15 matches found
CVE-2026-68503: Use of Default Credentials
LazyOwn RedTeam/APT Framework is an AI-powered C2 and red-team operations framework. Prior to 0.2.154, LazyOwn ships default C2 credentials LazyOwn and LazyOwn in payload.json and core/payloadschema.py and passes them unchanged to lazyc2.py HTTP Basic authentication, allowing any network-reachabl...
CVE-2026-41939: Use of Default Credentials
Care Everywhere Gateway 14.3.10 contains a hard-coded credentials vulnerability in the bundled WildFly 8.2.0.Final management interface that allows unauthenticated remote attackers to gain administrative access by using default credentials identical across all installations. Attackers can...
CVE-2026-44761: Use of Default Credentials
SAP Commerce Cloud could retain a sample OAuth2 client with publicly documented sample credentials originating from sample configuration provided in SAP Help Portal documentation. If left unchanged, an unauthenticated attacker could use these well-known credentials to obtain a valid access token...
CVE-2026-44273: Use of Default Credentials
Dell Wyse Management Suite WMS, versions prior to WMS 2605, contain a Use of Default Credentials vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Information Disclosure...
CVE-2026-22273: Use of Default Credentials
Dell ECS, versions 3.8.1.0 through 3.8.1.7, and Dell ObjectScale versions prior to 4.2.0.0, contains an Use of Default Credentials vulnerability in the OS. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges...
CVE-2025-1711: Use of Default Credentials
Multiple services of the DUT as well as different scopes of the same service reuse the same credentials...
CVE-2024-40113
Sitecom WLX-2006 Wall Mount Range Extender N300 v.1.5 and before is vulnerable to Use of Default Credentials...
CVE-2024-40113: Use of Default Credentials
Sitecom WLX-2006 Wall Mount Range Extender N300 v.1.5 and before is vulnerable to Use of Default Credentials...
CVE-2024-54015: Use of Default Credentials
A vulnerability has been identified in SIPROTEC 5 6MD84 CP300 All versions = V8.80 = V8.80 = V8.80 = V8.80 = V8.80 = V8.80 = V8.80 = V8.80 = V8.80 = V8.80 = V8.80 = V8.80 = V8.80 = V8.80 = V8.80 = V8.80 V10.0, SIPROTEC 5 7ST85 CP300 V9.6x All versions V9.68, SIPROTEC 5 7ST86 CP300 All versions...
CVE-2025-0482: Use of Default Credentials
A vulnerability, which was classified as critical, was found in Fanli2012 native-php-cms 1.0. This affects an unknown part of the file /fladmin/userrecoverpwd.php. The manipulation leads to use of default credentials. It is possible to initiate the attack remotely. The exploit has been disclosed ...
CVE-2024-10476: Use of Default Credentials
Default credentials are used in the above listed BD Diagnostic Solutions products. If exploited, threat actors may be able to access, modify or delete data, including sensitive information such as protected health information PHI and personally identifiable information PII. Exploitation of this...
CVE-2024-39747: Use of Default Credentials
IBM Sterling Connect:Direct Web Services 6.0, 6.1, 6.2, and 6.3 uses default credentials for potentially critical functionality...
CVE-2024-27158: Use of Default Credentials
All the Toshiba printers share the same hardcoded root password. As for the affected products/models/versions, see the reference URL...
EnBw SENEC Legacy Storage Box Default Credentials
Advisory ID: Ph0s-2023-004 Product: EnBw - SENEC legacy storage box: V1-V3 Manufacturer: SENEC - a part of EnBw Affected Versions: Firmware: all as of 2023-06-19 Tested Versions: current Vulnerability Type: CWE-1392: Use of Default Credentials Risk Level: CVSS v3.1 Vector:...