Lucene search
+L

5948 matches found

Positive Technologies
Positive Technologies
•added 2026/03/25 12:00 a.m.•20 views

PT-2026-27973

Name of the Vulnerable Software and Affected Versions Addi – Cuotas que se adaptan a ti versions n/a through 2.0.4 Description A flaw exists in Addi – Cuotas que se adaptan a ti buy-now-pay-later-addi that allows for exploitation of the password recovery function due to the use of hard-coded...

7.5CVSS5.9AI score0.00346EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/03/25 12:00 a.m.•5 views

CVE-2025-12708: Use of Hard-coded Credentials

IBM Concert 1.0.0 through 2.2.0 contains hard-coded credentials that could be obtained by a local user...

6.2CVSS5.8AI score0.00093EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/03/25 12:00 a.m.•7 views

CVE-2026-27073: Use of Hard-coded Credentials

Use of Hard-coded Credentials vulnerability in Addi Addi – Cuotas que se adaptan a ti buy-now-pay-later-addi allows Password Recovery Exploitation.This issue affects Addi – Cuotas que se adaptan a ti: from n/a through = 2.0.4...

7.5CVSS5.8AI score0.00346EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2026/03/25 12:00 a.m.•25 views

IBM Concert Trust Management Vulnerability

IBM Concert is an enterprise-class collaboration and project management software from IBM. A security vulnerability exists in IBM Concert versions 1.0.0 through 2.2.0 that stems from fixed authentication information embedded in the software. An attacker could exploit the vulnerability to obtain...

6.2CVSS6AI score0.00093EPSS
SaveExploits0References2
osv_ghsa
osv_ghsa
•added 2026/03/23 3:30 p.m.•20 views

GHSA-HJ7X-HMF2-HC2P Harbor allows the use of the default password for web UI login

Use of hard coded credentials in GoHarbor Harbor version 2.15.0 and below, allows attackers to use the default password and gain access to the web UI...

9.4CVSS7.8AI score0.00595EPSS
SaveExploits0References6
Github Security Blog
Github Security Blog
•added 2026/03/23 3:30 p.m.•23 views

Harbor allows the use of the default password for web UI login

Use of hard coded credentials in GoHarbor Harbor version 2.15.0 and below, allows attackers to use the default password and gain access to the web UI...

9.4CVSS7.8AI score0.00595EPSS
SaveExploits0References6Affected Software1
EUVD
EUVD
•added 2026/03/23 3:30 p.m.•20 views

EUVD-2026-14411

Use of hard-coded credentials in Klinika XP and KlinikaXP Insertino allowed an unauthorized attacker access to several internal services. Critically, this included access to the FTP server that hosted the application's update packages. The attacker with these credentials could upload a malicious...

8.7CVSS5.8AI score0.00259EPSS
SaveExploits0References3
NVD
NVD
•added 2026/03/23 3:16 p.m.•37 views

CVE-2026-4404

Use of hard coded credentials in GoHarbor Harbor version 2.15.0 and below, allows attackers to use the default password and gain access to the web UI...

9.4CVSS0.00595EPSS
SaveExploits0References5
Vulnrichment
Vulnrichment
•added 2026/03/23 2:47 p.m.•11 views

CVE-2026-4404 Use of hard coded credentials in GoHarbor Harbor

Use of hard coded credentials in GoHarbor Harbor version 2.15.0 and below, allows attackers to use the default password and gain access to the web UI...

7.8AI score0.00595EPSS
SaveExploits0References4
attackerkb
attackerkb
•added 2026/03/23 2:47 p.m.•14 views

CVE-2026-4404

Use of hard coded credentials in GoHarbor Harbor version 2.15.0 and below, allows attackers to use the default password and gain access to the web UI...

9.4CVSS7.9AI score0.00595EPSS
SaveExploits0References5Affected Software1
CVE
CVE
•added 2026/03/23 2:47 p.m.•73 views

CVE-2026-4404

GoHarbor Harbor version 2.15.0 and below is vulnerable to the use of hard-coded credentials . This flaw allows an attacker to gain unauthorized access to the web UI by using the application's default password. Exploitation of this vulnerability has been highlighted as a trending security concern ...

9.4CVSS7.8AI score0.00595EPSS
SaveExploits0References5Affected Software1
Mend
Mend
•added 2026/03/23 2:47 p.m.•12 views

CVE-2026-4404

Use of hard coded credentials in GoHarbor Harbor version 2.15.0 and below, allows attackers to use the default password and gain access to the web UI...

9.4CVSS7.8AI score0.00595EPSS
SaveExploits0References10
osv_cve
osv_cve
•added 2026/03/23 2:47 p.m.•22 views

CVE-2026-4404 Use of hard coded credentials in GoHarbor Harbor

Use of hard coded credentials in GoHarbor Harbor version 2.15.0 and below, allows attackers to use the default password and gain access to the web UI...

9.4CVSS6.9AI score
SaveExploits0References7
NVD
NVD
•added 2026/03/23 1:16 p.m.•17 views

CVE-2026-1958

Use of hard-coded credentials in Klinika XP and KlinikaXP Insertino allowed an unauthorized attacker access to several internal services. Critically, this included access to the FTP server that hosted the application's update packages. The attacker with these credentials could upload a malicious...

8.7CVSS0.00259EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2026/03/23 12:40 p.m.•11 views

CVE-2026-1958

Use of hard-coded credentials in Klinika XP and KlinikaXP Insertino allowed an unauthorized attacker access to several internal services. Critically, this included access to the FTP server that hosted the application's update packages. The attacker with these credentials could upload a malicious...

8.7CVSS5.8AI score0.00259EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2026/03/23 12:40 p.m.•10 views

CVE-2026-1958 Hard-coded passwords in KlinikaXP

Use of hard-coded credentials in Klinika XP and KlinikaXP Insertino allowed an unauthorized attacker access to several internal services. Critically, this included access to the FTP server that hosted the application's update packages. The attacker with these credentials could upload a malicious...

8.7CVSS5.8AI score0.00259EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2026/03/23 12:40 p.m.•51 views

CVE-2026-1958 Hard-coded passwords in KlinikaXP

Use of hard-coded credentials in Klinika XP and KlinikaXP Insertino allowed an unauthorized attacker access to several internal services. Critically, this included access to the FTP server that hosted the application's update packages. The attacker with these credentials could upload a malicious...

8.7CVSS0.00259EPSS
SaveExploits0References2
CVE
CVE
•added 2026/03/23 12:40 p.m.•99 views

CVE-2026-1958

CVE-2026-1958 describes hard-coded credentials in KlinikaXP and KlinikaXP Insertino, enabling an unauthorized attacker to access internal services, notably the FTP server hosting update packages. The root cause is credentials embedded in the application, with exploitation potentially leading to u...

8.7CVSS5.8AI score0.00259EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/03/23 12:00 a.m.•9 views

CVE-2026-1958: Use of Hard-coded Credentials

Use of hard-coded credentials in Klinika XP and KlinikaXP Insertino allowed an unauthorized attacker access to several internal services. Critically, this included access to the FTP server that hosted the application's update packages. The attacker with these credentials could upload a malicious...

8.7CVSS5.8AI score0.00259EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/03/23 12:00 a.m.•32 views

PT-2026-27137

Name of the Vulnerable Software and Affected Versions GoHarbor versions prior to 2.15.0 Description The use of hard-coded credentials in GoHarbor allows attackers to use the default password and gain access to the web user interface. Recommendations Update GoHarbor to version 2.15.0 or later...

9.4CVSS7.8AI score0.00595EPSS
SaveExploits0
Rows per page
Query Builder