EUVD-2026-102491

go-ldap-admin through 0.6.2 embeds a hard-coded RSA private key, published in the public repository, that protects encrypted login passwords. Unauthenticated attackers who capture encrypted passwords can decrypt them offline or via the /base/decryptpwd endpoint, recovering cleartext LDAP...

EUVD-2026-102472

Jooan JA-A12 IP cameras with firmware 00920171107 and 05.02.31.105 contain a remote code execution vulnerability that allows unauthenticated attackers to run root commands via hard-coded credentials. Attackers send singleCMD=SetDiagMode to /goform/SingleHandlebyCommand with an attacker-chosen...

PT-2026-116011

netdisk-fast-download through 0.4.8 contains an information disclosure vulnerability that allows unauthenticated attackers to retrieve donated netdisk credentials via the /v2/randomAuth endpoint in ParserApi. Attackers can repeatedly call the endpoint and decrypt the encryptedAuth blob using the...

PT-2026-116092

DataBuff ai-apm-web through 0.1.10 contains a hard-coded default credentials vulnerability that allows unauthenticated attackers to gain administrator access using the built-in admin/Databuff@123 account. Attackers can POST these credentials to /webapi/api/v1/auth/login to obtain an administrator...

PT-2026-115398

Name of the Vulnerable Software and Affected Versions Moxa industrial computing products affected versions not specified Description Two separate issues affect the system. First, a hard-coded cryptographic key exists in the /usr/bin/sysman binary, which an unauthenticated attacker with adjacent...

PT-2026-116032

ZKEACMS through 4.4 contains an authentication bypass vulnerability that allows unauthenticated attackers to forge REST API JWT bearer tokens using a hard-coded HMAC-SHA256 signing key in JwtBearerDefaults.cs. Attackers can sign a token with the Name claim set to 'admin' to call ApiAuthorize...

PT-2026-115614

Name of the Vulnerable Software and Affected Versions EseeCloud affected versions not specified Description An attacker can gain unauthorized access to EseeCloud devices by utilizing a hard-coded credential to log in. Recommendations At the moment, there is no information about a newer version th...

CVE-2026-111367

BillionMail through 4.9 contains a hard-coded cryptographic key vulnerability that allows unauthenticated attackers to forge unsubscribe and subscribe-confirm JWTs by computing the key from shipped configuration constants. Attackers can submit forged tokens to /api/unsubscribe, /api/unsubscribene...

CVE-2026-111347

go-ldap-admin through 0.6.2 embeds a hard-coded RSA private key, published in the public repository, that protects encrypted login passwords. Unauthenticated attackers who capture encrypted passwords can decrypt them offline or via the /base/decryptpwd endpoint, recovering cleartext LDAP...

CVE-2026-111281

Jooan JA-A12 IP cameras with firmware 00920171107 and 05.02.31.105 contain a remote code execution vulnerability that allows unauthenticated attackers to run root commands via hard-coded credentials. Attackers send singleCMD=SetDiagMode to /goform/SingleHandlebyCommand with an attacker-chosen...

CVE-2026-111367

BillionMail through version 4.9 contains a hard-coded cryptographic key vulnerability (CWE-1394 ) in its JWT implementation. Attackers can compute the cryptographic key from shipped configuration constants to forge unsubscribe and subscribe-confirm tokens. By submitting these forged tokens to the...

CVE-2026-111367 BillionMail through 4.9 Forgeable JWTs via Default Signing Key

BillionMail through 4.9 contains a hard-coded cryptographic key vulnerability that allows unauthenticated attackers to forge unsubscribe and subscribe-confirm JWTs by computing the key from shipped configuration constants. Attackers can submit forged tokens to /api/unsubscribe, /api/unsubscribene...

CVE-2026-111367 BillionMail through 4.9 Forgeable JWTs via Default Signing Key

BillionMail through 4.9 contains a hard-coded cryptographic key vulnerability that allows unauthenticated attackers to forge unsubscribe and subscribe-confirm JWTs by computing the key from shipped configuration constants. Attackers can submit forged tokens to /api/unsubscribe, /api/unsubscribene...

CVE-2026-111347 go-ldap-admin through 0.6.2 Hard-Coded RSA Private Key via /base/decryptpwd

go-ldap-admin through 0.6.2 embeds a hard-coded RSA private key, published in the public repository, that protects encrypted login passwords. Unauthenticated attackers who capture encrypted passwords can decrypt them offline or via the /base/decryptpwd endpoint, recovering cleartext LDAP...

CVE-2026-111347 go-ldap-admin through 0.6.2 Hard-Coded RSA Private Key via /base/decryptpwd

go-ldap-admin through 0.6.2 embeds a hard-coded RSA private key, published in the public repository, that protects encrypted login passwords. Unauthenticated attackers who capture encrypted passwords can decrypt them offline or via the /base/decryptpwd endpoint, recovering cleartext LDAP...

CVE-2026-111281

The Jooan JA-A12 IP cameras, running firmware versions 009_20171107 and 05.02.31.105 , are vulnerable to an unauthenticated remote code execution (RCE) flaw. The root cause is the use of hard-coded credentials (CWE-798). An unauthenticated attacker can send a singleCMD=SetDiagMode request to the ...

CVE-2026-111281 Jooan JA-A12 Unauthenticated Root RCE via SetDiagMode Hard-Coded Credentials

Jooan JA-A12 IP cameras with firmware 00920171107 and 05.02.31.105 contain a remote code execution vulnerability that allows unauthenticated attackers to run root commands via hard-coded credentials. Attackers send singleCMD=SetDiagMode to /goform/SingleHandlebyCommand with an attacker-chosen...

CVE-2026-105035 EnergizeLab FirmwareUpdater Universal Hard-Coded AES Key

The EnergizeLab FirmwareUpdater AArch64 ELF, distributed in the CDN bin.zip uses a single hard-coded AES key shared by all installations. An attacker who recovers the key from the updater can decrypt and forge firmware packages for any device that trusts it...

CVE-2026-105035

The EnergizeLab FirmwareUpdater (AArch64 ELF, located in the bin.zip CDN file) is vulnerable to a hard-coded AES key (CWE-321) shared across all installations. An attacker capable of recovering this key from the updater can decrypt and forge firmware packages for any device that trusts the update...

CVE-2024-53522

CVE-2024-53522 Exploit PoC for CVE-2024-53522 This repository contains the Proof of Concept PoC for CVE-2024-53522 , a vulnerability discovered by Safecloud Co., Ltd. For detailed information about the vulnerability, please refer to our blog post: CVE-2024-53522: HOSxP Software 0day Discover &...