CVE-2026-13714

Realtyna WPL 5.3.0 - استغلال RCE بدون مصادقة الوصف يستهدف هذا الاستغلال ثغرة أمنية حرجة في إصدارات إضافة Realtyna Organic IDX + WPL Real Estate الأقدم من 5.3.0. تستخدم الإضافة بيانات اعتماد مضمّنة hardcoded وتسمح برفع ملفات بدون مصادقة، مما يؤدي إلى تنفيذ التعليمات البرمجية عن بُعد RCE. تفاصيل...

PT-2026-106364

This vulnerability exists in the Schmooze app due to the use of hardcoded credentials and cryptographic keys in the client application. An unauthenticated remote attacker could exploit this vulnerability by decompiling the distributed application package and extracting the embedded credentials an...

HPE-Aruba-AOS8-Vulnerabilities

⚠️ حالة الإفصاح: جميع النتائج في هذا المستودع قُدِّمت إلى برنامج مكافآت الثغرات HPE Networking Bug Bounty Bugcrowd بين مايو–يونيو 2026. أُغلقت خمسة من ستة تقديمات بوصفها "غير قابلة للتطبيق" على مستوى الفرز دون مطابقة تقنية للأدلة المقدمة. لم تصدر أي إصلاحات حتى يونيو 2026. مصادر الشرح الكامل...

CVE-2020-17456

Description On August 21, 2020, seown SLC 130 router was exposed to have an authentication rce vulnerability. The vulnerability number is cve-2020-17456. The vulnerability is due to the ping command injection in the router's Web service diagnosis function. Combined with several groups of hard cod...

aigate

aigate Secret hygiene for AI-generated code. Catches hardcoded credentials in prompts, tool inputs, generated code, and existing files. Quick start pip install aigate && aigate setup-all That's it. This installs a background proxy redact mode, a PostToolUse hook for file scanning, and registers t...

CVE-2024-0368

CVE-2024-0368 Hustle Plugin = 7.8.3 contains hardcoded HubSpot API credentials in inc/providers/hubspot/hustle-hubspot-api.php Vulnerability Summary Field| Value ---|--- CVE ID| CVE-2024-0368 Title| Hustle = 7.8.3 - Sensitive Information Exposure via Exposed HubSpot API Keys CVSS Score| 8.6 High...

CVE-2018-14324-Exploit

Eclipse GlassFish हैकिंग - CVE-2018-14324 CVE-2018-14324 का विवरण इस कमजोरी के प्रभाव को पूरी तरह से स्पष्ट नहीं करता है। संक्षेप में, आपके पास हार्डकोडेड एडमिन:एडमिन क्रेडेंशियल्स के माध्यम से जावा मैनेजमेंट एक्सटेंशन JMX तक पहुंच है। जबकि प्रभाव को "संभावित रूप से संवेदनशील जानकारी, डेटाबेस...

cve-2026-19900-PoC

CVE-2026-19900 LB-LINK X-PRO تجاوز المصادقة وتنفيذ الأوامر عن بُعد عبر مستخدم فارغ CVE-2026-19900 بيانات اعتماد ثابتة وتجاوز المصادقة وتنفيذ أوامر عن بُعد عبر مستخدم فارغ. التجاوز عبر الترويسة: Cookie:user=null الاستخدام قم ببناء وتشغيل السكربت مع استهداف مضيف: go build cve-2026-19900-PoC.go...

CVE-2026-103097: Use of Hard-coded Credentials

An API key is hardcoded and retrievable from the application package. Since Android applications can be reverse engineered, embedding sensitive API credentials directly in the client application may allow unauthorized users to extract and misuse the key...

MAL-2026-17323 Malicious code in cortana-md-engine (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a2de4b6992a1dd7177803253b8c214d1ba7cc911cf0e1e7f800e1e9ff7ab5b1 cortana-md-engine is a Baileys-based WhatsApp bot whose bundled entrypoints dist/hosted.cjs and dist/index.cjs hardcode five...

CVE-2026-100294

In Anjvision YSSD‑RTMP‑H5 firmware version 3.3.2.4, the firmware embeds hardcoded cloud‑API credentials that are shared across deployed devices. Anyone obtaining the public firmware package can reuse these values to interact with the cloud service in ways not intended for normal operation...

EUVD-2026-89369

In Anjvision YSSD‑RTMP‑H5 firmware version 3.3.2.4, the firmware embeds hardcoded cloud‑API credentials that are shared across deployed devices. Anyone obtaining the public firmware package can reuse these values to interact with the cloud service in ways not intended for normal operation...

PT-2026-102827

In Anjvision YSSD‑RTMP‑H5 firmware version 3.3.2.4, the firmware embeds hardcoded cloud‑API credentials that are shared across deployed devices. Anyone obtaining the public firmware package can reuse these values to interact with the cloud service in ways not intended for normal operation...

CVE-2026-92928: Use of Hard-coded Credentials

OpenEye Apex Network Video Recorder NVR firmware 3.2.9.376 contains a hardcoded, undocumented recovery account with a shared credential that cannot be changed, disabled, or rotated. An unauthenticated remote attacker can use the account to authenticate to the password-reset workflow. The account...

CVE-2026-86555: Use of Hard-coded Credentials

The ZTE SmartLife application has a hardcoded key. The key used to decrypt account server information is stored in plaintext in the code. Once the key is obtained, the server information can be decrypted, thus exposing it...

CVE-2026-84034

IBM Guardium Data Protection 12.2 is vulnerable to a hardcoded credentials vulnerability in the hardwareassess/obstore binaries. A low-privileged authenticated user can recover hardcoded product master secrets, potentially resulting in unauthorized access to the internal database and compromise o...

CVE-2026-84034 IBM Guardium Data Protection is affected by multiple vulnerabilities.

IBM Guardium Data Protection 12.2 is vulnerable to a hardcoded credentials vulnerability in the hardwareassess/obstore binaries. A low-privileged authenticated user can recover hardcoded product master secrets, potentially resulting in unauthorized access to the internal database and compromise o...

CVE-2026-84034 IBM Guardium Data Protection is affected by multiple vulnerabilities.

IBM Guardium Data Protection 12.2 is vulnerable to a hardcoded credentials vulnerability in the hardwareassess/obstore binaries. A low-privileged authenticated user can recover hardcoded product master secrets, potentially resulting in unauthorized access to the internal database and compromise o...

EUVD-2026-83416

IBM Guardium Data Protection 12.2 is vulnerable to a hardcoded credentials vulnerability in the hardwareassess/obstore binaries. A low-privileged authenticated user can recover hardcoded product master secrets, potentially resulting in unauthorized access to the internal database and compromise o...

CVE-2026-84034

IBM Guardium Data Protection 12.2 is affected by a hardcoded credentials vulnerability (CWE-798) in the hardware_assess/obstore binaries. A low-privileged authenticated user can recover hardcoded product master secrets, potentially gaining unauthorized access to the internal database and compromi...