152 matches found
Crawl4AI < 0.8.7 - Hardcoded JWT Signing Key Authentication Bypass
Crawl4AI Docker API server versions before 0.8.7 ship with a hardcoded default JWT signing key "mysecret" used to sign and verify HS256 authentication tokens. Because the key is identical across every deployment where SECRETKEY has not been overridden, an unauthenticated attacker can forge a vali...
Juggle <= 1.6.0 - Unauthenticated Exposed H2 Database Console
Juggle ships the H2 database web console enabled and reachable from non-localhost by default. No application-level authentication covers the /h2-console path, and the shipped default datasource credentials sa/juggle are known. An unauthenticated remote attacker can reach the console and, using th...
CVE-2026-46376
CVE-2026-46376 — Accès UCP non authentifié à FreePBX via des identifiants codés en dur Une vulnérabilité critique dans le module de gestion des utilisateurs userman de FreePBX permet à des attaquants non authentifiés d'accéder au panneau de contrôle utilisateur UCP en utilisant des identifiants...
Security Bulletin: QRadar contains hard-coded credentials
Summary QRadar contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound communication to external components, or encryption of internal data. Vulnerability Details CVEID:CVE-2026-5522 DESCRIPTION: QRadar contains hard-cod...
MINI-53WM-6QG2-GXQP
Bulletin has no description...
MINI-WP6C-C68H-VM6X
Bulletin has no description...
Exploit for CVE-2026-73519
CVE-2026-73519 — WolfStack Hardcoded Cluster Secret → Unauthen...
CVE-2026-59507 Priority – CWE-798: Use of Hard-coded Credentials CWE-200: Exposure of Sensitive Information to an Unauthorized Actor CWE-284: Improper Access Control
: Use of Hard-coded Credentials : Exposure of Sensitive Information to an Unauthorized Actor : Improper Access Control vulnerability in Priority Portal Generator addon to Priority ERP developed by Soft Solutions. This issue affects Portal Generator addon to Priority ERP developed by Soft Solution...
EUVD-2026-57774
CWE-798: Use of Hard-coded Credentials CWE-200: Exposure of Sensitive Information to an Unauthorized Actor CWE-284: Improper Access Control...
CVE-2026-59507
Technical details about CVE-2026-59507 are not publicly available in the provided documents. Monitor for updates.
PT-2026-71417
CWE-798: Use of Hard-coded Credentials CWE-200: Exposure of Sensitive Information to an Unauthorized Actor CWE-284: Improper Access Control...
Security Bulletin: The following vulnerabilities that can affect IBM Storage Scale and the Management GUI are now fixed in 5.2.3.9 or higher and 6.0.1.1 or higher
Summary The following vulnerabilities, which can affect IBM Storage Scale and the Management GUI and could provide weaker-than-expected security, are now fixed in Storage Scale 5.2.3.9 or higher and 6.0.1.1 or higher. CVE-2026-19483, CVE-2026-13460 Vulnerability Details CVEID:CVE-2026-19483...
CVE-2026-6374 Hardcoded Credentials in Zyxel WAH7601 Router
Use of Hard-coded Credentials vulnerability in Zyxel Networks WAH7601 allows Read Sensitive Constants Within an Executable. This issue affects WAH7601: through 20.07.2026...
CVE-2026-50083
The Aqara IAM/SSO Gateway gw-builder.aqara.com used a hardcoded OAuth client credential, which is an instance of "CWE-798: Use of Hard-coded Credentials." This issue has an estimated CVSS of CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N 9.1 Critical. When combined with CVE-2026-50082, CVE-50084, a...
CVE-2026-50083: Use of Hard-coded Credentials
The Aqara IAM/SSO Gateway gw-builder.aqara.com used a hardcoded OAuth client credential, which is an instance of "CWE-798: Use of Hard-coded Credentials." This issue has an estimated CVSS of CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N 9.1 Critical. When combined with CVE-2026-50082, CVE-50084, a...
CVE-2020-7501
A CWE-798: Use of Hard-coded Credentials vulnerability exists in Vijeo Designer Basic V1.1 HotFix 16 and prior and Vijeo Designer V6.2 SP9 and prior which could cause unauthorized read and write when downloading and uploading project or firmware into Vijeo Designer Basic and Vijeo Designer...
EUVD-2020-28626
Malware in sbrugna...
EUVD-2019-15197
Malware in sbrugna...