flaw has been discovered in D-Link DIR-850L FW1.20WWb03. This impacts an unknown function of the file /usr/sbin/consolepwd of the component Console Login. Performing a manipulation results in hard-coded credentials. The attack requires a local approach. The exploit has been released to...

CVE-2026-129445

A security flaw exists in the D-Link DIR-850L running firmware version FW1.20WWb03 . The vulnerability affects an unknown function within the Console Login component, specifically involving the file /usr/sbin/consolepwd . Exploiting this flaw allows an attacker to obtain hard-coded credentials vi...

EUVD-2026-126003

A vulnerability was identified in D-Link DSL-6740C 20131126. This affects an unknown function of the file /etc/templates/ftpd/ftpdconf.php of the component FTP Daemon. Such manipulation leads to hard-coded credentials. The attack can be executed remotely. The exploit is publicly available and mig...

CVE-2026-129444

The D-Link DSL-6740C (version 20131126 ) is vulnerable to a flaw in the FTP Daemon component. Specifically, an unknown function within the file /etc/templates/ftpd/ftpd_conf.php allows for the manipulation of hard-coded credentials . This vulnerability can be exploited remotely to compromise the ...

CVE-2023-41508

CVE-2023-41508 CVE-2023-41508 - A hard-coded password in Super Store Finder v3.6 allows attackers to access the administration panel. Vulnerability Type Incorrect Access Control Vendor of Product Super Store Finder Affected Product Code Base Super Store Finder - Affected version 3.6 or below. Fix...

CVE-2026-103361

The Payment Gateway via Valitor for WooCommerce WordPress plugin, in versions prior to 1.9.41 , contains a vulnerability where it fails to properly validate the authenticity of payment callbacks. The root cause is the use of a hard-coded default verification secret shipped with the plugin; if a s...

EUVD-2026-125978

The Payment Gateway via Valitor for WooCommerce WordPress plugin before 1.9.41 does not properly validate the authenticity of payment callbacks, relying on a verification secret that ships with a hard-coded default value used by every store that has not changed it, allowing unauthenticated...

CVE-2022-42176

PCSecure V5.0.8.xw - Use of Hard-coded Credentials in configuration files leads to admin panel access Summary Vendor: PCTechSoft SAS Product: PCSecure Affected versions: 5.0.8.xw CodeName: PapiQuieroPollo00 Vulnerability Type: Use of Hard-coded Credentials CWE-798 CVSSv3.1 Vector:...

EUVD-2026-125973

A security flaw has been discovered in Linux Foundation Magma up to 1.9.0. The affected element is an unknown function of the file orc8r/lib/go/registry/interceptors.go. Performing a manipulation results in hard-coded credentials. The attack can be initiated remotely. The exploit has been release...

CVE-2026-129359 Linux Foundation Magma interceptors.go hard-coded credentials

A security flaw has been discovered in Linux Foundation Magma up to 1.9.0. The affected element is an unknown function of the file orc8r/lib/go/registry/interceptors.go. Performing a manipulation results in hard-coded credentials. The attack can be initiated remotely. The exploit has been release...

CVE-2026-129359

A security flaw exists in Linux Foundation Magma versions up to 1.9.0 . The vulnerability stems from an unknown function within the file orc8r/lib/go/registry/interceptors.go , where specific manipulations can lead to the exposure of hard-coded credentials . This attack can be initiated remotely ...

RED ADM Hard-coded Credentials Data Compromise

The vulnerability in the “RED ADM” system’s catalog service is related to the use of hard-coded credentials. Exploitation of this vulnerability could allow a remote attacker to compromise the integrity and confidentiality of protected information...

Elph Mobile Hard-coded Key Unauthorized Access

The vulnerability in the Elph Mobile unified communications platform is related to the use of a hard-coded cryptographic key. Exploitation of this vulnerability could allow an attacker to gain unauthorized access to sensitive information...

EVlink City < R8 V3.4.0.1 - Authentication Bypass

A CWE-798: Use of Hard-coded Credentials vulnerability exists in EVlink City EVC1S22P4 / EVC1S7P4 all versions prior to R8 V3.4.0.1, EVlink Parking EVW2 / EVF2 / EV.2 all versions prior to R8 V3.4.0.1, and EVlink Smart Wallbox EVB1A all versions prior to R8 V3.4.0.1 that could allow an attacker t...

ZyXel USG - Hardcoded Credentials

A hardcoded credential vulnerability was identified in the 'zyfwp' user account in some Zyxel firewalls and AP controllers. The account was designed to deliver automatic firmware updates to connected access points through FTP. id: CVE-2020-29583 info: name: ZyXel USG - Hardcoded Credentials autho...

TOTOLINK CP450 v4.1.0cu.747_B20191224 - Hard-Coded Password Vulnerability

A critical vulnerability has been discovered in TOTOLINK CP450 version 4.1.0cu.747B20191224. This vulnerability affects an unknown part of the file /webcste/cgi-bin/product.ini of the Telnet Service component. The issue stems from the use of a hard-coded password, which can be exploited remotely...

PT-2026-147669

A security flaw has been discovered in Linux Foundation Magma up to 1.9.0. The affected element is an unknown function of the file orc8r/lib/go/registry/interceptors.go. Performing a manipulation results in hard-coded credentials. The attack can be initiated remotely. The exploit has been release...

CVE-2026-129359: Linux Foundation Magma: A security flaw has been discovered in Linux Foundation Magma up to 1.9.0

A security flaw has been discovered in Linux Foundation Magma up to 1.9.0. The affected element is an unknown function of the file orc8r/lib/go/registry/interceptors.go. Performing a manipulation results in hard-coded credentials. The attack can be initiated remotely. The exploit has been release...