ccs

代码凭据扫描器 此脚本旨在扫描大型且多样化的代码库，以查找硬编码凭据或配置文件中的凭据。这些构成严重的安全问题，且极难检测和管理。 本脚本的特定重点是创建一个可直接由开发团队在 CI/CD 流水线中使用的工具，通过当代码中存在凭据时向团队发出警报来管理此问题的修复过程，从而使团队能够立即修复出现的问题。 也可以将该工具用作针对此问题的点扫描器，但由于凭据很可能随时间推移重新出现在代码库中，我们强烈建议将脚本集成到 CI/CD 流程、自动化构建机制或团队定期执行的任何其他定期自动化扫描过程中。 编写此脚本时考虑以下目标： 基于正则表达式且语言无关，无需解析，以便适用于任何代码库...

CVE-2017-6640-POC

CVE-2017-6640-POC Prueba de concepto para CVE-2017-6640 como extensión de Burp Cisco Prime Data Center Network Manager DCNM implementa credenciales estáticas. Ver también: https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170607-dcnm2 Más específicamente, la interfa...

CVE-2022-42176

PCSecure V5.0.8.xw - 配置文件中使用硬编码凭据导致管理员面板访问 摘要 厂商: PCTechSoft SAS 产品: PCSecure 受影响版本: 5.0.8.xw 代号: PapiQuieroPollo00 漏洞 类型: 使用硬编码凭据 CWE-798 CVSSv3.1 向量: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVSSv3.1 基础评分: 7.8 高危 漏洞利用: 否 CVE ID: CVE-2022-42176 描述 PCSecure V5.0.8.xw 的配置文件 system.bmp...

GitLab CE/EE - Hard-Coded Credentials

GitLab CE/EE contains a hard-coded credentials vulnerability. A hardcoded password was set for accounts registered using an OmniAuth provider e.g. OAuth, LDAP, SAML, allowing attackers to potentially take over accounts. This template attempts to passively identify vulnerable versions of GitLab...

EVlink City < R8 V3.4.0.1 - Authentication Bypass

A CWE-798: Use of Hard-coded Credentials vulnerability exists in EVlink City EVC1S22P4 / EVC1S7P4 all versions prior to R8 V3.4.0.1, EVlink Parking EVW2 / EVF2 / EV.2 all versions prior to R8 V3.4.0.1, and EVlink Smart Wallbox EVB1A all versions prior to R8 V3.4.0.1 that could allow an attacker t...

CVE-2026-66890

The affected products use hard-coded credentials, which could allow remote access to files with root privileges where FTP is reachable...

CVE-2026-68950

The affected products use hard-coded credentials, which could allow an attacker to run the ftpd service as root, providing remote root file access where FTP is reachable...

CVE-2026-68950 Use of Hard-coded Credentials in Digital Watchdog VMAX DVR and NVR Product Lineups

The affected products use hard-coded credentials, which could allow an attacker to run the ftpd service as root, providing remote root file access where FTP is reachable...

EUVD-2026-79950

The affected products use hard-coded credentials, which could allow an attacker to run the ftpd service as root, providing remote root file access where FTP is reachable...

CVE-2026-68950

CVE-2026-68950 affects Digital Watchdog VMAX DVR and NVR product lineups. The root cause is hard-coded credentials , which allow an attacker to run the ftpd service as root , granting remote root file access where FTP is reachable. The vulnerability is rated HIGH severity (CVSS 3.1: 8.8, CVSS 4.0...

CVE-2026-66890 Use of Hard-coded Credentials in Digital Watchdog VMAX DVR and NVR Product Lineups

The affected products use hard-coded credentials, which could allow remote access to files with root privileges where FTP is reachable...

EUVD-2026-79947

The affected products use hard-coded credentials, which could allow remote access to files with root privileges where FTP is reachable...

CVE-2026-66890

Digital Watchdog VMAX DVR and NVR devices are affected by a hard-coded credentials vulnerability that allows an attacker with adjacent-network access to gain remote file access with root privileges when the device's FTP service is reachable. The CISA-assigned CVSS 3.1 score is 9.6 (CRITICAL) , wi...

CVE-2025-70962

CVE-2025-70962 Uso de credenciales codificadas en el servicio RTSP de la cámara IP ZOSI C519M Campo| Valor ---|--- ID CVE| CVE-2025-70962 Fabricante| ZOSI Technology Producto| Cámara IP inteligente ZOSI C519M también listada como modelo 1NC-519M Versiones afectadas| Firmware V4.2.8.832C01450BA...

CVE-2026-90509

A weakness has been identified in dromara orion-visor up to 2.5.7. Affected by this issue is the function ExposeApiAspect.beforeExposeApi of the file ExposeApiAspect.java. Executing a manipulation can lead to hard-coded credentials. The attack can be executed remotely. The exploit has been made...

CVE-2026-90509

A hard-coded credential weakness (CWE-798) exists in dromara orion-visor versions up to 2.5.7 , specifically in the function ExposeApiAspect.beforeExposeApi within ExposeApiAspect.java. The vulnerability allows a remote, unauthenticated attacker to exploit a hardcoded default token for authentica...

CVE-2026-90509 dromara orion-visor ExposeApiAspect.java ExposeApiAspect.beforeExposeApi hard-coded credentials

A weakness has been identified in dromara orion-visor up to 2.5.7. Affected by this issue is the function ExposeApiAspect.beforeExposeApi of the file ExposeApiAspect.java. Executing a manipulation can lead to hard-coded credentials. The attack can be executed remotely. The exploit has been made...

EUVD-2026-76982

A weakness has been identified in dromara orion-visor up to 2.5.7. Affected by this issue is the function ExposeApiAspect.beforeExposeApi of the file ExposeApiAspect.java. Executing a manipulation can lead to hard-coded credentials. The attack can be executed remotely. The exploit has been made...

CVE-2025-65855

CVE-2025-65855 HelpFlash IoT OTA更新多种漏洞 摘要 Netun Solutions HelpFlash IoT的OTA固件更新机制中存在多个漏洞，攻击者只需短暂的物理接触即可执行任意代码。 CVE ID: CVE-2025-65855 严重性: 高 CVSS v3.1 评分: 7.6 研究人员评估 - 待NVD分析 CVSS 向量: CVSS:3.1/AV:P/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVSS 分解 攻击向量 AV: 物理 - 短暂物理接触（约10秒） 攻击复杂度 AC: 低 - 硬编码凭证使攻击简单直接 所需权限 P...

epson-eh-tw5350-advisories

Epson EH-TW5350 Security Advisories B-BEAM-BOB Three vulnerabilities discovered in the Epson EH-TW5350 projector firmware 150075647YWWV110 by team B-BEAM-BOB during the KITRI Best of the Best BoB program, 2021. CVE IDs were assigned by MITRE on 2021-12-21 but the records remained unpublished unti...