CVE-2026-94591 Armatura LLC Armatura One Use of Hard-coded Cryptographic Key

Armatura One stores database and message-broker credentials in an install configuration file, encrypting them with AES-128-CBC when this protection is enabled. The encryption key and initialization vector are fixed values embedded in the software itself and are identical across every installation...

CVE-2026-94592 Armatura LLC Armatura One Use of Hard-coded Credentials

Armatura One's database initialization routine assigns a fixed, vendor-defined password to the database superuser account at creation time, rather than generating a unique password per installation. An individual with access to the server operating system and knowledge of this value can...

My-Exploits

My-Exploits This repo is all about my-self coded exploit codes :...

Gladinet CentreStack < 16.4.10315.56368 Use of Hard-coded Key Leads to Unauthenticated RCE

Gladinet CentreStack through 16.1.10296.56315 fixed in 16.4.10315.56368 has a deserialization vulnerability due to the CentreStack portal's hardcoded machineKey use, as exploited in the wild in March 2025. This enables threat actors who know the machineKey to serialize a payload for server-side...

EUVD-2026-91069

: Use of Hard-coded Cryptographic Key vulnerability in Johnson Controls EasyIO FS32 allows : Retrieve Embedded Sensitive Data. This issue affects EasyIO FS32: before 3.0b63...

EUVD-2026-91075

Use of Hard-coded Credentials vulnerability in Johnson Controls EasyIO FG allows - Pasword Spraying. This issue affects EasyIO FG: before 2.0b52...

CVE-2026-71449

: Use of Hard-coded Cryptographic Key vulnerability in Johnson Controls EasyIO FS32 allows : Retrieve Embedded Sensitive Data. This issue affects EasyIO FS32: before 3.0b63...

CVE-2026-27873

Use of Hard-coded Credentials vulnerability in Johnson Controls EasyIO FG allows - Pasword Spraying. This issue affects EasyIO FG: before 2.0b52...

CVE-2026-27873

Use of Hard-coded Credentials vulnerability in Johnson Controls EasyIO FG allows - Pasword Spraying. This issue affects EasyIO FG: before 2.0b52...

CVE-2026-27873

Johnson Controls EasyIO FG is vulnerable to a Use of Hard-coded Credentials vulnerability (CWE-798) in versions before 2.0b52 . This flaw allows for password spraying attacks. No specific exploit details or remediation steps are provided in the documents.

CVE-2026-27873

Use of Hard-coded Credentials vulnerability in Johnson Controls EasyIO FG allows - Pasword Spraying. This issue affects EasyIO FG: before 2.0b52...

CVE-2026-27874

: Use of Hard-coded Credentials vulnerability in Johnson Controls EasyIO FS32 allows : Exploitation of Default or Hard-coded Credentials. This issue affects EasyIO FS32: before 3.0b63...

CVE-2026-71449

The Johnson Controls EasyIO FS32 software contains a Use of Hard-coded Cryptographic Key vulnerability (CWE-321) affecting versions prior to 3.0b63 . The flaw stems from the use of a fixed secret key for encryption or decryption processes, which enables an attacker to retrieve embedded sensitive ...

CVE-2026-71449

: Use of Hard-coded Cryptographic Key vulnerability in Johnson Controls EasyIO FS32 allows : Retrieve Embedded Sensitive Data. This issue affects EasyIO FS32: before 3.0b63...

CVE-2026-71449

: Use of Hard-coded Cryptographic Key vulnerability in Johnson Controls EasyIO FS32 allows : Retrieve Embedded Sensitive Data. This issue affects EasyIO FS32: before 3.0b63...

CVE-2026-27874

: Use of Hard-coded Credentials vulnerability in Johnson Controls EasyIO FS32 allows : Exploitation of Default or Hard-coded Credentials. This issue affects EasyIO FS32: before 3.0b63...

EUVD-2026-91061

: Use of Hard-coded Credentials vulnerability in Johnson Controls EasyIO FS32 allows : Exploitation of Default or Hard-coded Credentials. This issue affects EasyIO FS32: before 3.0b63...

CVE-2026-27874

The Johnson Controls EasyIO FS32 software is affected by a Use of Hard-coded Credentials vulnerability (CWE-798) in versions prior to 3.0b63 . An attacker can exploit these hard-coded or default credentials to gain unauthorized access to the system. To remediate this issue, users should update Ea...

CVE-2026-27874

: Use of Hard-coded Credentials vulnerability in Johnson Controls EasyIO FS32 allows : Exploitation of Default or Hard-coded Credentials. This issue affects EasyIO FS32: before 3.0b63...

SecretScrub

SecretScrub SecretScrubは、ハードコードされた汚れたシークレットをすべて洗い流します。このスクリプトは、さまざまな静的解析ツールによって生成されるSARIFファイル形式のファイルを処理します。このツールはファイルシステム内のディレクトリをスキャンし、SARIFファイル内で検出されたすべてのシークレットインスタンスを秘匿化して、ディレクトリの新しいコピーに反映します。シークレットはGit履歴に存在することが多いため、生成されるコピーからは .git ディレクトリが除外されます。...