5632 matches found
ccs
Code Credential Scanner This script is intended to scan a large, diverse codebase for hard-coded credentials, or credentials present in configuration files. These represent a serious security issue, and can be extremely hard to detect and manage. The specific focus of this script is to create a...
CVE-2022-42176
PCSecure V5.0.8.xw - 구성 파일에 하드코딩된 자격 증명 사용으로 관리자 패널 접근 가능 요약 공급업체: PCTechSoft SAS 제품: PCSecure 영향을 받는 버전: 5.0.8.xw 코드네임: PapiQuieroPollo00 취약점 유형: 하드코딩된 자격 증명 사용 CWE-798 CVSSv3.1 벡터: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVSSv3.1 기본 점수: 7.8 높음 익스플로잇 가능 여부: 없음 CVE ID: CVE-2022-42176 설명...
CVE-2025-70962
CVE-2025-70962 ZOSI C519M IP 카메라 RTSP 서비스의 하드코딩된 자격 증명 사용 필드| 값 ---|--- CVE ID| CVE-2025-70962 공급업체| ZOSI Technology 제품| ZOSI C519M 스마트 IP 카메라모델 1NC-519M으로도 등록됨 영향을 받는 버전| 펌웨어 V4.2.8.832C01450BA테스트된 빌드, 이전 버전은 검증되지 않음 취약점 유형| CWE-798: 하드코딩된 자격 증명 사용 CWE-1392 참조 CVSS v3.1| 7.5 High —...
CVE-2017-6640-POC
CVE-2017-6640-POC CVE-2017-6640를 위한 개념 증명 Burp 확장기능으로 구현 Cisco Prime Data Center Network Manager DCNM는 정적 자격 증명을 구현합니다. 참조: https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170607-dcnm2 보다 구체적으로, 웹 UI는 사용자가 HTTP Digest 인증을 사용하여 인증하도록 요구합니다. 이 Burp 확장기능은 하드코딩된 HA1을...
CVE-2026-105147
A vulnerability was determined in SciPhi-AI R2R up to 3.6.6. This affects an unknown part of the component JWT Secret Handler. This manipulation of the argument DEFAULTBCRYPTSECRETKEY/DEFAULTNACLSECRETKEY causes hard-coded credentials. The attack can be initiated remotely. The exploit has been...
EUVD-2026-92093
A vulnerability was determined in SciPhi-AI R2R up to 3.6.6. This affects an unknown part of the component JWT Secret Handler. This manipulation of the argument DEFAULTBCRYPTSECRETKEY/DEFAULTNACLSECRETKEY causes hard-coded credentials. The attack can be initiated remotely. The exploit has been...
CVE-2026-105147 SciPhi-AI R2R JWT Secret hard-coded credentials
A vulnerability was determined in SciPhi-AI R2R up to 3.6.6. This affects an unknown part of the component JWT Secret Handler. This manipulation of the argument DEFAULTBCRYPTSECRETKEY/DEFAULTNACLSECRETKEY causes hard-coded credentials. The attack can be initiated remotely. The exploit has been...
CVE-2026-105147
The SciPhi-AI R2R software (up to version 3.6.6 ) contains a vulnerability in the JWT Secret Handler component. The issue stems from the manipulation of the DEFAULT_BCRYPT_SECRET_KEY and DEFAULT_NACL_SECRET_KEY arguments, which leads to the use of hard-coded credentials . This vulnerability can b...
CVE-2026-105141
A security flaw has been discovered in topoteretes cognee up to 1.5.4. The affected element is the function getuseridbyemail of the file cognee/modules/users/authentication/getapiauthbackend.py of the component JWT Signing Key Handler. The manipulation of the argument FASTAPIUSERSJWTSECRET result...
CVE-2026-105141
The topoteretes cognee software (versions up to 1.5.4 ) contains a security flaw in the JWT Signing Key Handler component. Specifically, the get_user_id_by_email function within the file cognee/modules/users/authentication/get_api_auth_backend.py allows for the manipulation of the FASTAPI_USERS_J...
EUVD-2026-92086
A security flaw has been discovered in topoteretes cognee up to 1.5.4. The affected element is the function getuseridbyemail of the file cognee/modules/users/authentication/getapiauthbackend.py of the component JWT Signing Key Handler. The manipulation of the argument FASTAPIUSERSJWTSECRET result...
CVE-2026-105141 topoteretes cognee JWT Signing Key get_api_auth_backend.py get_user_id_by_email hard-coded credentials
A security flaw has been discovered in topoteretes cognee up to 1.5.4. The affected element is the function getuseridbyemail of the file cognee/modules/users/authentication/getapiauthbackend.py of the component JWT Signing Key Handler. The manipulation of the argument FASTAPIUSERSJWTSECRET result...
EVlink City < R8 V3.4.0.1 - Authentication Bypass
A CWE-798: Use of Hard-coded Credentials vulnerability exists in EVlink City EVC1S22P4 / EVC1S7P4 all versions prior to R8 V3.4.0.1, EVlink Parking EVW2 / EVF2 / EV.2 all versions prior to R8 V3.4.0.1, and EVlink Smart Wallbox EVB1A all versions prior to R8 V3.4.0.1 that could allow an attacker t...
PT-2026-104617
A security flaw has been discovered in topoteretes cognee up to 1.5.4. The affected element is the function get user id by email of the file cognee/modules/users/authentication/get api auth backend.py of the component JWT Signing Key Handler. The manipulation of the argument FASTAPI USERS JWT...
PT-2026-104623
A vulnerability was determined in SciPhi-AI R2R up to 3.6.6. This affects an unknown part of the component JWT Secret Handler. This manipulation of the argument DEFAULT BCRYPT SECRET KEY/DEFAULT NACL SECRET KEY causes hard-coded credentials. The attack can be initiated remotely. The exploit has...
CVE-2025-65855
CVE-2025-65855 HelpFlash IoT OTA 업데이트 다중 취약점 요약 Netun Solutions HelpFlash IoT의 OTA 펌웨어 업데이트 메커니즘에서 여러 취약점이 발견되어, 짧은 물리적 접근만으로 공격자가 임의 코드를 실행할 수 있습니다. CVE ID: CVE-2025-65855 심각도: 높음HIGH CVSS v3.1 점수: 7.6 연구자 평가 - NVD 분석 대기 중 CVSS 벡터: CVSS:3.1/AV:P/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVSS 세부 내역 공격 경로AV:...
epson-eh-tw5350-advisories
Epson EH-TW5350 — CVE-2021-43716, CVE-2021-43717, CVE-2021-43718 Epson EH-TW5350 프로젝터펌웨어 150075647YWWV110에서 2021년 KITRI Best of the BestBoB 프로그램 중 B-BEAM-BOB 팀이 발견한 세 가지 취약점입니다. CVE ID는 2021-12-21에 MITRE에 의해 할당되었으나, 해당 레코드는 2026년까지 미공개 상태로 남아 있었으며, 이후 CVE 공개 절차를 완료하기 위해 요구되는 공개 참조 자료로서 본 권고문이...
GitLab CE/EE - Hard-Coded Credentials
GitLab CE/EE contains a hard-coded credentials vulnerability. A hardcoded password was set for accounts registered using an OmniAuth provider e.g. OAuth, LDAP, SAML, allowing attackers to potentially take over accounts. This template attempts to passively identify vulnerable versions of GitLab...
CVE-2026-94592 Armatura LLC Armatura One Use of Hard-coded Credentials
Armatura One's database initialization routine assigns a fixed, vendor-defined password to the database superuser account at creation time, rather than generating a unique password per installation. An individual with access to the server operating system and knowledge of this value can...