CVE-2023-39420: Use of Hard-coded Credentials

The RDPCore.dll component as used in the IRM Next Generation booking engine, allows a remote user to connect to customers with an "admin" account and a corresponding password computed daily by a routine inside the DLL file. Once reverse-engineered, this routine can help an attacker generate the...

CVE-2023-39422: Use of Hard-coded Credentials

The /irmdata/api/ endpoints exposed by the IRM Next Generation booking engine authenticates requests using HMAC tokens. These tokens are however exposed in a JavaScript file loaded on the client side, thus rendering this extra safety mechanism useless...

Oracle Linux 7 : Unbreakable Enterprise kernel-container kata-image kata-runtime kata kubernetes kubernetes istio olcne (ELSA-2020-5765)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2020-5765 advisory. - x86/speculation: Add SRBDS vulnerability and mitigation documentation Mark Gross Orabug: 31446720 CVE-2020-0543 - x86/speculation: Add Special Regist...

CVE-2023-39421: Use of Hard-coded Credentials

The RDPWin.dll component as used in the IRM Next Generation booking engine includes a set of hardcoded API keys for third-party services such as Twilio and Vonage. These keys allow unrestricted interaction with these services...

Internet Reservation Module Booking Engine Trust Management Issue Vulnerability

Internet Reservation Module Booking Engine is a reservation platform. A trust management issue vulnerability exists in Internet Reservation Module Booking Engine, which arises from the use of hard-coded API keys...

CVE-2023-32619

Archer C50 firmware versions prior to 'Archer C50JPV3230505' and Archer C55 firmware versions prior to 'Archer C55JPV1230506' use hard-coded credentials to login to the affected device, which may allow a network-adjacent unauthenticated attacker to execute an arbitrary OS command...

CVE-2023-32619

Archer C50 firmware versions prior to 'Archer C50JPV3230505' and Archer C55 firmware versions prior to 'Archer C55JPV1230506' use hard-coded credentials to login to the affected device, which may allow a network-adjacent unauthenticated attacker to execute an arbitrary OS command...

CVE-2023-32619

Archer C50 firmware versions prior to 'Archer C50JPV3230505' and Archer C55 firmware versions prior to 'Archer C55JPV1230506' use hard-coded credentials to login to the affected device, which may allow a network-adjacent unauthenticated attacker to execute an arbitrary OS command...

CVE-2023-32619

Archer C50 firmware versions prior to 'Archer C50JPV3230505' and Archer C55 firmware versions prior to 'Archer C55JPV1230506' use hard-coded credentials to login to the affected device, which may allow a network-adjacent unauthenticated attacker to execute an arbitrary OS command...

CVE-2023-32619

CVE-2023-32619 affects TP‑LINK Archer C50 and C55 devices with JP firmware releases prior to C50_V3_230505 and C55_V1_230506, where hard-coded credentials enable a network‑adjacent, unauthenticated attacker to execute arbitrary OS commands. Root cause: hard-coded login credentials in affected fir...

CVE-2023-32619: Use of Hard-coded Credentials

Archer C50 firmware versions prior to 'Archer C50JPV3230505' and Archer C55 firmware versions prior to 'Archer C55JPV1230506' use hard-coded credentials to login to the affected device, which may allow a network-adjacent unauthenticated attacker to execute an arbitrary OS command...

PT-2023-23914 · Tp Link · Archer C55 +1

Name of the Vulnerable Software and Affected Versions: Archer C50 versions prior to Archer C50JP V3 230505 Archer C55 versions prior to Archer C55JP V1 230506 Description: The affected devices use hard-coded credentials to login, which may allow a network-adjacent unauthenticated attacker to...

CVE-2023-41508

A hard coded password in Super Store Finder v3.6 allows attackers to access the administration panel...

CVE-2023-41508

A hard coded password in Super Store Finder v3.6 allows attackers to access the administration panel...

CVE-2023-41508

A hard coded password in Super Store Finder v3.6 allows attackers to access the administration panel...

Fujitsu Limited Real-time Video Transmission Gear "IP series"

1. EXECUTIVE SUMMARY CVSS v3 5.9 ATTENTION: Exploitable remotely Vendor: Fujitsu Limited Equipment: Real-time Video Transmission Gear "IP series" Vulnerability: Use Of Hard-Coded Credentials 2. RISK EVALUATION Successful exploitation of this vulnerability could result in an attacker logging into...

Super Store Finder Trust Management Issue Vulnerability

Super Store Finder is an easy to use Google Maps API store finder program Super Store Finder by Super Store Finder. A security vulnerability exists in Super Store Finder version v3.6 that stems from the use of hard-coded passwords...

CVE-2023-41508

A hard coded password in Super Store Finder v3.6 allows attackers to access the administration panel...

CVE-2023-41508: Use of Hard-coded Credentials

A hard coded password in Super Store Finder v3.6 allows attackers to access the administration panel...

CVE-2023-41508

CVE-2023-41508 affects Super Store Finder v3.6, where a hard-coded password in the Google Maps API integration enables an attacker to access the administration panel. The linked Red Hat/CNNVD/etc. entries corroborate the hard-coded credential issue and attribute it to v3.6. The PT-2023-4915 advis...