CVE-2024-8005 demozx gf_cms JWT Authentication auth.go init hard-coded credentials

A vulnerability was found in demozx gfcms 1.0/1.0.1. It has been classified as critical. This affects the function init of the file internal/logic/auth/auth.go of the component JWT Authentication. The manipulation leads to hard-coded credentials. It is possible to initiate the attack remotely. Th...

CVE-2024-8005 demozx gf_cms JWT Authentication auth.go init hard-coded credentials

A vulnerability was found in demozx gfcms 1.0/1.0.1. It has been classified as critical. This affects the function init of the file internal/logic/auth/auth.go of the component JWT Authentication. The manipulation leads to hard-coded credentials. It is possible to initiate the attack remotely. Th...

CVE-2024-8005

A vulnerability was found in demozx gfcms 1.0/1.0.1. It has been classified as critical. This affects the function init of the file internal/logic/auth/auth.go of the component JWT Authentication. The manipulation leads to hard-coded credentials. It is possible to initiate the attack remotely. Th...

PT-2024-19302 · Apache · Apache Helix Front

Name of the Vulnerable Software and Affected Versions: Apache Helix Front UI versions all Description: The Apache Helix Front UI component contained a hard-coded secret, allowing an attacker to spoof sessions by generating their own fake cookies. This issue affects products that are no longer...

gf_cms Trust management issue vulnerabilities

gfcms is a GoFrameV2 based web content management system by demozx individual developer. A trust management issue vulnerability exists in gfcms version 1.0 and 1.0.1, which stems from an issue with the use of hard-coded credentials in the internal/logic/auth/auth.go page of the JWT Authentication...

CVE-2024-22281: Exposure of Resource to Wrong Sphere

UNSUPPORTED WHEN ASSIGNED The Apache Helix Front UI component contained a hard-coded secret, allowing an attacker to spoof sessions by generating their own fake cookies. This issue affects Apache Helix Front UI: all versions. As this project is retired, we do not plan to release a version that...

PT-2024-38749 · Unknown · Demozx Gf Cms

Name of the Vulnerable Software and Affected Versions: demozx gf cms versions 1.0 through 1.0.1 Description: A critical issue has been found in the JWT Authentication component, specifically affecting the init function of the file internal/logic/auth/auth.go. This allows for the manipulation of...

CVE-2024-8005: Use of Hard-coded Credentials

A vulnerability was found in demozx gfcms 1.0/1.0.1. It has been classified as critical. This affects the function init of the file internal/logic/auth/auth.go of the component JWT Authentication. The manipulation leads to hard-coded credentials. It is possible to initiate the attack remotely. Th...

H3C GR1100-P security vulnerabilities

The H3C GR1100-P is a high-performance enterprise router from China's Xinhua San H3C. A security vulnerability exists in the H3C GR1100-P v100R009 version, which stems from a hard-coded password vulnerability in /etc/shadow that allows an attacker to log in as root...

H3C R3010 security vulnerabilities

The H3C R3010 is a wireless router from China's Xinhua San H3C. A security vulnerability exists in the H3C R3010 v100R002L02 version, which stems from a hard-coded password vulnerability in /etc/shadow that allows an attacker to log in as root...

CVE-2024-42638: Use of Hard-coded Credentials

H3C Magic B1ST v100R012 was discovered to contain a hardcoded password vulnerability in /etc/shadow, which allows attackers to log in as root...

H3C Magic B1ST security vulnerabilities

The H3C Magic B1ST is a series of wireless routers from China's Xinhua San H3C. A security vulnerability exists in the H3C Magic B1ST v100R012 version, which stems from a hard-coded password vulnerability in /etc/shadow that allows an attacker to log in as root...

GNCC GC2 security vulnerabilities

The GNCC GC2 is an indoor security camera from GNCC. A security vulnerability exists in the GNCC GC2 that stems from the use of the same hard-coded password as other similar devices...

CVE-2024-31798: Use of Hard-coded Credentials

Identical Hardcoded Root Password for All Devices in GNCC's GC2 Indoor Security Camera 1080P allows an attacker with physical access to retrieve the root password for all similar devices...

Exploit for Use of Hard-coded Password in Zkteco Zkbio_Cvsecurity

ZKT-Eco-Bio-CVSecurity This rep...

AMD Graphics Driver security vulnerabilities

AMD Graphics Driver is an integrated graphics driver from UltraMicroelectronics AMD. A security vulnerability exists in AMD Graphics Driver, which stems from a hard-coded AES key that could cause a privileged attacker to gain access to the key, leading to the disclosure of internal debugging...

CVE-2023-20512: Use of Hard-coded Credentials

A hardcoded AES key in PMFW may result in a privileged attacker gaining access to the key, potentially resulting in internal debug information leakage...

Voltronic Power ViewPower Elevation of Privilege Vulnerability

Voltronic Power ViewPower is Voltronic Power's monitoring and management software for solar inverters. An elevation of privilege vulnerability exists in Voltronic Power ViewPower Pro due to hard-coded database credentials. An attacker can exploit the vulnerability to escalate privileges and execu...

CVE-2024-41161

Use of hard-coded credentials vulnerability affecting Vonets industrial wifi bridge relays and wifi bridge repeaters, software versions 3.3.23.6.9 and prior, enables an unauthenticated remote attacker to bypass authentication using hard-coded administrator credentials. These accounts cannot be...

CVE-2024-41161

Use of hard-coded credentials vulnerability affecting Vonets industrial wifi bridge relays and wifi bridge repeaters, software versions 3.3.23.6.9 and prior, enables an unauthenticated remote attacker to bypass authentication using hard-coded administrator credentials. These accounts cannot be...