11414 matches found
EUVD-2026-86531
Smartphone application Tohoku Electric Power "Yorisou e Net" uses a hard-coded cryptographic key, which may allow an attacker to retrieve a hard-coded cryptographic key from the affected product...
PT-2026-98934
Name of the Vulnerable Software and Affected Versions zhistaredu StarTraining versions prior to 3.8.2 Description A remote issue exists in the JWT Token Handler component within the UserLoginService.createToken function of the application.yml file. Manipulating the user id or company id arguments...
CVE-2026-75553: Use of Hard-coded Cryptographic Key
Smartphone application Tohoku Electric Power "Yorisou e Net" uses a hard-coded cryptographic key, which may allow an attacker to retrieve a hard-coded cryptographic key from the affected product...
CVE-2026-97877: Use of Hard-coded Password
A vulnerability was determined in zhistaredu StarTraining up to 3.8.1. This issue affects the function UserLoginService.createToken of the file application.yml of the component JWT Token Handler. This manipulation of the argument userid/companyid causes use of hard-coded password. The attack is...
PT-2026-98357
Name of the Vulnerable Software and Affected Versions Tohoku Electric Power "Yorisou e Net" affected versions not specified Description The smartphone application uses a hard-coded cryptographic key. This flaw may allow an attacker to retrieve the key from the product, potentially compromising th...
Erlang/OTP Code Execution
The vulnerability of the Erlang/OTP software platform lies in the ability to use hard-coded keys of the platform. Exploiting this vulnerability allows a remote attacker to execute arbitrary code before the operating system is loaded...
CVE-2026-79959
The Botslab G980H dash camera firmware contains a hard-coded root account password that cannot be changed by the user. An attacker who obtains the firmware or has physical access to the device could recover the credential and use it to obtain root access through the UART interface...
CVE-2026-75558
The Botslab G980H dash camera firmware uses a hard-coded cryptographic key and initialization vector to protect WiFi credentials communicated by the device. An attacker who obtains the protected credential and extracts the cryptographic material from the firmware could recover the WiFi password a...
CVE-2026-79959
The Botslab G980H dash camera firmware is vulnerable to use of hard-coded credentials because it contains a root account password that cannot be modified by the user. An attacker with physical access to the device or the ability to obtain the firmware can recover these credentials to gain root ac...
EUVD-2026-86464
The Botslab G980H dash camera firmware contains a hard-coded root account password that cannot be changed by the user. An attacker who obtains the firmware or has physical access to the device could recover the credential and use it to obtain root access through the UART interface...
CVE-2026-79959 Botslab G980H Dashcams Use of Hard-coded Credentials
The Botslab G980H dash camera firmware contains a hard-coded root account password that cannot be changed by the user. An attacker who obtains the firmware or has physical access to the device could recover the credential and use it to obtain root access through the UART interface...
CVE-2026-79959 Botslab G980H Dashcams Use of Hard-coded Credentials
The Botslab G980H dash camera firmware contains a hard-coded root account password that cannot be changed by the user. An attacker who obtains the firmware or has physical access to the device could recover the credential and use it to obtain root access through the UART interface...
CVE-2026-93290
Omni C20 uses hard-coded credentials that could allow an attacker to monitor log files to obtain credentials to access information like mapping data...
CVE-2026-75558
The Botslab G980H dash camera firmware contains a vulnerability due to the use of a hard-coded cryptographic key and initialization vector. This flaw is used to protect WiFi credentials communicated by the device. An attacker capable of extracting cryptographic material from the firmware and obta...
CVE-2026-75558 Botslab G980H Dashcams Use of Hard-coded Cryptographic Key
The Botslab G980H dash camera firmware uses a hard-coded cryptographic key and initialization vector to protect WiFi credentials communicated by the device. An attacker who obtains the protected credential and extracts the cryptographic material from the firmware could recover the WiFi password a...
CVE-2026-75558 Botslab G980H Dashcams Use of Hard-coded Cryptographic Key
The Botslab G980H dash camera firmware uses a hard-coded cryptographic key and initialization vector to protect WiFi credentials communicated by the device. An attacker who obtains the protected credential and extracts the cryptographic material from the firmware could recover the WiFi password a...
EUVD-2026-86459
The Botslab G980H dash camera firmware uses a hard-coded cryptographic key and initialization vector to protect WiFi credentials communicated by the device. An attacker who obtains the protected credential and extracts the cryptographic material from the firmware could recover the WiFi password a...
CVE-2026-93290 Use of Hard-coded Credentials in Eufy Omni C20
Omni C20 uses hard-coded credentials that could allow an attacker to monitor log files to obtain credentials to access information like mapping data...
CVE-2026-93290
The Eufy Omni C20 is affected by a vulnerability involving the use of hard-coded credentials . An attacker who is able to monitor the device's log files could obtain these credentials to gain unauthorized access to sensitive information, such as mapping data . No specific remediation or patch ver...