1347 matches found
TOTOLINK CP450 v4.1.0cu.747_B20191224 - Hard-Coded Password Vulnerability
A critical vulnerability has been discovered in TOTOLINK CP450 version 4.1.0cu.747B20191224. This vulnerability affects an unknown part of the file /webcste/cgi-bin/product.ini of the Telnet Service component. The issue stems from the use of a hard-coded password, which can be exploited remotely...
CVE-2023-41508
CVE-2023-41508 CVE-2023-41508 - Super Store Finder v3.6 中存在硬编码密码，允许攻击者访问管理面板。 漏洞类型 访问控制不当 产品供应商 Super Store Finder 受影响产品代码库 Super Store Finder - 受影响版本 3.6 及以下。已在 3.7 版本中修复 CVSS v3.1 向量（基础评分） AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H 10.0 受影响组件 受影响的 Web 管理控制台 攻击类型 远程 影响：拒绝服务 true 影响：权限提升 true 影响：代码执行 tr...
CVE-2026-70413
Dell Live Optics Collector, versions prior to 27.2.13.310, contains a Use of Hard-coded Password vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Information exposure...
CVE-2026-70413
Dell Live Optics Collector, versions prior to 27.2.13.310, contains a Use of Hard-coded Password vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Information exposure...
CVE-2026-70413
Dell Live Optics Collector versions prior to 27.2.13.310 are vulnerable to a Use of Hard-coded Password vulnerability. A low privileged attacker with local access could potentially exploit this flaw, resulting in Information exposure . Remediation is available via security update DSA-2026-339 . N...
CVE-2026-70413
Dell Live Optics Collector, versions prior to 27.2.13.310, contains a Use of Hard-coded Password vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Information exposure...
CVE-2026-70413: Use of Hard-coded Password
Dell Live Optics Collector, versions prior to 27.2.13.310, contains a Use of Hard-coded Password vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Information exposure...
CVE-2026-97877
A vulnerability was determined in zhistaredu StarTraining up to 3.8.1. This issue affects the function UserLoginService.createToken of the file application.yml of the component JWT Token Handler. This manipulation of the argument userid/companyid causes use of hard-coded password. The attack is...
EUVD-2026-87157
A vulnerability was determined in zhistaredu StarTraining up to 3.8.1. This issue affects the function UserLoginService.createToken of the file application.yml of the component JWT Token Handler. This manipulation of the argument userid/companyid causes use of hard-coded password. The attack is...
CVE-2026-97877
The zhistaredu StarTraining software, up to version 3.8.1 , is vulnerable to a remote attack affecting the JWT Token Handler component. Specifically, a flaw in the UserLoginService.createToken function within the application.yml file allows for the manipulation of user_id or company_id arguments....
CVE-2026-97877 zhistaredu StarTraining JWT Token application.yml UserLoginService.createToken hard-coded password
A vulnerability was determined in zhistaredu StarTraining up to 3.8.1. This issue affects the function UserLoginService.createToken of the file application.yml of the component JWT Token Handler. This manipulation of the argument userid/companyid causes use of hard-coded password. The attack is...
CVE-2026-97877 zhistaredu StarTraining JWT Token application.yml UserLoginService.createToken hard-coded password
A vulnerability was determined in zhistaredu StarTraining up to 3.8.1. This issue affects the function UserLoginService.createToken of the file application.yml of the component JWT Token Handler. This manipulation of the argument userid/companyid causes use of hard-coded password. The attack is...
CVE-2026-79959
The Botslab G980H dash camera firmware contains a hard-coded root account password that cannot be changed by the user. An attacker who obtains the firmware or has physical access to the device could recover the credential and use it to obtain root access through the UART interface...
EUVD-2026-86464
The Botslab G980H dash camera firmware contains a hard-coded root account password that cannot be changed by the user. An attacker who obtains the firmware or has physical access to the device could recover the credential and use it to obtain root access through the UART interface...
PT-2026-98296
Name of the Vulnerable Software and Affected Versions Botslab G980H affected versions not specified Description The firmware contains a hard-coded root account password that is immutable by the user. An attacker with physical access to the device or access to the firmware can recover these...
CVE-2026-65117
NVIDIA Infrastructure Controller for Linux contains a vulnerability where an attacker could cause use of a hard-coded password. A successful exploit of this vulnerability might lead to data tampering, denial of service, and information disclosure...
CVE-2026-65117
NVIDIA Infrastructure Controller for Linux contains a vulnerability where an attacker could cause use of a hard-coded password. A successful exploit of this vulnerability might lead to data tampering, denial of service, and information disclosure...
CVE-2026-65117
NVIDIA Infrastructure Controller for Linux contains a vulnerability where an attacker could cause use of a hard-coded password. A successful exploit of this vulnerability might lead to data tampering, denial of service, and information disclosure...
CVE-2026-65117
The NVIDIA Infrastructure Controller for Linux is vulnerable to a flaw where an attacker can trigger the use of a hard-coded password (CWE-259 ). Exploitation of this vulnerability could result in data tampering , denial of service , and information disclosure . This issue affects versions 0 to 1...
CVE-2026-65117: Use of Hard-coded Password
NVIDIA Infrastructure Controller for Linux contains a vulnerability where an attacker could cause use of a hard-coded password. A successful exploit of this vulnerability might lead to data tampering, denial of service, and information disclosure...