epson-eh-tw5350-advisories

Epson EH-TW5350 Security Advisories B-BEAM-BOB Three vulnerabilities discovered in the Epson EH-TW5350 projector firmware 150075647YWWV110 by team B-BEAM-BOB during the KITRI Best of the Best BoB program, 2021. CVE IDs were assigned by MITRE on 2021-12-21 but the records remained unpublished unti...

EVlink City < R8 V3.4.0.1 - Authentication Bypass

A CWE-798: Use of Hard-coded Credentials vulnerability exists in EVlink City EVC1S22P4 / EVC1S7P4 all versions prior to R8 V3.4.0.1, EVlink Parking EVW2 / EVF2 / EV.2 all versions prior to R8 V3.4.0.1, and EVlink Smart Wallbox EVB1A all versions prior to R8 V3.4.0.1 that could allow an attacker t...

GitLab CE/EE - Hard-Coded Credentials

GitLab CE/EE contains a hard-coded credentials vulnerability. A hardcoded password was set for accounts registered using an OmniAuth provider e.g. OAuth, LDAP, SAML, allowing attackers to potentially take over accounts. This template attempts to passively identify vulnerable versions of GitLab...

ccs

코드 자격 증명 스캐너 이 스크립트는 대규모의 다양한 코드베이스에 대해 하드 코딩된 자격 증명 또는 구성 파일에 존재하는 자격 증명을 스캔하기 위한 것입니다. 이러한 자격 증명은 심각한 보안 문제를 나타내며, 탐지하고 관리하기가 매우 어려울 수 있습니다. 이 스크립트의 구체적인 초점은 CI/CD 파이프라인에서 개발 팀이 직접 사용할 수 있는 도구를 만들어, 코드에 자격 증명이 존재할 때 팀에 경고함으로써 이 문제에 대한 수정 프로세스를 관리하고, 팀이 문제가 발생하면 즉시 해결할 수 있도록 하는 것입니다. 이 도구를 특정 시점...

CVE-2017-6640-POC

CVE-2017-6640-POC CVE-2017-6640 の概念実証（Burp拡張機能として） Cisco Prime Data Center Network Manager（DCNM）は静的認証情報を実装しています。関連情報： https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170607-dcnm2 具体的には、Web UIはユーザーにHTTP...

CVE-2026-77960

Bransys ELD (an Electronic Logging Device) ships with hardcoded MQTT credentials , allowing an unauthenticated network attacker to gain read access to real-time data for every active device connected to the affected MQTT broker across a subset of carriers. The CISA ICS advisory (ICSA-26-260-01) a...

CVE-2022-42176

PCSecure V5.0.8.xw - 設定ファイル内のハードコードされた認証情報により管理者パネルへのアクセスが可能になる 概要 ベンダー: PCTechSoft SAS 製品: PCSecure 影響を受けるバージョン: 5.0.8.xw コードネーム: PapiQuieroPollo00 脆弱性 種別: ハードコードされた認証情報の使用 CWE-798 CVSSv3.1 ベクター: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVSSv3.1 基本値: 7.8 高 エクスプロイトの利用可能性: なし CVE ID:...

CVE-2026-81440

Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains a Use of Hard-coded Credentials vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Unauthorized access...

CVE-2026-68950

The affected products use hard-coded credentials, which could allow an attacker to run the ftpd service as root, providing remote root file access where FTP is reachable...

CVE-2026-66890

The affected products use hard-coded credentials, which could allow remote access to files with root privileges where FTP is reachable...

CVE-2026-68950 Use of Hard-coded Credentials in Digital Watchdog VMAX DVR and NVR Product Lineups

The affected products use hard-coded credentials, which could allow an attacker to run the ftpd service as root, providing remote root file access where FTP is reachable...

EUVD-2026-79950

The affected products use hard-coded credentials, which could allow an attacker to run the ftpd service as root, providing remote root file access where FTP is reachable...

CVE-2026-68950

CVE-2026-68950 affects Digital Watchdog VMAX DVR and NVR product lineups. The root cause is hard-coded credentials , which allow an attacker to run the ftpd service as root , granting remote root file access where FTP is reachable. The vulnerability is rated HIGH severity (CVSS 3.1: 8.8, CVSS 4.0...

EUVD-2026-79947

The affected products use hard-coded credentials, which could allow remote access to files with root privileges where FTP is reachable...

CVE-2026-66890 Use of Hard-coded Credentials in Digital Watchdog VMAX DVR and NVR Product Lineups

The affected products use hard-coded credentials, which could allow remote access to files with root privileges where FTP is reachable...

CVE-2026-66890

Digital Watchdog VMAX DVR and NVR devices are affected by a hard-coded credentials vulnerability that allows an attacker with adjacent-network access to gain remote file access with root privileges when the device's FTP service is reachable. The CISA-assigned CVSS 3.1 score is 9.6 (CRITICAL) , wi...

CVE-2025-70962

CVE-2025-70962 ZOSI C519M IPカメラのRTSPサービスにおけるハードコードされた認証情報の使用 フィールド| 値 ---|--- CVE ID| CVE-2025-70962 ベンダー| ZOSI Technology 製品| ZOSI C519M スマートIPカメラ（型番 1NC-519M としても記載） 影響を受けるバージョン| ファームウェア V4.2.8.832C01450BA（テスト済みビルド。それ以前のバージョンは未検証） 脆弱性の種類| CWE-798: ハードコードされた認証情報の使用（CWE-1392 も参照） CVSS v3.1| 7.5（高...

CVE-2026-90509

A weakness has been identified in dromara orion-visor up to 2.5.7. Affected by this issue is the function ExposeApiAspect.beforeExposeApi of the file ExposeApiAspect.java. Executing a manipulation can lead to hard-coded credentials. The attack can be executed remotely. The exploit has been made...

CVE-2026-90509

A hard-coded credential weakness (CWE-798) exists in dromara orion-visor versions up to 2.5.7 , specifically in the function ExposeApiAspect.beforeExposeApi within ExposeApiAspect.java. The vulnerability allows a remote, unauthenticated attacker to exploit a hardcoded default token for authentica...

CVE-2026-90509 dromara orion-visor ExposeApiAspect.java ExposeApiAspect.beforeExposeApi hard-coded credentials

A weakness has been identified in dromara orion-visor up to 2.5.7. Affected by this issue is the function ExposeApiAspect.beforeExposeApi of the file ExposeApiAspect.java. Executing a manipulation can lead to hard-coded credentials. The attack can be executed remotely. The exploit has been made...