5440 matches found
CVE-2026-47116
LTSecurity LTK3500SF contains a hard-coded credentials vulnerability where the root and guest account passwords are stored in /etc/shadow as weak hashes recoverable with dictionary-based cracking tools. The recovered credentials authenticate against the device's Telnet and SSH services and grant...
CVE-2026-47116
The LTSecurity LTK3500SF device is vulnerable to a hard-coded credentials flaw where the passwords for the root and guest accounts are stored as reversible hashes within the /etc/shadow file. An attacker can use dictionary-based cracking tools to recover these credentials, subsequently allowing f...
CVE-2026-47116 LTSecurity LTK3500SF Hard-coded Credentials via Telnet/SSH
LTSecurity LTK3500SF contains a hard-coded credentials vulnerability where the root and guest account passwords are stored in /etc/shadow as weak hashes recoverable with dictionary-based cracking tools. The recovered credentials authenticate against the device's Telnet and SSH services and grant...
CVE-2026-47116 LTSecurity LTK3500SF Hard-coded Credentials via Telnet/SSH
LTSecurity LTK3500SF contains a hard-coded credentials vulnerability where the root and guest account passwords are stored in /etc/shadow as weak hashes recoverable with dictionary-based cracking tools. The recovered credentials authenticate against the device's Telnet and SSH services and grant...
EUVD-2026-84683
LTSecurity LTK3500SF contains a hard-coded credentials vulnerability where root and guest account passwords are stored as reversible hashes in /etc/shadow, recoverable using dictionary-based cracking tools. Attackers can use the recovered credentials to authenticate via Telnet or SSH and obtain...
EUVD-2026-84668
A vulnerability exists in the Analytics and Location Engine ALE where the application and underlying operating system use default, hard-coded credentials for several administrative and system accounts. An unauthenticated remote attacker could exploit this vulnerability by attempting to log in usi...
CVE-2026-76708 Unauthenticated Remote Unauthorized Access Vulnerability in HPE Networking Analytics and Location Engine (ALE)
A vulnerability exists in the Analytics and Location Engine ALE where the application and underlying operating system use default, hard-coded credentials for several administrative and system accounts. An unauthenticated remote attacker could exploit this vulnerability by attempting to log in usi...
CVE-2026-76708
A vulnerability exists in the HPE Networking Analytics and Location Engine (ALE) because the application and its underlying operating system utilize default, hard-coded credentials for multiple administrative and system accounts. An unauthenticated remote attacker can exploit this by logging in w...
CVE-2022-42176
PCSecure V5.0.8.xw - El uso de credenciales codificadas en archivos de configuración permite el acceso al panel de administración Resumen Proveedor: PCTechSoft SAS Producto: PCSecure Versiónes afectadas: 5.0.8.xw Nombre clave: PapiQuieroPollo00 Vulnerabilidad Tipo: Uso de credenciales codificadas...
CVE-2026-65113
NVIDIA Infrastructure Controller for Linux contains a vulnerability where an attacker could cause use of hard-coded credentials. A successful exploit of this vulnerability might lead to escalation of privileges, data tampering, denial of service, and information disclosure...
CVE-2026-65113
NVIDIA Infrastructure Controller for Linux contains a vulnerability (CWE-798) that allows an attacker to trigger the use of hard-coded credentials . Successful exploitation may result in escalation of privileges , data tampering , denial of service , and information disclosure . This issue affect...
EUVD-2026-84417
NVIDIA Infrastructure Controller for Linux contains a vulnerability where an attacker could cause use of hard-coded credentials. A successful exploit of this vulnerability might lead to escalation of privileges, data tampering, denial of service, and information disclosure...
CVE-2026-47116: Use of Hard-coded Credentials
LTSecurity LTK3500SF contains a hard-coded credentials vulnerability where the root and guest account passwords are stored in /etc/shadow as weak hashes recoverable with dictionary-based cracking tools. The recovered credentials authenticate against the device's Telnet and SSH services and grant...
CVE-2026-76708: Use of Hard-coded Credentials
A vulnerability exists in the Analytics and Location Engine ALE where the application and underlying operating system use default, hard-coded credentials for several administrative and system accounts. An unauthenticated remote attacker could exploit this vulnerability by attempting to log in usi...
CVE-2026-65113: Use of Hard-coded Credentials
NVIDIA Infrastructure Controller for Linux contains a vulnerability where an attacker could cause use of hard-coded credentials. A successful exploit of this vulnerability might lead to escalation of privileges, data tampering, denial of service, and information disclosure...
CVE-2025-70962
CVE-2025-70962 Uso de credenciales codificadas en el servicio RTSP de la cámara IP ZOSI C519M Campo| Valor ---|--- ID CVE| CVE-2025-70962 Fabricante| ZOSI Technology Producto| Cámara IP inteligente ZOSI C519M también listada como modelo 1NC-519M Versiones afectadas| Firmware V4.2.8.832C01450BA...
CVE-2026-93970
A security flaw has been discovered in aiyiyi121 SxDevOps 1.0/1.1. This issue affects some unknown processing of the file backend/sxdevops/settings.py of the component Settings Handler. The manipulation results in hard-coded credentials. The attack may be performed from remote. The patch is...
CVE-2026-93969
A vulnerability was identified in aiyiyi121 SxDevOps 1.0/1.1. This vulnerability affects the function ensuredefaultsuperuser of the file rbac/services.py. The manipulation leads to hard-coded credentials. The attack is possible to be carried out remotely. The identifier of the patch is...
CVE-2026-93970 aiyiyi121 SxDevOps Settings settings.py hard-coded credentials
A security flaw has been discovered in aiyiyi121 SxDevOps 1.0/1.1. This issue affects some unknown processing of the file backend/sxdevops/settings.py of the component Settings Handler. The manipulation results in hard-coded credentials. The attack may be performed from remote. The patch is...
CVE-2026-93970
aiyiyi121 SxDevOps (versions 1.0/1.1) contains a hard-coded credentials vulnerability in the file backend/sxdevops/settings.py within the Settings Handler component. The flaw is exploitable remotely over the network with no required privileges or user interaction, rated CVSS 3.1: 7.3 (HIGH) with ...