CVE-2020-17456

説明 2020年8月21日、seown SLC 130 ルーターに認証RCE脆弱性があることが明らかになりました。脆弱性番号はcve-2020-17456です。この脆弱性は、ルーターのWebサービスの診断機能におけるpingコマンドインジェクションに起因します。複数のハードコードされた認証情報と組み合わせることで、認証されていない攻撃者が認証をバイパスし、ルート権限でターゲットデバイス上で任意のコマンドを実行できます。 使用方法 python CVE-2020-17456.py http://192.168.1.1 id 例: その他...

CVE-2024-0368

CVE-2024-0368 Hustle Plugin = 7.8.3 は、inc/providers/hubspot/hustle-hubspot-api.php にハードコードされたHubSpot API認証情報を含んでいます 脆弱性の概要 フィールド| 値 ---|--- CVE ID| CVE-2024-0368 タイトル| Hustle = 7.8.3 - 露出したHubSpot APIキーによる機密情報の露出 CVSSスコア| 8.6 高 影響を受けるプラグイン| Hustle - メールマーケティング、リード生成、オプトイン、ポップアップ wordpress-popup...

CVE-2018-14324-Exploit

Eclipse GlassFishのハッキング - CVE-2018-14324 CVE-2018-14324の説明では、この脆弱性の影響を完全には説明していません。要約すると、ハードコードされたadmin:adminの認証情報を介してJava Management Extensions JMXにアクセスできるようになります。 影響として「潜在的に機密情報、データベース操作の実行、またはJMX RMIセッションを介したデモの操作」と記載されていますが、JMX RMIセッションを介した操作が何を意味するのかは説明されていません。...

CVE-2026-92928: Use of Hard-coded Credentials

OpenEye Apex Network Video Recorder NVR firmware 3.2.9.376 contains a hardcoded, undocumented recovery account with a shared credential that cannot be changed, disabled, or rotated. An unauthenticated remote attacker can use the account to authenticate to the password-reset workflow. The account...

CVE-2026-86555: Use of Hard-coded Credentials

The ZTE SmartLife application has a hardcoded key. The key used to decrypt account server information is stored in plaintext in the code. Once the key is obtained, the server information can be decrypted, thus exposing it...

CVE-2026-84034

IBM Guardium Data Protection 12.2 is vulnerable to a hardcoded credentials vulnerability in the hardwareassess/obstore binaries. A low-privileged authenticated user can recover hardcoded product master secrets, potentially resulting in unauthorized access to the internal database and compromise o...

EUVD-2026-83416

IBM Guardium Data Protection 12.2 is vulnerable to a hardcoded credentials vulnerability in the hardwareassess/obstore binaries. A low-privileged authenticated user can recover hardcoded product master secrets, potentially resulting in unauthorized access to the internal database and compromise o...

CVE-2026-84034 IBM Guardium Data Protection is affected by multiple vulnerabilities.

IBM Guardium Data Protection 12.2 is vulnerable to a hardcoded credentials vulnerability in the hardwareassess/obstore binaries. A low-privileged authenticated user can recover hardcoded product master secrets, potentially resulting in unauthorized access to the internal database and compromise o...

CVE-2026-84034 IBM Guardium Data Protection is affected by multiple vulnerabilities.

IBM Guardium Data Protection 12.2 is vulnerable to a hardcoded credentials vulnerability in the hardwareassess/obstore binaries. A low-privileged authenticated user can recover hardcoded product master secrets, potentially resulting in unauthorized access to the internal database and compromise o...

CVE-2026-84034

IBM Guardium Data Protection 12.2 is affected by a hardcoded credentials vulnerability (CWE-798) in the hardware_assess/obstore binaries. A low-privileged authenticated user can recover hardcoded product master secrets, potentially gaining unauthorized access to the internal database and compromi...

CVE-2026-86689

Bransys ELD is shipped with hardcoded MQTT credentials, which will grant read access to real-time data for every active device across a subset of carriers that were connected to the affected MQTT broker...

CVE-2026-86520

Bransys ELD is shipped with hardcoded MQTT credentials, which will grant read access to real-time data for every active device across a subset of carriers that were connected to the affected MQTT broker...

CVE-2026-77960

Bransys ELD is shipped with hardcoded MQTT credentials, which will grant read access to real-time data for every active device across a subset of carriers that were connected to the affected MQTT broker...

EUVD-2026-83139

Bransys ELD is shipped with hardcoded MQTT credentials, which will grant read access to real-time data for every active device across a subset of carriers that were connected to the affected MQTT broker...

CVE-2026-77960 Use of Hard-coded Credentials in Bransys ELD

Bransys ELD is shipped with hardcoded MQTT credentials, which will grant read access to real-time data for every active device across a subset of carriers that were connected to the affected MQTT broker...

EUVD-2026-83133

Bransys ELD is shipped with hardcoded MQTT credentials, which will grant read access to real-time data for every active device across a subset of carriers that were connected to the affected MQTT broker...

CVE-2026-86520 Use of Hard-coded Credentials in Bransys ELD

Bransys ELD is shipped with hardcoded MQTT credentials, which will grant read access to real-time data for every active device across a subset of carriers that were connected to the affected MQTT broker...

CVE-2026-86520

Bransys ELD ships with hardcoded MQTT credentials that grant unauthenticated read access to real-time data for every active device across a subset of carriers connected to the affected MQTT broker. The flaw is rated HIGH with a CVSS 3.1 base score of 7.5 and a CVSS 4.0 score of 8.7, reflecting ne...

CVE-2026-84034: Use of Hard-coded Credentials

IBM Guardium Data Protection 12.2 is vulnerable to a hardcoded credentials vulnerability in the hardwareassess/obstore binaries. A low-privileged authenticated user can recover hardcoded product master secrets, potentially resulting in unauthorized access to the internal database and compromise o...

CVE-2026-79396

Use of hardcoded default credentials in Xiongmai IP Camera XM530 firmware HMT.CM2005-v220608.1837 and earlier stores static account credentials in unencrypted plaintext within bin/config.xml and compiled into the Sofia executable, allowing remote attackers to gain full administrative control over...