EVlink City < R8 V3.4.0.1 - Authentication Bypass

A CWE-798: Use of Hard-coded Credentials vulnerability exists in EVlink City EVC1S22P4 / EVC1S7P4 all versions prior to R8 V3.4.0.1, EVlink Parking EVW2 / EVF2 / EV.2 all versions prior to R8 V3.4.0.1, and EVlink Smart Wallbox EVB1A all versions prior to R8 V3.4.0.1 that could allow an attacker t...

GitLab CE/EE - Hard-Coded Credentials

GitLab CE/EE contains a hard-coded credentials vulnerability. A hardcoded password was set for accounts registered using an OmniAuth provider e.g. OAuth, LDAP, SAML, allowing attackers to potentially take over accounts. This template attempts to passively identify vulnerable versions of GitLab...

CVE-2017-6640-POC

CVE-2017-6640-POC Prova di concetto per CVE-2017-6640 come estensione Burp Cisco Prime Data Center Network Manager DCNM implementa credenziali statiche. Vedere anche: https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170607-dcnm2 Più specificamente, l'interfaccia We...

epson-eh-tw5350-advisories

Epson EH-TW5350 Security Advisories B-BEAM-BOB Three vulnerabilities discovered in the Epson EH-TW5350 projector firmware 150075647YWWV110 by team B-BEAM-BOB during the KITRI Best of the Best BoB program, 2021. CVE IDs were assigned by MITRE on 2021-12-21 but the records remained unpublished unti...

ccs

Code-Anmeldedaten-Scanner Dieses Skript soll eine große, vielfältige Codebasis nach fest codierten Anmeldedaten oder in Konfigurationsdateien vorhandenen Anmeldedaten durchsuchen. Diese stellen ein ernstes Sicherheitsproblem dar und sind äußerst schwer zu erkennen und zu verwalten. Der spezifisch...

EUVD-2026-66418

The vulnerability allows the unauthorised generation of physical access QR codes due to the use of hard-coded credentials within the application. The generation mechanism uses the 'badgenumber' parameter as the HMAC private key, the value of which remains static and is accessible via the API usin...

CVE-2025-65855

CVE-2025-65855 HelpFlash IoT OTA-Update – Mehrere Schwachstellen Zusammenfassung Mehrere Schwachstellen im OTA-Firmware-Update-Mechanismus von Netun Solutions HelpFlash IoT ermöglichen einem Angreifer mit kurzem physischem Zugriff die Ausführung von beliebigem Code. CVE-ID: CVE-2025-65855...

EUVD-2026-67314

Bendix EC80 Brake ECU uses hard-coded credentials, which could allow an attacker to disable automatic traction control...

CVE-2026-71396

Bendix EC80 Brake ECU uses hard-coded credentials, which could allow an attacker to disable automatic traction control...

CVE-2026-71396

CVE-2026-71396 affects the Bendix EC80 Brake ECU , which embeds hard-coded credentials that an attacker could leverage to disable automatic traction control . The vulnerability is rated MEDIUM (CVSS 3.1: 5.4; CVSS 4.0: 5.3) with an adjacent-network attack vector, low complexity , and no privilege...

CVE-2026-71396 Use of Hard-coded Credentials in Bendix EC80 Brake ECU

Bendix EC80 Brake ECU uses hard-coded credentials, which could allow an attacker to disable automatic traction control...

CVE-2022-42176

PCSecure V5.0.8.xw - Использование жестко заданных учетных данных в файлах конфигурации приводит к доступу к панели администратора Краткое описание Поставщик: PCTechSoft SAS Продукт: PCSecure Затронутые версии: 5.0.8.xw Кодовое имя: PapiQuieroPollo00 Уязвимость Тип: Использование жестко заданных...

PT-2026-82779

Bendix EC80 Brake ECU uses hard-coded credentials, which could allow an attacker to disable automatic traction control...

CVE-2026-75896

Use of Hard-coded Credentials vulnerability in TÜBİTAK BİLGEM Software Technologies Research Institute Liderahenk allows Try Common or Default Usernames and Passwords. This issue affects Liderahenk: before 3.5.5...

CVE-2026-75896

CVE-2026-75896 is a hard-coded LDAP credentials vulnerability in Liderahenk , a software product by TÜBİTAK BİLGEM (Software Technologies Research Institute). The embedded credentials allow an unauthenticated, remote attacker to attempt common or default usernames and passwords over the network. ...

CVE-2026-75896 Use of Hard-coded LDAP Credentials in TÜBİTAK BİLGEM's Liderahenk

Use of Hard-coded Credentials vulnerability in TÜBİTAK BİLGEM Software Technologies Research Institute Liderahenk allows Try Common or Default Usernames and Passwords. This issue affects Liderahenk: before 3.5.5...

EUVD-2026-66426

Use of Hard-coded Credentials vulnerability in TÜBİTAK BİLGEM Software Technologies Research Institute Liderahenk allows Try Common or Default Usernames and Passwords. This issue affects Liderahenk: before 3.5.5...

CVE-2026-12587

The vulnerability allows the unauthorised generation of physical access QR codes due to the use of hard-coded credentials within the application. The generation mechanism uses the 'badgenumber' parameter as the HMAC private key, the value of which remains static and is accessible via the API usin...

CVE-2026-12587 Embedded credentials in Virtuagym

The vulnerability allows the unauthorised generation of physical access QR codes due to the use of hard-coded credentials within the application. The generation mechanism uses the 'badgenumber' parameter as the HMAC private key, the value of which remains static and is accessible via the API usin...

CVE-2026-12587

CVE-2026-12587 affects the Virtuagym application, where a static, hard-coded badge_number parameter is used as the HMAC private key for generating physical access QR codes. This value is exposed via the API endpoint /club/_id_club_/member/_id_member_/resamania_qr_info, and the cryptographic logic...