Lucene search
+L

11329 matches found

OSV
OSV
•added 2026/03/23 2:47 p.m.•14 views

CVE-2026-4404 Use of hard coded credentials in GoHarbor Harbor

Use of hard coded credentials in GoHarbor Harbor version 2.15.0 and below, allows attackers to use the default password and gain access to the web UI...

9.4CVSS6.9AI score
SaveExploits0References7
Vulnrichment
Vulnrichment
•added 2026/03/23 2:47 p.m.•6 views

CVE-2026-4404 Use of hard coded credentials in GoHarbor Harbor

Use of hard coded credentials in GoHarbor Harbor version 2.15.0 and below, allows attackers to use the default password and gain access to the web UI...

7.6AI score0.00573EPSS
SaveExploits0References4
CVE
CVE
•added 2026/03/23 2:47 p.m.•69 views

CVE-2026-4404

Use of hard coded credentials in GoHarbor Harbor version 2.15.0 and below, allows attackers to use the default password and gain access to the web UI...

9.4CVSS7.6AI score0.00573EPSS
SaveExploits0References5Affected Software1
attackerkb
attackerkb
•added 2026/03/23 2:47 p.m.•14 views

CVE-2026-4404

Use of hard coded credentials in GoHarbor Harbor version 2.15.0 and below, allows attackers to use the default password and gain access to the web UI...

9.4CVSS7.6AI score0.00573EPSS
SaveExploits0References5Affected Software1
NVD
NVD
•added 2026/03/23 1:16 p.m.•15 views

CVE-2026-4588

A vulnerability was determined in kalcaddle kodbox 1.64. Impacted is the function shareSafeGroup of the file /workspace/source-code/app/controller/explorer/shareOut.class.php of the component Site-level API key Handler. This manipulation of the argument sk causes use of hard-coded cryptographic k...

6.3CVSS0.0042EPSS
SaveExploits0References4
NVD
NVD
•added 2026/03/23 1:16 p.m.•16 views

CVE-2026-1958

Use of hard-coded credentials in Klinika XP and KlinikaXP Insertino allowed an unauthorized attacker access to several internal services. Critically, this included access to the FTP server that hosted the application's update packages. The attacker with these credentials could upload a malicious...

8.7CVSS0.00272EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2026/03/23 12:46 p.m.•51 views

CVE-2026-4588 kalcaddle kodbox Site-level API key shareOut.class.php shareSafeGroup hard-coded key

A vulnerability was determined in kalcaddle kodbox 1.64. Impacted is the function shareSafeGroup of the file /workspace/source-code/app/controller/explorer/shareOut.class.php of the component Site-level API key Handler. This manipulation of the argument sk causes use of hard-coded cryptographic k...

6.3CVSS0.0042EPSS
SaveExploits0References4
CVE
CVE
•added 2026/03/23 12:46 p.m.•41 views

CVE-2026-4588

The CVE affects kalcaddle kodbox 1.64, specifically the Site-level API key Handler via the function shareSafeGroup in /workspace/source-code/app/controller/explorer/shareOut.class.php. The root cause is manipulation of the argument sk which leads to the use of a hard-coded cryptographic key. The ...

6.3CVSS4.7AI score0.0042EPSS
SaveExploits0References4
attackerkb
attackerkb
•added 2026/03/23 12:46 p.m.•12 views

CVE-2026-4588

A vulnerability was determined in kalcaddle kodbox 1.64. Impacted is the function shareSafeGroup of the file /workspace/source-code/app/controller/explorer/shareOut.class.php of the component Site-level API key Handler. This manipulation of the argument sk causes use of hard-coded cryptographic k...

6.3CVSS4.7AI score0.0042EPSS
SaveExploits0References4Affected Software1
Vulnrichment
Vulnrichment
•added 2026/03/23 12:40 p.m.•10 views

CVE-2026-1958 Hard-coded passwords in KlinikaXP

Use of hard-coded credentials in Klinika XP and KlinikaXP Insertino allowed an unauthorized attacker access to several internal services. Critically, this included access to the FTP server that hosted the application's update packages. The attacker with these credentials could upload a malicious...

8.7CVSS5.8AI score0.00272EPSS
SaveExploits0References2
CVE
CVE
•added 2026/03/23 12:40 p.m.•96 views

CVE-2026-1958

CVE-2026-1958 describes hard-coded credentials in KlinikaXP and KlinikaXP Insertino, enabling an unauthorized attacker to access internal services, notably the FTP server hosting update packages. The root cause is credentials embedded in the application, with exploitation potentially leading to u...

8.7CVSS5.8AI score0.00272EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2026/03/23 12:40 p.m.•9 views

CVE-2026-1958

Use of hard-coded credentials in Klinika XP and KlinikaXP Insertino allowed an unauthorized attacker access to several internal services. Critically, this included access to the FTP server that hosted the application's update packages. The attacker with these credentials could upload a malicious...

8.7CVSS5.8AI score0.00272EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2026/03/23 12:40 p.m.•51 views

CVE-2026-1958 Hard-coded passwords in KlinikaXP

Use of hard-coded credentials in Klinika XP and KlinikaXP Insertino allowed an unauthorized attacker access to several internal services. Critically, this included access to the FTP server that hosted the application's update packages. The attacker with these credentials could upload a malicious...

8.7CVSS0.00272EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/03/23 12:00 a.m.•7 views

CVE-2026-4404: Use of Hard-coded Credentials

Use of hard coded credentials in GoHarbor Harbor version 2.15.0 and below, allows attackers to use the default password and gain access to the web UI...

9.4CVSS7.6AI score0.00573EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2026/03/23 12:00 a.m.•28 views

TP-Link多款产品 安全漏洞

TP-LINK Archer is a series of routers produced by TP-LINK Corporation. Several TP-Link products have security vulnerabilities. These vulnerabilities stem from hard-coded encryption keys in the configuration mechanism, which may allow authenticated attackers to decrypt configuration files, modify...

8.5CVSS8.2AI score0.00133EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2026/03/23 12:00 a.m.•23 views

PT-2026-27124

A vulnerability was determined in kalcaddle kodbox 1.64. Impacted is the function shareSafeGroup of the file /workspace/source-code/app/controller/explorer/shareOut.class.php of the component Site-level API key Handler. This manipulation of the argument sk causes use of hard-coded cryptographic k...

6.3CVSS4.7AI score0.0042EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2026/03/23 12:00 a.m.•30 views

PT-2026-27137

Name of the Vulnerable Software and Affected Versions GoHarbor versions prior to 2.15.0 Description The use of hard-coded credentials in GoHarbor allows attackers to use the default password and gain access to the web user interface. Recommendations Update GoHarbor to version 2.15.0 or later...

9.4CVSS7.5AI score0.00573EPSS
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/03/23 12:00 a.m.•6 views

CVE-2026-4588: Use of Hard-coded Cryptographic Key

A vulnerability was determined in kalcaddle kodbox 1.64. Impacted is the function shareSafeGroup of the file /workspace/source-code/app/controller/explorer/shareOut.class.php of the component Site-level API key Handler. This manipulation of the argument sk causes use of hard-coded cryptographic k...

6.3CVSS4.7AI score0.0042EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/03/23 12:00 a.m.•7 views

CVE-2026-1958: Use of Hard-coded Credentials

Use of hard-coded credentials in Klinika XP and KlinikaXP Insertino allowed an unauthorized attacker access to several internal services. Critically, this included access to the FTP server that hosted the application's update packages. The attacker with these credentials could upload a malicious...

8.7CVSS5.8AI score0.00272EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/03/23 12:00 a.m.•31 views

PT-2026-27121

Name of the Vulnerable Software and Affected Versions KlinikaXP versions prior to 5.39.01.01 KlinikaXP Insertino versions prior to 3.1.0.1 Description The use of hard-coded credentials in KlinikaXP and KlinikaXP Insertino allowed an unauthorized attacker access to internal services, including the...

8.7CVSS5.8AI score0.00272EPSS
SaveExploits0References5
Rows per page
Query Builder