Lucene search
+L

11298 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/05/19 12:00 a.m.•7 views

CVE-2026-8605: Use of Hard-coded Credentials

In ScadaBR version 1.2.0, a Use of Hard-Coded Credentials vulnerability could allow an attacker to access the SCADA system as admin...

9.8CVSS5.9AI score0.00495EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/05/19 12:00 a.m.•30 views

PT-2026-41991

Name of the Vulnerable Software and Affected Versions ScadaBR version 1.2.0 Description The use of hard-coded credentials allows an attacker to gain administrative access to the SCADA system. Recommendations At the moment, there is no information about a newer version that contains a fix for this...

9.8CVSS5.9AI score0.00495EPSS
SaveExploits0References7
CNNVD
CNNVD
•added 2026/05/19 12:00 a.m.•25 views

Sensorweb ScadaBR 信任管理问题漏洞

Sensorweb ScadaBR is a set of open-source software developed by Sensorweb Corporation for creating automated data acquisition and monitoring applications. Version ScadaBR 1.2.0 contains a vulnerability related to trust management. This vulnerability arises from the use of hard-coded credentials,...

9.8CVSS5.8AI score0.00495EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2026/05/19 12:00 a.m.•27 views

Apache OFBiz 安全漏洞

Apache OFBiz is an ERP system developed by the Apache Foundation in the United States. This system provides a complete set of Java-based web application components and tools. Versions of Apache OFBiz prior to 24.09.06 contained security vulnerabilities, which were caused by the use of hard-coded...

9.1CVSS5.8AI score0.00559EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/05/19 12:00 a.m.•4 views

CVE-2026-31986: Use of Hard-coded Cryptographic Key

Use of Hard-coded Cryptographic Key vulnerability in Apache OFBiz. This issue affects Apache OFBiz: before 24.09.06. Users are recommended to upgrade to version 24.09.06, which fixes the issue...

9.1CVSS5.8AI score0.00559EPSS
SaveExploits0References3
NVD
NVD
•added 2026/05/17 8:16 a.m.•29 views

CVE-2026-8739

A vulnerability was detected in Sanluan PublicCMS 5.202506.d. The affected element is the function getSignKey of the file publiccms-core/src/main/java/com/publiccms/logic/component/config/SafeConfigComponent.java. The manipulation of the argument privatefilekey results in use of hard-coded...

6.9CVSS0.00462EPSS
SaveExploits0References4
CVE
CVE
•added 2026/05/17 7:45 a.m.•54 views

CVE-2026-8739

Sanluan PublicCMS 5.202506.d is affected by CVE-2026-8739 in SafeConfigComponent.getSignKey. Manipulating the privatefile_key argument leads to use of a hard-coded cryptographic key, enabling a remote attack. The exploit is public and may be used; vendor contact about disclosure was unresponsive....

6.9CVSS5.7AI score0.00462EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2026/05/17 7:45 a.m.•87 views

CVE-2026-8739 Sanluan PublicCMS SafeConfigComponent.java getSignKey hard-coded key

A vulnerability was detected in Sanluan PublicCMS 5.202506.d. The affected element is the function getSignKey of the file publiccms-core/src/main/java/com/publiccms/logic/component/config/SafeConfigComponent.java. The manipulation of the argument privatefilekey results in use of hard-coded...

6.9CVSS0.00462EPSS
SaveExploits0References4
attackerkb
attackerkb
•added 2026/05/17 7:45 a.m.•19 views

CVE-2026-8739

A vulnerability was detected in Sanluan PublicCMS 5.202506.d. The affected element is the function getSignKey of the file publiccms-core/src/main/java/com/publiccms/logic/component/config/SafeConfigComponent.java. The manipulation of the argument privatefilekey results in use of hard-coded...

6.9CVSS5.8AI score0.00462EPSS
SaveExploits0References4Affected Software1
EUVD
EUVD
•added 2026/05/17 7:45 a.m.•44 views

EUVD-2026-30687

A vulnerability was detected in Sanluan PublicCMS 5.202506.d. The affected element is the function getSignKey of the file publiccms-core/src/main/java/com/publiccms/logic/component/config/SafeConfigComponent.java. The manipulation of the argument privatefilekey results in use of hard-coded...

6.9CVSS5.8AI score0.00462EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
•added 2026/05/17 7:45 a.m.•16 views

CVE-2026-8739 Sanluan PublicCMS SafeConfigComponent.java getSignKey hard-coded key

A vulnerability was detected in Sanluan PublicCMS 5.202506.d. The affected element is the function getSignKey of the file publiccms-core/src/main/java/com/publiccms/logic/component/config/SafeConfigComponent.java. The manipulation of the argument privatefilekey results in use of hard-coded...

6.9CVSS5.7AI score0.00462EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2026/05/17 12:00 a.m.•33 views

PT-2026-41525

A vulnerability was detected in Sanluan PublicCMS 5.202506.d. The affected element is the function getSignKey of the file publiccms-core/src/main/java/com/publiccms/logic/component/config/SafeConfigComponent.java. The manipulation of the argument privatefile key results in use of hard-coded...

6.9CVSS5.8AI score0.00462EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/05/17 12:00 a.m.•5 views

CVE-2026-8739: Use of Hard-coded Cryptographic Key

A vulnerability was detected in Sanluan PublicCMS 5.202506.d. The affected element is the function getSignKey of the file publiccms-core/src/main/java/com/publiccms/logic/component/config/SafeConfigComponent.java. The manipulation of the argument privatefilekey results in use of hard-coded...

6.9CVSS5.7AI score0.00462EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2026/05/14 7:58 p.m.•28 views

CVE-2026-44278

A use of hard-coded cryptographic key vulnerability in Fortinet FortiClientWindows 7.4.0 through 7.4.2, FortiClientWindows 7.2 all versions may allow attacker to information disclosure via...

5.5CVSS5.8AI score0.00139EPSS
SaveExploits0References1
Veracode
Veracode
•added 2026/05/14 6:08 p.m.•33 views

Use Of Hard-coded Credentials

GoHarbor Harbor is vulnerable to Use of Hard-coded Credentials. The vulnerability is due to the presence of default hard-coded credentials in the application, which allows an attacker to gain unauthorized access to the web UI using known passwords...

9.4CVSS7.6AI score0.00573EPSS
SaveExploits0References6Affected Software1
NVD
NVD
•added 2026/05/14 11:16 a.m.•38 views

CVE-2025-68421

Comarch ERP Optima client makes use of a hard-coded password for a database user. These credentials cannot be changed. It is possible for a remote attacker to gain an access to the database with elevated privileges including executing system commands on a server. This issue has been fixed in...

8.7CVSS0.00229EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2026/05/14 10:35 a.m.•46 views

CVE-2025-68421

Comarch ERP Optima client makes use of a hard-coded password for a database user. These credentials cannot be changed. It is possible for a remote attacker to gain an access to the database with elevated privileges including executing system commands on a server. This issue has been fixed in...

8.7CVSS5.8AI score0.00229EPSS
SaveExploits0References3
EUVD
EUVD
•added 2026/05/14 10:35 a.m.•27 views

EUVD-2025-209839

Comarch ERP Optima client makes use of a hard-coded password for a database user. These credentials cannot be changed. It is possible for a remote attacker to gain an access to the database with elevated privileges including executing system commands on a server. This issue has been fixed in...

8.7CVSS5.8AI score0.00229EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/05/14 12:00 a.m.•3 views

CVE-2025-68421: Use of Hard-coded Credentials

Comarch ERP Optima client makes use of a hard-coded password for a database user. These credentials cannot be changed. It is possible for a remote attacker to gain an access to the database with elevated privileges including executing system commands on a server. This issue has been fixed in...

8.7CVSS5.9AI score0.00229EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2026/05/14 12:00 a.m.•25 views

Comarch ERP Optima 信任管理问题漏洞

Comarch ERP Optima is an ERP and financial management system for small and medium-sized enterprises developed by the Polish company Comarch. Versions of Comarch ERP Optima prior to 2026.4 contained a vulnerability related to trust management. This vulnerability stemmed from the use of hard-coded...

8.7CVSS5.9AI score0.00229EPSS
SaveExploits0References1
Rows per page
Query Builder