CVE-2022-42176

PCSecure V5.0.8.xw - 구성 파일에 하드코딩된 자격 증명 사용으로 관리자 패널 접근 가능 요약 공급업체: PCTechSoft SAS 제품: PCSecure 영향을 받는 버전: 5.0.8.xw 코드네임: PapiQuieroPollo00 취약점 유형: 하드코딩된 자격 증명 사용 CWE-798 CVSSv3.1 벡터: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVSSv3.1 기본 점수: 7.8 높음 익스플로잇 가능 여부: 없음 CVE ID: CVE-2022-42176 설명...

the-same-key-opens-every-box-cve-2026-71960-hard-coded-jwt-secret-in-cudy-wr3000-mesh-mqtt

CVE-2026-71960 — Cudy WR3000 2.0 메시 MQTT 브로커의 하드코딩된 JWT 시크릿 Hunt-Benito 기사를 위한 PoC 도구 모음 "The Same Key Opens Every Box: CVE-2026-71960 — Hard-coded JWT Secret in Cudy's WR3000 Mesh MQTT Broker"...

libvhdi

libvhdi는 Virtual Hard Disk VHD 이미지 형식에 접근하기 위한 라이브러리입니다. 프로젝트 정보: 상태: alpha 라이선스: LGPL-3.0-or-later 읽기 지원 형식: Virtual Hard Disk 버전 1 VHD Virtual Hard Disk 버전 2 VHDX 지원되는 이미지 유형: 고정 크기 하드 디스크 이미지 동적 크기또는 스파스 하드 디스크 이미지 차등또는 differencing 하드 디스크 이미지 실행 취소 디스크 이미지.vud도 차등 이미지라는 점에 유의하세요. 자세한 정보는 다음을...

CVE-2023-41508

CVE-2023-41508 CVE-2023-41508 - Super Store Finder v3.6 中存在硬编码密码，允许攻击者访问管理面板。 漏洞类型 访问控制不当 产品供应商 Super Store Finder 受影响产品代码库 Super Store Finder - 受影响版本 3.6 及以下。已在 3.7 版本中修复 CVSS v3.1 向量（基础评分） AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H 10.0 受影响组件 受影响的 Web 管理控制台 攻击类型 远程 影响：拒绝服务 true 影响：权限提升 true 影响：代码执行 tr...

ATAboy

직접 제작하고 싶지 않다면, 하드웨어는 여기서 구매할 수 있습니다: https://obsoletetech.us/products/ataboy-an-open-source-legacy-ide-usb-bridge ATAboy는 레트로 컴퓨팅 애호가, 데이터 복구 전문가, 아카이브 전문가를 위해 설계되었습니다. 중간에 빈티지 컴퓨터를 거치지 않고 가장 오래된 IDE 하드 드라이브를 읽고 쓸 수 있습니다! ATAboy는 클래식 IDEPATA 하드 드라이브를 표준 USB 대용량 저장 장치로 현대 컴퓨터에 USB로 연결할 수 있는 사용자...

epson-eh-tw5350-advisories

Epson EH-TW5350 Security Advisories B-BEAM-BOB Three vulnerabilities discovered in the Epson EH-TW5350 projector firmware 150075647YWWV110 by team B-BEAM-BOB during the KITRI Best of the Best BoB program, 2021. CVE IDs were assigned by MITRE on 2021-12-21 but the records remained unpublished unti...

ccs

Сканер учётных данных в коде Этот скрипт предназначен для сканирования большой и разнообразной кодовой базы на предмет жёстко закодированных учётных данных или учётных данных, присутствующих в конфигурационных файлах. Они представляют собой серьёзную угрозу безопасности и могут быть чрезвычайно...

TOTOLINK CP450 v4.1.0cu.747_B20191224 - Hard-Coded Password Vulnerability

A critical vulnerability has been discovered in TOTOLINK CP450 version 4.1.0cu.747B20191224. This vulnerability affects an unknown part of the file /webcste/cgi-bin/product.ini of the Telnet Service component. The issue stems from the use of a hard-coded password, which can be exploited remotely...

CVE-2017-6640-POC

CVE-2017-6640-POC CVE-2017-6640를 위한 개념 증명 Burp 확장기능으로 구현 Cisco Prime Data Center Network Manager DCNM는 정적 자격 증명을 구현합니다. 참조: https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170607-dcnm2 보다 구체적으로, 웹 UI는 사용자가 HTTP Digest 인증을 사용하여 인증하도록 요구합니다. 이 Burp 확장기능은 하드코딩된 HA1을...

CVE-2024-22734

CVE-2024-22734 CVE-2024-22734용 익스플로잇 PoC 이 저장소에는 Redline Cyber Security 의 Bryan Smith 가 발견한 취약점인 CVE-2024-22734 에 대한 익스플로잇 소스 개념 검증PoC이 포함되어 있습니다. 취약점에 대한 자세한 정보는 블로그 게시물을 참조하십시오: CVE-2024-22734: Exploit POC Write-Up. 취약점 개요 CVE-2024-22734 는 AMCS Trux Software...

CVE-2026-90451

An example environment-configuration file ships with a fixed, publicly-known secret value used to sign authentication cookies for a bundled packet-analysis component. A deployment that copies this example file into active configuration without running the setup routine that regenerates the value...

cve-2016-4845_csrf

cve-2016-4845csrf Доказательство концепции для уязвимости CSRF CVE-2016-4825 на IO-DATA Recording Hard Disc Drive. License Эти коды выпущены под лицензией MIT. Пожалуйста, обратитесь к LICENSE.txt...

Central Dogma: Hard-coded ZooKeeper replication secret 'ch4n63m3' with silent fallback enables cluster takeover

Vulnerability ZooKeeperReplicationConfig.secret silently substitutes the hard-coded constant "ch4n63m3" leetspeak for "change me" whenever the operator omits replication.secret. The same secret is wired into both the client-facing SASL context and the quorum/learner SASL contexts of the embedded...

EUVD-2026-38207

Central Dogma: Hard-coded ZooKeeper replication secret 'ch4n63m3' with silent fallback enables cluster takeover...

CVE-2026-89589

In the Linux kernel, the following vulnerability has been resolved: acpi/apei/ghes: Use rawspinlockt for CXL CPER work locks The CXL CPER work registration and unregistration helpers acquire cxlcperworklock and cxlcperproterrworklock with a spinlock guard, which leaves local interrupts enabled. T...

CVE-2026-89589

CVE-2026-89589 affects the Linux kernel in the acpi/apei/ghes subsystem, specifically the CXL CPER work registration and unregistration helpers. The root cause is a deadlock : the CXL CPER work locks are acquired with a regular spinlock guard (interrupts enabled) in register/unregister paths, whi...

CVE-2026-85083

The ANJIA AJL33PC0801 IP camera uses a hard-coded credential for bootloader authentication. An attacker with physical access to the device may leverage this weakness to gain privileged bootloader access, allowing unauthorized modification of firmware and system configuration and potentially...

CVE-2026-85083

CVE-2026-85083 affects the ANJIA AJL33PC0801 IP camera (CareCam Pro), which ships with a hard-coded credential used for bootloader authentication . The affected firmware is linuxlinux202008261138 svn13796 with U-Boot 2010.06 (compiled Aug 26, 2020). An attacker with physical access can exploit th...

EUVD-2026-76128

The ANJIA AJL33PC0801 IP camera uses a hard-coded credential for bootloader authentication. An attacker with physical access to the device may leverage this weakness to gain privileged bootloader access, allowing unauthorized modification of firmware and system configuration and potentially...

CVE-2026-85083 CareCam Pro IP Cameras Use of Hard-coded Credentials

The ANJIA AJL33PC0801 IP camera uses a hard-coded credential for bootloader authentication. An attacker with physical access to the device may leverage this weakness to gain privileged bootloader access, allowing unauthorized modification of firmware and system configuration and potentially...