Lucene search
+L

5625 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/03/16 12:00 a.m.•4 views

CVE-2026-4216: Use of Hard-coded Credentials

A weakness has been identified in i-SENS SmartLog App up to 2.6.8 on Android. This affects an unknown function of the component air.SmartLog.android. This manipulation causes hard-coded credentials. The attack can only be executed locally. The exploit has been made available to the public and cou...

5.3CVSS5.2AI score0.00145EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/03/15 12:00 a.m.•2 views

CVE-2016-20031: Use of Hard-coded Credentials

ZKTeco ZKBioSecurity 3.0 contains a local authorization bypass vulnerability in visLogin.jsp that allows attackers to authenticate without valid credentials by spoofing localhost requests. Attackers can exploit the EnvironmentUtil.getClientIp method which treats IPv6 loopback address...

6.8CVSS5.8AI score0.00149EPSS
SaveExploits1References2
GithubExploit
GithubExploit
•added 2026/03/14 1:36 p.m.•170 views

Exploit for Use of Hard-coded Credentials in Rustfs

CVE-2025-689...

9.8CVSS8.3AI score0.3185EPSS
SaveExploits3
EUVD
EUVD
•added 2026/03/13 9:31 p.m.•23 views

EUVD-2026-11768

Use of Hard-coded Credentials vulnerability in Avnatra Avantra allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Avantra: before 25.3.0...

7.2CVSS5.8AI score0.00266EPSS
SaveExploits0References2
NVD
NVD
•added 2026/03/13 7:55 p.m.•20 views

CVE-2026-3873

Use of Hard-coded Credentials vulnerability in Avantra allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects Avantra: before 25.3.0...

7.2CVSS0.00266EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/03/13 8:14 a.m.•8 views

CVE-2026-3873 Legacy built-in user account

Use of Hard-coded Credentials vulnerability in Avantra allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects Avantra: before 25.3.0...

7.2CVSS5.8AI score0.00266EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2026/03/13 8:14 a.m.•6 views

CVE-2026-3873

Use of Hard-coded Credentials vulnerability in Avantra allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects Avantra: before 25.3.0...

7.2CVSS5.8AI score0.00266EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2026/03/13 8:14 a.m.•42 views

CVE-2026-3873 Legacy built-in user account

Use of Hard-coded Credentials vulnerability in Avantra allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects Avantra: before 25.3.0...

7.2CVSS0.00266EPSS
SaveExploits0References1
CVE
CVE
•added 2026/03/13 8:14 a.m.•31 views

CVE-2026-3873

CVE-2026-3873 affects Avantra’s legacy built-in user account. The vulnerability arises from use of hard-coded credentials in Avantra systems and allows accessing functionality not properly constrained by ACLs in versions before 25.3.0. According to the provided metrics, the issue has CVSS 3.1 bas...

7.2CVSS5.8AI score0.00266EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/03/13 12:00 a.m.•1 views

CVE-2026-3873: Use of Hard-coded Credentials

Use of Hard-coded Credentials vulnerability in Avantra allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects Avantra: before 25.3.0...

7.2CVSS5.8AI score0.00266EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/03/13 12:00 a.m.•31 views

PT-2026-25160

Name of the Vulnerable Software and Affected Versions Avantra versions prior to 25.3.0 Description A hard-coded credentials issue exists in Avantra, allowing access to functionality not properly constrained by Access Control Lists ACLs. This could potentially allow unauthorized access to sensitiv...

7.2CVSS5.7AI score0.00266EPSS
SaveExploits0References8
EUVD
EUVD
•added 2026/03/12 6:30 p.m.•17 views

EUVD-2026-11635

A Use of Hard-coded Credentials vulnerability in Trane Tracer SC, Tracer SC+, and Tracer Concierge could allow an attacker to disclose sensitive information and take over accounts...

8.2CVSS5.7AI score0.00478EPSS
SaveExploits0References2
NVD
NVD
•added 2026/03/12 6:16 p.m.•13 views

CVE-2026-28255

A Use of Hard-coded Credentials vulnerability in Trane Tracer SC, Tracer SC+, and Tracer Concierge could allow an attacker to disclose sensitive information and take over accounts...

9.8CVSS0.00478EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/03/12 5:34 p.m.•41 views

CVE-2026-28256 Use of Hard-coded Credentials vulnerability in Trane Tracer SC, Tracer SC+, and Tracer Concierge

A Use of Hard-coded, Security-relevant Constants vulnerability in Trane Tracer SC, Tracer SC+, and Tracer Concierge could allow an attacker to disclose sensitive information and take over accounts...

6.9CVSS0.00442EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/03/12 5:34 p.m.•7 views

CVE-2026-28256 Use of Hard-coded Credentials vulnerability in Trane Tracer SC, Tracer SC+, and Tracer Concierge

A Use of Hard-coded, Security-relevant Constants vulnerability in Trane Tracer SC, Tracer SC+, and Tracer Concierge could allow an attacker to disclose sensitive information and take over accounts...

6.9CVSS5.8AI score0.00442EPSS
SaveExploits0References1
CVE
CVE
•added 2026/03/12 5:34 p.m.•37 views

CVE-2026-28256

A CVE-2026-28256 entry describes a Use of Hard-coded, Security-relevant Constants vulnerability in Trane Tracer SC, Tracer SC+, and Tracer Concierge. Affected components are Trane Tracer SC and related products; root cause is hard-coded security constants that could enable an attacker to disclose...

9.8CVSS5.8AI score0.00442EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
•added 2026/03/12 5:33 p.m.•5 views

CVE-2026-28255 Use of Hard-coded Credentials vulnerability in Trane Tracer SC, Tracer SC+, and Tracer Concierge

A Use of Hard-coded Credentials vulnerability in Trane Tracer SC, Tracer SC+, and Tracer Concierge could allow an attacker to disclose sensitive information and take over accounts...

8.2CVSS5.8AI score0.00478EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2026/03/12 5:33 p.m.•7 views

CVE-2026-28255

A Use of Hard-coded Credentials vulnerability in Trane Tracer SC, Tracer SC+, and Tracer Concierge could allow an attacker to disclose sensitive information and take over accounts...

8.2CVSS5.7AI score0.00478EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2026/03/12 5:33 p.m.•40 views

CVE-2026-28255 Use of Hard-coded Credentials vulnerability in Trane Tracer SC, Tracer SC+, and Tracer Concierge

A Use of Hard-coded Credentials vulnerability in Trane Tracer SC, Tracer SC+, and Tracer Concierge could allow an attacker to disclose sensitive information and take over accounts...

8.2CVSS0.00478EPSS
SaveExploits0References1
CVE
CVE
•added 2026/03/12 5:33 p.m.•37 views

CVE-2026-28255

CVE-2026-28255 affects Trane Tracer SC, Tracer SC+, and Tracer Concierge. A Use of Hard-Coded Credentials vulnerability could allow an attacker to disclose sensitive information and take over accounts. The connected documents consistently identify the issue as hard-coded credentials without provi...

9.8CVSS5.8AI score0.00478EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder