5954 matches found
EUVD-2026-97356
A security vulnerability has been detected in meetecho janus-gateway up to 1.4.2. This vulnerability affects unknown code of the file html/demos/admin.js of the component Admin API. Such manipulation leads to hard-coded credentials. The attack can be executed remotely. The exploit has been...
CVE-2026-108831
A security vulnerability exists in meetecho janus-gateway versions up to 1.4.2 . The issue resides within the Admin API component, specifically in the html/demos/admin.js file. The root cause is the presence of hard-coded credentials , which allows for remote execution of the attack. Public explo...
CVE-2026-108831: Use of Hard-coded Credentials
A security vulnerability has been detected in meetecho janus-gateway up to 1.4.2. This vulnerability affects unknown code of the file html/demos/admin.js of the component Admin API. Such manipulation leads to hard-coded credentials. The attack can be executed remotely. The exploit has been...
CVE-2026-107437: Use of Hard-coded Credentials
GV-E-Map Server V18.2.0A contains a plaintext database password embedded within an application component. The credential can be recovered through static analysis of the distributed binary and may also be exposed in process memory during runtime...
PT-2026-110544
Name of the Vulnerable Software and Affected Versions janus-gateway versions prior to 1.4.3 Description A remote attack is possible in the Admin API component due to an issue in the html/demos/admin.js file, which leads to the exposure of hard-coded credentials. Recommendations Update janus-gatew...
CVE-2026-109566: Use of Hard-coded Credentials
Rapyd Admin from 9.0.0 before 9.20.0 contains a hard-coded credentials vulnerability that allows remote unauthenticated attackers to gain super-admin access through an AuthSeeder-created admin@laravel account with password admin. The account is seeded by the setup installer and silently re-create...
CVE-2026-108753
Agnaistic agnai through 1.0.555 contains a hard-coded credentials vulnerability in self-host.docker-compose.yml, which sets a fixed admin password and public JWT secret. Unauthenticated attackers can log in as admin or sign their own JWT with admin: true to impersonate users, reset passwords, and...
CVE-2026-108584
A security flaw has been discovered in FunnyWolf Viper up to 3.1.11. The affected element is an unknown function of the file /root/viper/.git/config. Performing a manipulation results in hard-coded credentials. Remote exploitation of the attack is possible. The exploit has been released to the...
CVE-2026-108584
A security flaw in FunnyWolf Viper (up to version 3.1.11 ) allows for the disclosure of hard-coded credentials . The vulnerability stems from an unknown function within the file /root/viper/.git/config, where specific manipulation can trigger the leak. Remote exploitation is possible, and an expl...
CVE-2026-108584 FunnyWolf Viper config hard-coded credentials
A security flaw has been discovered in FunnyWolf Viper up to 3.1.11. The affected element is an unknown function of the file /root/viper/.git/config. Performing a manipulation results in hard-coded credentials. Remote exploitation of the attack is possible. The exploit has been released to the...
EUVD-2026-96928
A security flaw has been discovered in FunnyWolf Viper up to 3.1.11. The affected element is an unknown function of the file /root/viper/.git/config. Performing a manipulation results in hard-coded credentials. Remote exploitation of the attack is possible. The exploit has been released to the...
CVE-2026-108753
Versions of Agnaistic agnai through 1.0.555 are affected by a hard-coded credentials vulnerability located in the self-host.docker-compose.yml file. The flaw involves a fixed admin password and a public JWT secret. Unauthenticated attackers can leverage these credentials to log in as an administr...
EUVD-2026-96918
Agnaistic agnai through 1.0.555 contains a hard-coded credentials vulnerability in self-host.docker-compose.yml, which sets a fixed admin password and public JWT secret. Unauthenticated attackers can log in as admin or sign their own JWT with admin: true to impersonate users, reset passwords, and...
CVE-2026-108753 Agnaistic agnai through 1.0.555 Hard-Coded Credentials in self-host Docker Compose
Agnaistic agnai through 1.0.555 contains a hard-coded credentials vulnerability in self-host.docker-compose.yml, which sets a fixed admin password and public JWT secret. Unauthenticated attackers can log in as admin or sign their own JWT with admin: true to impersonate users, reset passwords, and...
CVE-2026-108584: Use of Hard-coded Credentials
A security flaw has been discovered in FunnyWolf Viper up to 3.1.11. The affected element is an unknown function of the file /root/viper/.git/config. Performing a manipulation results in hard-coded credentials. Remote exploitation of the attack is possible. The exploit has been released to the...
CVE-2026-108905: Use of Hard-coded Credentials
pH7Builder pH7 Social Dating CMS before 18.6.0 contains a hard-coded API key vulnerability in Tool.class.php that allows unauthenticated attackers to bypass API access checks by spoofing the Host header. Attackers can send Host: localhost with privateapikey=dev772277 and the default allowed URL t...
CVE-2026-108753: Use of Hard-coded Credentials
Agnaistic agnai through 1.0.555 contains a hard-coded credentials vulnerability in self-host.docker-compose.yml, which sets a fixed admin password and public JWT secret. Unauthenticated attackers can log in as admin or sign their own JWT with admin: true to impersonate users, reset passwords, and...
PT-2026-110155
Name of the Vulnerable Software and Affected Versions Agnaistic agnai versions prior to 1.0.556 Description The self-hosted deployment configuration contains hard-coded credentials within the self-host.docker-compose.yml file, specifically a fixed administrator password and a public JSON Web Toke...
PT-2026-110163
Name of the Vulnerable Software and Affected Versions FunnyWolf Viper versions prior to 3.1.12 Description A security flaw exists in the file /root/viper/.git/config where a manipulation of an unknown function allows for the exposure of hard-coded credentials. This issue enables remote...