44 matches found
EUVD-2026-91833
Armatura One's database initialization routine assigns a fixed, vendor-defined password to the database superuser account at creation time, rather than generating a unique password per installation. An individual with access to the server operating system and knowledge of this value can...
CVE-2026-94592
Armatura One's database initialization routine assigns a fixed, vendor-defined password to the database superuser account at creation time, rather than generating a unique password per installation. An individual with access to the server operating system and knowledge of this value can...
CVE-2026-94592
The Armatura One platform contains a vulnerability where the database initialization routine assigns a fixed, vendor-defined password to the database superuser account instead of generating a unique one. An attacker with server operating system access and knowledge of this hard-coded value can au...
PT-2026-104437
Name of the Vulnerable Software and Affected Versions Armatura One affected versions not specified Description The database initialization routine assigns a fixed, vendor-defined password to the database superuser account during creation instead of generating a unique password for each...
ets5-password-recovery
Herramienta de Recuperación de Contraseñas ETS5 Tabla de Contenidos Introducción Instalación Requisitos ¿Cómo funciona la recuperación de contraseñas? ¿Cómo se descubrió el fallo de diseño? ¿Cómo se puede mitigar el riesgo? Divulgación Coordinada de Vulnerabilidades Licencia Registro de cambios...
The vulnerability of the /etc-ro/shadow file in the Tenda G1 router microprogramming system allows a hacker to execute arbitrary commands on behalf of the root user.
The vulnerability of the /etcro/shadow file in the Tenda G1 router microprogramming system is related to the use of fixed password encoding. Exploiting this vulnerability allows an attacker to execute arbitrary commands on behalf of the root user...
CVE-2026-85148 Lightstar｜SmartIT Desktop Manager - Use of Hard-coded Credentials
SmartIT Desktop Manager developed by Lightstar has a Use of Hard-coded Credentials vulnerability. Unauthenticated remote attackers can exploit a fixed password to remotely access user hosts...
CVE-2026-85148 Lightstar｜SmartIT Desktop Manager - Use of Hard-coded Credentials
SmartIT Desktop Manager developed by Lightstar has a Use of Hard-coded Credentials vulnerability. Unauthenticated remote attackers can exploit a fixed password to remotely access user hosts...
EUVD-2026-70870
SmartIT Desktop Manager developed by Lightstar has a Use of Hard-coded Credentials vulnerability. Unauthenticated remote attackers can exploit a fixed password to remotely access user hosts...
PT-2026-85385
SmartIT Desktop Manager developed by Lightstar has a Use of Hard-coded Credentials vulnerability. Unauthenticated remote attackers can exploit a fixed password to remotely access user hosts...
CVE-2026-65313
HIPASE-250 (formerly 250 SCALA) engineering workstations are provisioned by a script that uses a fixed, hard-coded x11vnc password. This enables an adjacent-network attacker who knows the credential to gain VNC access to affected workstations. Affected component: the provisioning script; root cau...
CVE-2017-18470
cPanel before 62.0.4 has a fixed password for the Munin MySQL test account SEC-196...
EUVD-2017-9586
Malware in sbrugna...
EUVD-2016-1856
Malware in sbrugna...
EUVD-2002-2424
Malware in sbrugna...
EUVD-2022-44398
Malicious code in bioql PyPI...
EUVD-2024-47119
Malicious code in bioql PyPI...
The vulnerability of the g_F_n_GenPassForQlync function in the microprogramming software of D-Link DCS-7517 cameras allows a intruder to compromise the confidentiality of the protected information.
The vulnerability of the gFnGenPassForQlync function in the microprogramming software of D-Link DCS-7517 cameras is related to the use of fixed password encoding. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality of the information being protected...
CVE-2022-41157
A specific file on the sERP server if KyungrinaraERP solution has a fixed password with the SYSTEM authority. This vulnerability could allow attackers to leak or steal sensitive information or execute malicious commands...
