PT-2022-26299 · Pctechsoft · Pcsecure

Name of the Vulnerable Software and Affected Versions: PCTechSoft PCSecure version 5.0.8.xw Description: The issue is related to the use of hard-coded credentials in configuration files, which can lead to unauthorized access to the admin panel. Recommendations: For PCTechSoft PCSecure version...

CVE-2022-41540: Use of Hard-coded Credentials

The web app client of TP-Link AX10v1 V1211117 uses hard-coded cryptographic keys when communicating with the router. Attackers who are able to intercept the communications between the web client and router through a man-in-the-middle attack can then obtain the sequence key via a brute-force attac...

CVE-2022-42980: Use of Hard-coded Credentials

go-admin aka GO Admin 2.0.12 uses the string go-admin as a production JWT key...

CVE-2022-38420

Adobe ColdFusion versions Update 14 and earlier and Update 4 and earlier are affected by a Use of Hard-coded Credentials vulnerability that could result in application denial-of-service by gaining access to start/stop arbitrary services. Exploitation of this issue does not require user interactio...

CVE-2022-38420

Adobe ColdFusion versions Update 14 and earlier and Update 4 and earlier are affected by a Use of Hard-coded Credentials vulnerability that could result in application denial-of-service by gaining access to start/stop arbitrary services. Exploitation of this issue does not require user interactio...

CVE-2022-38420

CVE-2022-38420 affects Adobe ColdFusion Update 14 and earlier, and Update 4 and earlier. It is a Use of Hard-coded Credentials vulnerability that could cause application denial-of-service by granting access to start/stop arbitrary services; exploitation does not require user interaction. Widely c...

CVE-2022-38420 Adobe ColdFusion Use of Hard-coded Credentials Application denial-of-service

Adobe ColdFusion versions Update 14 and earlier and Update 4 and earlier are affected by a Use of Hard-coded Credentials vulnerability that could result in application denial-of-service by gaining access to start/stop arbitrary services. Exploitation of this issue does not require user interactio...

CVE-2022-38420 Adobe ColdFusion Use of Hard-coded Credentials Application denial-of-service

Adobe ColdFusion versions Update 14 and earlier and Update 4 and earlier are affected by a Use of Hard-coded Credentials vulnerability that could result in application denial-of-service by gaining access to start/stop arbitrary services. Exploitation of this issue does not require user interactio...

EUVD-2022-41005

Adobe ColdFusion versions Update 14 and earlier and Update 4 and earlier are affected by a Use of Hard-coded Credentials vulnerability that could result in application denial-of-service by gaining access to start/stop arbitrary services. Exploitation of this issue does not require user interactio...

Adobe ColdFusion Admin Component Use of Hard-coded Credentials Authentication Bypass Vulnerability

This vulnerability allows remote attackers to bypass authentication on affected installations of Adobe ColdFusion. Authentication is not required to exploit this vulnerability. The specific flaw exists within the Admin Component service. The service uses a hard-coded password for the administrato...

Adobe ColdFusion trust management issue vulnerability

Adobe ColdFusion is a rapid application development platform from Adobe, which includes an integrated development environment and scripting language. The platform includes an integrated development environment and scripting language.Adobe ColdFusion has a trust management issue vulnerability that...

CVE-2022-38420: Use of Hard-coded Credentials

Adobe ColdFusion versions Update 14 and earlier and Update 4 and earlier are affected by a Use of Hard-coded Credentials vulnerability that could result in application denial-of-service by gaining access to start/stop arbitrary services. Exploitation of this issue does not require user interactio...

Adobe ColdFusion 信任管理问题漏洞

Adobe ColdFusion is a rapid application development platform from Adobe, which includes an integrated development environment and scripting language. The platform includes an integrated development environment and scripting language.Adobe ColdFusion has a trust management issue vulnerability that...

Buffalo Trust Management Issue Vulnerability

Buffalo firmware is a network device from Buffalo, a Japanese company. Buffalo Wi-Fi devices are vulnerable to a trust management issue that stems from the use of hard-coded credentials, which can be exploited by an attacker on a neighboring network to modify the device's configuration...

Authentication Bypass

github.com/flyteorg/flyteadmin is vulnerable to authentication bypass. The vulnerability exists in config.go due to the use of hard-coded credentials without changing the default client id hashes, which allows an attacker to access for flyte propeller after turning on authentication via a...

CVE-2022-39273: Use of Hard-coded Credentials

FlyteAdmin is the control plane for the data processing platform Flyte. Users who enable the default Flyte’s authorization server without changing the default clientid hashes will be exposed to the public internet. In an effort to make enabling authentication easier for Flyte administrators, the...

Multiple vulnerabilities in Buffalo network devices

Overview Multiple network devices provided by Buffalo Inc. contain multiple vulnerabilities listed below. Hidden Functionality CWE-912 - CVE-2022-39044 Use of Hard-coded Credentials CWE-798 - CVE-2022-34840 Authentication Bypass CWE-288 - CVE-2022-4096 Chuya Hayakawa of 00One, Inc. reported these...

Buffalo network devices 信任管理问题漏洞

Buffalo firmware is a network device from Buffalo, a Japanese company. Buffalo Wi-Fi devices are vulnerable to a trust management issue that stems from the use of hard-coded credentials, which can be exploited by an attacker on a neighboring network to modify the device's configuration...

BD Totalys MultiProcessor

1. EXECUTIVE SUMMARY CVSS v3 6.6 ATTENTION: Low attack complexity Vendor: Becton, Dickinson and Company BD Equipment: Totalys MultiProcessor Vulnerability: Use of Hard-coded Credentials 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to access, modify, or...

BD Totalys MultiProcessor 信任管理问题漏洞

The BD Totalys MultiProcessor is a medical device from Bidi Medical BD, USA. combines full automation of the cell enrichment process for cervical samples, a strict chain of custody, and customizable small samples for ancillary testing. The BD Totalys MultiProcessor suffers from a trust management...