D-Link D-View security vulnerability

D-Link D-View is a web-based design network device management software from China's Terasic D-Link. A security vulnerability exists in D-Link D-View, which originates from InstallApplication's use of hard-coded credentials authentication bypass vulnerability...

Triangle MicroWorks SCADA Data Gateway security vulnerability

Triangle MicroWorks SCADA Data Gateway is a SCADA data gateway product from Triangle MicroWorks, Inc. A hard-coded authentication bypass vulnerability exists in Triangle MicroWorks SCADA Data Gateway, which can be exploited by an attacker to bypass authentication on the system...

Motorola GuideMe security vulnerabilities

Motorola GuideMe is an application from Motorola USA. A security vulnerability exists in Motorola GuideMe, which stems from a hard-coded AES key vulnerability that could allow a local attacker to read arbitrary files...

D-Link DAP-1360 security vulnerability

The D-Link DAP-1360 is a router from China-based AUO D-Link. The D-Link DAP-1360 suffers from a hard-coded authentication bypass vulnerability that can be exploited by an attacker to bypass authentication...

CyberPower PowerPanel Business

View CSAF 1. EXECUTIVE SUMMARY CVSS v3 9.8 ATTENTION: Exploitable remotely/Low attack complexity Vendor: CyberPower Equipment: PowerPanel business Vulnerabilities: Use of Hard-coded Password, Relative Path Traversal, Use of Hard-coded Credentials, Active Debug Code, Storing Passwords in a...

PT-2024-3240 · Cyberpower · Cyberpower Powerpanel

Name of the Vulnerable Software and Affected Versions: CyberPower PowerPanel affected versions not specified Description: The issue is related to hard-coded credentials used by the CyberPower PowerPanel platform for authentication to the database, other services, and the cloud. This could allow a...

PT-2024-3242 · Cyberpower · Cyberpower Powerpanel

Name of the Vulnerable Software and Affected Versions: CyberPower PowerPanel business application affected versions not specified Description: The issue is related to a hard-coded set of authentication credentials in the CyberPower PowerPanel business application code. This could allow an attacke...

CVE-2024-3544: Use of Hard-coded Credentials

Unauthenticated attackers can perform actions, using SSH private keys, by knowing the IP address and having access to the same network of one of the machines in the HA or Cluster group. This vulnerability has been closed by enhancing LoadMaster partner communications to require a shared secret th...

PT-2024-3235 · Cyberpower · Cyberpower Powerpanel

Name of the Vulnerable Software and Affected Versions: CyberPower PowerPanel affected versions not specified Description: The issue is related to hard-coded credentials for the test server found in the production code, which could allow an attacker to gain access to the testing or production...

CVE-2024-29011

Use of hard-coded password in the GMS ECM endpoint leading to authentication bypass vulnerability. This issue affects GMS: 9.3.4 and earlier versions...

CVE-2024-29011

Use of hard-coded password in the GMS ECM endpoint leading to authentication bypass vulnerability. This issue affects GMS: 9.3.4 and earlier versions...

CVE-2024-32213

The LoMag WareHouse Management application version 1.0.20.120 and older were found to allow weak passwords. By default, hard-coded passwords of 10 characters with little or no complexity are allowed...

CVE-2024-32213

The LoMag WareHouse Management application version 1.0.20.120 and older were found to allow weak passwords. By default, hard-coded passwords of 10 characters with little or no complexity are allowed...

CVE-2024-32210

The LoMag WareHouse Management application version 1.0.20.120 and older were to utilize hard-coded passwords by default for forms and SQL connections...

CVE-2024-32210

The LoMag WareHouse Management application version 1.0.20.120 and older were to utilize hard-coded passwords by default for forms and SQL connections...

CVE-2024-32213

The LoMag WareHouse Management application, version 1.0.20.120 and older , is vulnerable to the use of weak passwords . By default, the application permits hard-coded passwords consisting of 10 characters with little to no complexity. This flaw could potentially allow unauthorized access to the s...

CVE-2024-32210

The LoMag WareHouse Management application version 1.0.20.120 and older were to utilize hard-coded passwords by default for forms and SQL connections...

SonicWALL GMS security vulnerabilities

SonicWALL GMS is a global management system from SonicWALL, Inc. a powerful and intuitive solution for organizations, distributed enterprises, and service providers to centrally manage and rapidly deploy SonicWall Firewall, Anti-Spam, Backup and Recovery, and Secure Remote Access solutions. A...

Juniper Cloud Native Router Man-in-the-Middle

The vulnerability of software solutions for Juniper Cloud Native Router JCNR and Containerized Routing Protocol Daemon cRPD is related to the use of hard-coded host SSH keys. Exploiting this vulnerability allows a remote attacker to execute a “man-in-the-middle” type attack...

PT-2024-24464

Name of the Vulnerable Software and Affected Versions LoMag WareHouse Management application versions 1.0.20.120 and older Description The issue allows weak passwords. By default, hard-coded passwords of 10 characters with little or no complexity are allowed. Recommendations For versions 1.0.20.1...