Lucene search
+L

3093 matches found

Vulnrichment
Vulnrichment
added 2025/12/24 7:27 p.m.6 views

CVE-2019-25241 FaceSentry Access Control System 6.4.8 Remote SSH Root Access

FaceSentry Access Control System 6.4.8 contains a critical authentication vulnerability with hard-coded SSH credentials for the wwwuser account. Attackers can leverage the insecure sudoers configuration to escalate privileges and gain root access by executing sudo commands without authentication...

9.8CVSS7.3AI score0.00665EPSS
SaveExploits2References3
Vulnrichment
Vulnrichment
added 2025/12/24 7:27 p.m.4 views

CVE-2018-25147 Microhard Systems IPn4G 1.1.0 Default Credentials Authentication Bypass

Microhard Systems IPn4G 1.1.0 contains hardcoded default credentials that cannot be changed through normal gateway operations. Attackers can exploit these default credentials to gain unauthorized root-level access to the device by logging in with predefined username and password combinations...

9.3CVSS6.9AI score0.0034EPSS
SaveExploits2References3
Cvelist
Cvelist
added 2025/12/24 7:27 p.m.47 views

CVE-2018-25147 Microhard Systems IPn4G 1.1.0 Default Credentials Authentication Bypass

Microhard Systems IPn4G 1.1.0 contains hardcoded default credentials that cannot be changed through normal gateway operations. Attackers can exploit these default credentials to gain unauthorized root-level access to the device by logging in with predefined username and password combinations...

9.3CVSS0.0034EPSS
SaveExploits2References3
Positive Technologies
Positive Technologies
added 2025/12/24 12:0 a.m.15 views

PT-2025-53367

Microhard Systems IPn4G 1.1.0 contains hardcoded default credentials that cannot be changed through normal gateway operations. Attackers can exploit these default credentials to gain unauthorized root-level access to the device by logging in with predefined username and password combinations...

9.3CVSS7.2AI score0.0034EPSS
SaveExploits2References4
EUVD
EUVD
added 2025/12/23 12:30 a.m.7 views

EUVD-2025-204759

An issue was discovered in Xiongmai XM530 IP cameras on firmware V5.00.R02.000807D8.10010.346624.S.ONVIF 21.06. The GetStreamUri exposes RTSP URIs containing hardcoded credentials enabling direct unauthorized video stream access...

7.5CVSS9.4AI score0.0038EPSS
SaveExploits3References4
RedhatCVE
RedhatCVE
added 2025/12/23 12:25 a.m.12 views

CVE-2025-67418

ClipBucket 5.5.2 is affected by an improper access control issue where the product is shipped or deployed with hardcoded default administrative credentials. An unauthenticated remote attacker can log in to the administrative panel using these default credentials, resulting in full administrative...

9.8CVSS7.2AI score0.00444EPSS
SaveExploits1References1
NVD
NVD
added 2025/12/22 10:16 p.m.11 views

CVE-2025-65857

An issue was discovered in Xiongmai XM530 IP cameras on firmware V5.00.R02.000807D8.10010.346624.S.ONVIF 21.06. The GetStreamUri exposes RTSP URIs containing hardcoded credentials enabling direct unauthorized video stream access...

7.5CVSS0.0038EPSS
SaveExploits3References2
OSV
OSV
added 2025/12/22 10:16 p.m.16 views

CVE-2025-65857

An issue was discovered in Xiongmai XM530 IP cameras on firmware V5.00.R02.000807D8.10010.346624.S.ONVIF 21.06. The GetStreamUri exposes RTSP URIs containing hardcoded credentials enabling direct unauthorized video stream access...

7.5CVSS5.8AI score0.0038EPSS
SaveExploits3References3
NVD
NVD
added 2025/12/22 8:15 p.m.8 views

CVE-2025-67418

ClipBucket 5.5.2 is affected by an improper access control issue where the product is shipped or deployed with hardcoded default administrative credentials. An unauthenticated remote attacker can log in to the administrative panel using these default credentials, resulting in full administrative...

9.8CVSS0.00444EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
added 2025/12/22 12:0 a.m.5 views

CVE-2025-65857

An issue was discovered in Xiongmai XM530 IP cameras on firmware V5.00.R02.000807D8.10010.346624.S.ONVIF 21.06. The GetStreamUri exposes RTSP URIs containing hardcoded credentials enabling direct unauthorized video stream access...

9.3AI score0.0038EPSS
SaveExploits3References3
Vulnrichment
Vulnrichment
added 2025/12/22 12:0 a.m.4 views

CVE-2025-67418

ClipBucket 5.5.2 is affected by an improper access control issue where the product is shipped or deployed with hardcoded default administrative credentials. An unauthenticated remote attacker can log in to the administrative panel using these default credentials, resulting in full administrative...

6.8AI score0.00444EPSS
SaveExploits1References2
Cvelist
Cvelist
added 2025/12/22 12:0 a.m.39 views

CVE-2025-67418

ClipBucket 5.5.2 is affected by an improper access control issue where the product is shipped or deployed with hardcoded default administrative credentials. An unauthenticated remote attacker can log in to the administrative panel using these default credentials, resulting in full administrative...

0.00444EPSS
SaveExploits1References1
Cvelist
Cvelist
added 2025/12/22 12:0 a.m.39 views

CVE-2025-65857

An issue was discovered in Xiongmai XM530 IP cameras on firmware V5.00.R02.000807D8.10010.346624.S.ONVIF 21.06. The GetStreamUri exposes RTSP URIs containing hardcoded credentials enabling direct unauthorized video stream access...

0.0038EPSS
SaveExploits3References2
CVE
CVE
added 2025/12/22 12:0 a.m.40 views

CVE-2025-65857

The CVE-2025-65857 affects Xiongmai XM530 IP cameras (firmware V5.00.R02.000807D8.10010.346624.S.ONVIF 21.06). The GetStreamUri ONVIF endpoint exposes RTSP URIs containing hardcoded credentials, enabling direct unauthorized video streaming access. Impact is unauthorized access to live streams; CV...

7.5CVSS9.3AI score0.0038EPSS
SaveExploits3References2Affected Software1
Positive Technologies
Positive Technologies
added 2025/12/22 12:0 a.m.16 views

PT-2025-52680

Name of the Vulnerable Software and Affected Versions ClipBucket version 5.5.2 Description The software is affected by an improper access control issue stemming from hardcoded default administrative credentials. An unauthenticated remote attacker can leverage these credentials to log in to the...

9.8CVSS7AI score0.00444EPSS
SaveExploits1References7
Cvelist
Cvelist
added 2025/12/18 2:16 p.m.41 views

CVE-2025-1029 Hardcoded Credentials in Utarit Informatics' SoliClub

Use of Hard-coded Credentials vulnerability in Utarit Information Services Inc. SoliClub allows Read Sensitive Constants Within an Executable. This issue affects SoliClub: from 5.2.4 before 5.3.7...

7.5CVSS0.00256EPSS
SaveExploits0References2
CVE
CVE
added 2025/12/18 2:16 p.m.18 views

CVE-2025-1029

CVE-2025-1029 concerns Utarit Information Services Inc. SoliClub, where hard-coded credentials permit reading sensitive constants from the executable. Multiple sources (NVD, Red Hat, CVE/CVEList, CNNVD, EUVD, etc.) consistently describe impact for SoliClub versions 5.2.4 through 5.3.7. The vulner...

7.5CVSS5.4AI score0.00256EPSS
SaveExploits0References2Affected Software1
Vulnrichment
Vulnrichment
added 2025/12/18 2:16 p.m.6 views

CVE-2025-1029 Hardcoded Credentials in Utarit Informatics' SoliClub

Use of Hard-coded Credentials vulnerability in Utarit Information Services Inc. SoliClub allows Read Sensitive Constants Within an Executable. This issue affects SoliClub: from 5.2.4 before 5.3.7...

7.5CVSS5.4AI score0.00256EPSS
SaveExploits0References2
Packet Storm
Packet Storm
added 2025/12/18 12:0 a.m.429 views

📄 Xiongmai XM530 IP Camera Hardcoded RTSP Credential Exposure

The GetStreamUri ONVIF endpoint in Xiongmai XM530-series IP cameras exposes RTSP URIs containing hardcoded credentials, enabling direct unauthorized access to live video streams. CVE-2025-65857 Xiongmai XM530 IP Camera Hardcoded RTSP Credentials Exposure --- Summary The GetStreamUri ONVIF endpoin...

10CVSS8.5AI score0.40123EPSS
SaveExploits15
EUVD
EUVD
added 2025/12/15 9:30 p.m.10 views

EUVD-2025-203404

An issue was discovered in Zimbra Collaboration ZCS 10.0 and 10.1. A hardcoded Flickr API key and secret are present in the publicly accessible Flickr Zimlet used by Zimbra Collaboration. Because these credentials are embedded directly in the Zimlet, any unauthorized party could retrieve them and...

4.7CVSS6.5AI score0.00254EPSS
SaveExploits0References4
Rows per page
Query Builder