CVE-2017-6640-POC

CVE-2017-6640-POC CVE-2017-6640를 위한 개념 증명 Burp 확장기능으로 구현 Cisco Prime Data Center Network Manager DCNM는 정적 자격 증명을 구현합니다. 참조: https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170607-dcnm2 보다 구체적으로, 웹 UI는 사용자가 HTTP Digest 인증을 사용하여 인증하도록 요구합니다. 이 Burp 확장기능은 하드코딩된 HA1을...

EVlink City < R8 V3.4.0.1 - Authentication Bypass

A CWE-798: Use of Hard-coded Credentials vulnerability exists in EVlink City EVC1S22P4 / EVC1S7P4 all versions prior to R8 V3.4.0.1, EVlink Parking EVW2 / EVF2 / EV.2 all versions prior to R8 V3.4.0.1, and EVlink Smart Wallbox EVB1A all versions prior to R8 V3.4.0.1 that could allow an attacker t...

CVE-2025-65855

CVE-2025-65855 Множественные уязвимости OTA-обновления HelpFlash IoT Краткое описание Множественные уязвимости в механизме OTA-обновления прошивки устройства Netun Solutions HelpFlash IoT позволяют злоумышленнику с кратким физическим доступом выполнить произвольный код. Идентификатор CVE:...

CVE-2022-42176

PCSecure V5.0.8.xw - 구성 파일에 하드코딩된 자격 증명 사용으로 관리자 패널 접근 가능 요약 공급업체: PCTechSoft SAS 제품: PCSecure 영향을 받는 버전: 5.0.8.xw 코드네임: PapiQuieroPollo00 취약점 유형: 하드코딩된 자격 증명 사용 CWE-798 CVSSv3.1 벡터: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVSSv3.1 기본 점수: 7.8 높음 익스플로잇 가능 여부: 없음 CVE ID: CVE-2022-42176 설명...

ccs

코드 자격 증명 스캐너 이 스크립트는 대규모의 다양한 코드베이스에 대해 하드 코딩된 자격 증명 또는 구성 파일에 존재하는 자격 증명을 스캔하기 위한 것입니다. 이러한 자격 증명은 심각한 보안 문제를 나타내며, 탐지하고 관리하기가 매우 어려울 수 있습니다. 이 스크립트의 구체적인 초점은 CI/CD 파이프라인에서 개발 팀이 직접 사용할 수 있는 도구를 만들어, 코드에 자격 증명이 존재할 때 팀에 경고함으로써 이 문제에 대한 수정 프로세스를 관리하고, 팀이 문제가 발생하면 즉시 해결할 수 있도록 하는 것입니다. 이 도구를 특정 시점...

CVE-2026-75896

Use of Hard-coded Credentials vulnerability in TÜBİTAK BİLGEM Software Technologies Research Institute Liderahenk allows Try Common or Default Usernames and Passwords. This issue affects Liderahenk: before 3.5.5...

CVE-2026-75896

CVE-2026-75896 is a hard-coded LDAP credentials vulnerability in Liderahenk , a software product by TÜBİTAK BİLGEM (Software Technologies Research Institute). The embedded credentials allow an unauthenticated, remote attacker to attempt common or default usernames and passwords over the network. ...

CVE-2026-75896 Use of Hard-coded LDAP Credentials in TÜBİTAK BİLGEM's Liderahenk

Use of Hard-coded Credentials vulnerability in TÜBİTAK BİLGEM Software Technologies Research Institute Liderahenk allows Try Common or Default Usernames and Passwords. This issue affects Liderahenk: before 3.5.5...

EUVD-2026-66426

Use of Hard-coded Credentials vulnerability in TÜBİTAK BİLGEM Software Technologies Research Institute Liderahenk allows Try Common or Default Usernames and Passwords. This issue affects Liderahenk: before 3.5.5...

CVE-2026-12587

The vulnerability allows the unauthorised generation of physical access QR codes due to the use of hard-coded credentials within the application. The generation mechanism uses the 'badgenumber' parameter as the HMAC private key, the value of which remains static and is accessible via the API usin...

CVE-2026-12587 Embedded credentials in Virtuagym

The vulnerability allows the unauthorised generation of physical access QR codes due to the use of hard-coded credentials within the application. The generation mechanism uses the 'badgenumber' parameter as the HMAC private key, the value of which remains static and is accessible via the API usin...

CVE-2026-12587

CVE-2026-12587 affects the Virtuagym application, where a static, hard-coded badge_number parameter is used as the HMAC private key for generating physical access QR codes. This value is exposed via the API endpoint /club/_id_club_/member/_id_member_/resamania_qr_info, and the cryptographic logic...

EUVD-2026-66418

The vulnerability allows the unauthorised generation of physical access QR codes due to the use of hard-coded credentials within the application. The generation mechanism uses the 'badgenumber' parameter as the HMAC private key, the value of which remains static and is accessible via the API usin...

GitLab CE/EE - Hard-Coded Credentials

GitLab CE/EE contains a hard-coded credentials vulnerability. A hardcoded password was set for accounts registered using an OmniAuth provider e.g. OAuth, LDAP, SAML, allowing attackers to potentially take over accounts. This template attempts to passively identify vulnerable versions of GitLab...

CVE-2026-59769

FA-50 all versions contain hard-coded credentials. An attacker, who knows the credentials and has access to the vessel's internal network, can operate the settings screen using that credentials to alter the identification number...

EUVD-2026-65319

FA-50 all versions contain hard-coded credentials. An attacker, who knows the credentials and has access to the vessel's internal network, can operate the settings screen using that credentials to alter the identification number...

CVE-2026-59769

FA-50 all versions contain hard-coded credentials. An attacker, who knows the credentials and has access to the vessel's internal network, can operate the settings screen using that credentials to alter the identification number...

CVE-2026-59769

Furuno FA-50 (all versions) contains hard-coded credentials that, if known to an attacker with access to the vessel's internal network, allow operation of the settings screen to alter the identification number . The vulnerability is rated CVSS 3.1: 9.1 (CRITICAL) and CVSS 4.0: 8.8 (HIGH) , reflec...

PT-2026-81193

Name of the Vulnerable Software and Affected Versions FA-50 affected versions not specified Description The software contains hard-coded credentials. An attacker with access to the internal network of the vessel can use these credentials to access the settings screen and alter the identification...

CVE-2026-78062

A vulnerability was identified in vas3k TaxHacker up to 0.8.2. The affected element is the function envSchema.parse of the file lib/config.ts of the component JWT Secret Handler. The manipulation of the argument BETTERAUTHSECRET leads to hard-coded credentials. The attack can be initiated remotel...