11692 matches found
CVE-2025-30125: Use of Hard-coded Credentials
An issue was discovered on Marbella KR8s Dashcam FF 2.0.8 devices. All dashcams were shipped with the same default credentials of 12345678, which creates an insecure-by-default condition. For users who change their passwords, it's limited to 8 characters. These short passwords can be cracked in 8...
CVE-2025-8231
A vulnerability, which was classified as critical, has been found in D-Link DIR-890L up to 111b04. This issue affects some unknown processing of the file rgbin of the component UART Port. The manipulation leads to hard-coded credentials. It is possible to launch the attack on the physical device...
CVE-2025-8231
A vulnerability, which was classified as critical, has been found in D-Link DIR-890L up to 111b04. This issue affects some unknown processing of the file rgbin of the component UART Port. The manipulation leads to hard-coded credentials. It is possible to launch the attack on the physical device...
CVE-2025-8231 D-Link DIR-890L UART Port rgbin hard-coded credentials
A vulnerability, which was classified as critical, has been found in D-Link DIR-890L up to 111b04. This issue affects some unknown processing of the file rgbin of the component UART Port. The manipulation leads to hard-coded credentials. It is possible to launch the attack on the physical device...
CVE-2025-8231 D-Link DIR-890L UART Port rgbin hard-coded credentials
A vulnerability, which was classified as critical, has been found in D-Link DIR-890L up to 111b04. This issue affects some unknown processing of the file rgbin of the component UART Port. The manipulation leads to hard-coded credentials. It is possible to launch the attack on the physical device...
CVE-2025-8231
CVE-2025-8231 affects the D-Link DIR-890L, up to firmware 111b04, where the issue involves processing the rgbin file in the UART Port. The root cause described across connected documents is hard-coded credentials exposed via this path, enabling a local/physical attack on the device. Public disclo...
CVE-2025-8231: Use of Hard-coded Credentials
A vulnerability, which was classified as critical, has been found in D-Link DIR-890L up to 111b04. This issue affects some unknown processing of the file rgbin of the component UART Port. The manipulation leads to hard-coded credentials. It is possible to launch the attack on the physical device...
PT-2025-31005 · D Link · Dir-890L
Name of the Vulnerable Software and Affected Versions: D-Link DIR-890L versions up to 111b04 Description: A critical issue has been identified in D-Link DIR-890L. The vulnerability relates to the processing of the rgbin file within the UART Port component, leading to the exposure of hard-coded...
D-Link DIR-890L security vulnerabilities
The D-Link DIR-890L is a wireless router from China-based AUO D-Link. A security vulnerability exists in the D-Link DIR-890L 111b04 and prior versions, which originates from the presence of hard-coded credentials in the file rgbin in the component UART Port...
CVE-2025-54454
Use of Hard-coded Credentials vulnerability in Samsung Electronics MagicINFO 9 Server allows Authentication Bypass.This issue affects MagicINFO 9 Server: less than 21.1080.0...
CVE-2025-54455
Use of Hard-coded Credentials vulnerability in Samsung Electronics MagicINFO 9 Server allows Authentication Bypass.This issue affects MagicINFO 9 Server: less than 21.1080.0...
CVE-2025-45466: Use of Hard-coded Credentials
Unitree Go1 = Go120220511 is vulnerale to Incorrect Access Control due to authentication credentials being hardcoded in plaintext...
Unitree Go1 security vulnerabilities
Unitree Go1 is a bionic quadrupedal robot from the Chinese company Yu Shu Unitree. A security vulnerability exists in Unitree Go1 Go120220511 and prior versions, which stems from hard-coded credentials and could lead to improper access control...
Use Of Hard-coded Credentials
@haxtheweb/haxcms-nodejs is vulnerable to Use of Hard-coded Credentials. The vulnerability is due to hardcoded default credentials and JWT private keys, followed by the lack of prompts or UI options to change them, which allows an attacker to gain unauthorized access to user or superuser accounts...
Unspecified Vulnerability in SAMSUNG MagicINFO 9 Server
SAMSUNG MagicINFO 9 Server is an enterprise-class digital signage content management and device monitoring platform from Samsung Korea. A security vulnerability exists in SAMSUNG MagicINFO 9 Server, which stems from the use of hard-coded credentials, and can be exploited by an attacker to cause...
Unspecified Vulnerability in SAMSUNG MagicINFO 9 Server (CNVD-2025-20070)
SAMSUNG MagicINFO 9 Server is an enterprise-class digital signage content management and device monitoring platform from Samsung Korea. A security vulnerability exists in SAMSUNG MagicINFO 9 Server, which stems from the use of hard-coded credentials, and can be exploited by an attacker to cause...
HCL iAutomate security vulnerabilities
HCL iAutomate is a powerful and intelligent runbook automation product from HCL India. There is a security vulnerability in HCL iAutomate that stems from hard-coded credentials that could lead to sensitive data leakage...
CVE-2025-4130
Use of Hard-coded Credentials vulnerability in PAVO Inc. PAVO Pay allows Read Sensitive Constants Within an Executable. This issue affects PAVO Pay: before 13.05.2025...
CVE-2025-4049
Use of hard-coded, the same among all vulnerable installations SQLite credentials vulnerability in SIGNUM-NET FARA allows to read and manipulate local-stored database.This issue affects FARA: through 5.0.80.34...