5878 matches found
CVE-2025-58659: Use of Hard-coded Credentials
Use of Hard-coded Credentials vulnerability in Essekia Helpie FAQ helpie-faq allows Retrieve Embedded Sensitive Data.This issue affects Helpie FAQ: from n/a through = 1.45...
CVE-2025-57601: Use of Hard-coded Credentials
AiKaan Cloud Controller uses a single hardcoded SSH private key and the username proxyuser for remote terminal access to all managed IoT/edge devices. When an administrator initiates "Open Remote Terminal" from the AiKaan dashboard, the controller sends this same static private key to the target...
WordPress plugin WP Project Manager 信任管理问题漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A vulnerabilit...
CVE-2025-58656: Use of Hard-coded Credentials
Use of Hard-coded Credentials vulnerability in Risto Niinemets Estonian Shipping Methods for WooCommerce estonian-shipping-methods-for-woocommerce allows Retrieve Embedded Sensitive Data.This issue affects Estonian Shipping Methods for WooCommerce: from n/a through = 1.7.2...
PT-2025-38931
Name of the Vulnerable Software and Affected Versions weDevs WP Project Manager versions through 2.6.25 Description The software contains hard-coded credentials, potentially allowing retrieval of embedded sensitive data. Recommendations Update weDevs WP Project Manager to a version later than...
PT-2025-38945
Name of the Vulnerable Software and Affected Versions Estonian Shipping Methods for WooCommerce versions through 1.7.2 Description The Estonian Shipping Methods for WooCommerce software contains hard-coded credentials, potentially allowing retrieval of embedded sensitive data. Recommendations...
PPress 安全漏洞
PPress is a Python-based blogging CMS system by the individual developer yandaozi. A security vulnerability exists in PPress version 0.0.9, which stems from hard-coded credentials included in the default configuration...
CVE-2024-48842
Use of Hard-coded Credentials vulnerability in ABB FLXEON.This issue affects FLXEON: through 9.3.5 and newer versions...
CVE-2025-52159: Use of Hard-coded Credentials
Hardcoded credentials in default configuration of PPress 0.0.9...
CVE-2024-48842
Use of Hard-coded Credentials vulnerability in ABB FLXEON.This issue affects FLXEON: through 9.3.5 and newer versions...
CVE-2024-48842
CVE-2024-48842 affects ABB FLXEON controllers (through 9.3.5 and newer). The vulnerability arises from hard-coded credentials in the product, combined with improper input validation leading to remote code execution. The ICSA/CISA summary notes credentials handling weaknesses (passwords may be sto...
ABB FLXEON 信任管理问题漏洞
ABB FLXEON is a family of building automation controllers from ABB Switzerland. ABB FLXEON 9.3.5 and earlier versions and later versions are vulnerable to a trust management issue that stems from the use of hard-coded credentials...
PT-2025-38158
Name of the Vulnerable Software and Affected Versions: ABB FLXEON versions through 9.3.5 and newer versions Description: The product contains hard-coded credentials. Recommendations: Versions through 9.3.5 and newer versions: At the moment, there is no information about a newer version that...
CVE-2024-48842: Use of Hard-coded Credentials
Use of Hard-coded Credentials vulnerability in ABB FLXEON.This issue affects FLXEON: through 9.3.5 and newer versions...
CVE-2025-57577: Use of Hard-coded Credentials
An issue in H3C Device R365V300R004 allows a remote attacker to execute arbitrary code via the default password. NOTE: the Supplier's position is that their "product lines enforce or clearly prompt users to change any initial credentials upon first use. At most, this would be a case of...
CVE-2025-57579: Use of Hard-coded Credentials
An issue in TOTOLINK Wi-Fi 6 Router Series Device X2000R-Gh-V2.0.0 allows a remote attacker to execute arbitrary code via the default password...
CVE-2025-57578: Use of Hard-coded Credentials
An issue in H3C Magic M Device M2V100R006 allows a remote attacker to execute arbitrary code via the default password...
CVE-2025-55047
CWE-798 Use of Hard-coded Credentials...
MasterLife Solutions Dietly App 安全漏洞
MasterLife Solutions Dietly App is a diet management application from MasterLife Solutions, Poland. A security vulnerability exists in MasterLife Solutions Dietly App version v1.25.0, which stems from hard-coded credentials and could lead to the disclosure of sensitive information...