PT-2025-9648

Name of the Vulnerable Software and Affected Versions Docusnap versions prior to 14 Docusnap version 13.0.1440.24261 and earlier Description The issue is caused by a hard-coded cryptographic key in Docusnap, which can be used to decrypt inventory files containing sensitive information such as...

CVE-2025-26849

There is a Hard-coded Cryptographic Key in Docusnap 13.0.1440.24261, and earlier and later versions. This key can be used to decrypt inventory files that contain sensitive information such as firewall rules...

DocuSnap security vulnerabilities

DocuSnap is an app from DocuSnap that turns mobile devices into portable scanners. Used to scan, edit, store and share documents to PDF. A security vulnerability exists in DocuSnap 13.0.1440.24261 and earlier versions, which stems from the use of hard-coded encryption keys...

CVE-2025-1879

A vulnerability was found in i-Drive i11 and i12 up to 20250227 and classified as problematic. This issue affects some unknown processing of the component APK. The manipulation leads to hard-coded credentials. It is possible to launch the attack on the physical device. It was not possible to...

CVE-2025-1879

A vulnerability was found in i-Drive i11 and i12 up to 20250227 and classified as problematic. This issue affects some unknown processing of the component APK. The manipulation leads to hard-coded credentials. It is possible to launch the attack on the physical device. It was not possible to...

CVE-2025-1879 i-Drive i11/i12 APK hard-coded credentials

A vulnerability was found in i-Drive i11 and i12 up to 20250227 and classified as problematic. This issue affects some unknown processing of the component APK. The manipulation leads to hard-coded credentials. It is possible to launch the attack on the physical device. It was not possible to...

CVE-2025-1879 i-Drive i11/i12 APK hard-coded credentials

A vulnerability was found in i-Drive i11 and i12 up to 20250227 and classified as problematic. This issue affects some unknown processing of the component APK. The manipulation leads to hard-coded credentials. It is possible to launch the attack on the physical device. It was not possible to...

CVE-2025-1879

CVE-2025-1879 affects i-Drive i11/i12 APK (up to 20250227). Description: hard-coded credentials allow a direct attack on the physical device; maintainer unknown and product appears end-of-life. No explicit exploit/vector details or mitigation are provided in the supplied documents; connected sour...

PT-2025-9793

Name of the Vulnerable Software and Affected Versions Weidmueller PROCON-WIN versions prior to 5.7.14.1 Description The issue is related to the use of hard-coded credentials in the PROCON-WIN SCADA system, allowing an unauthenticated remote attacker to gain full administration privileges on the...

PT-2025-9551

Name of the Vulnerable Software and Affected Versions i-Drive i11 and i12 up to 20250227 Description A vulnerability was found that affects some unknown processing of the component APK, leading to hard-coded credentials. The manipulation can be launched on the physical device. Recommendations For...

i-Drive i11 and i-Drive i12 security vulnerabilities

The i-Drive i11 and i-Drive i12 are both a car recorder from i-Drive, Inc. A security vulnerability exists in i-Drive i11 and i-Drive i12 20250227 and prior versions, which stems from hard-coded credentials and could lead to a physical device attack...

CVE-2025-1879: Use of Hard-coded Credentials

A vulnerability was found in i-Drive i11 and i12 up to 20250227 and classified as problematic. This issue affects some unknown processing of the component APK. The manipulation leads to hard-coded credentials. It is possible to launch the attack on the physical device. It was not possible to...

CVE-2024-9334

Use of Hard-coded Credentials, Storage of Sensitive Data in a Mechanism without Access Control vulnerability in E-Kent Pallium Vehicle Tracking allows Authentication Bypass. This issue affects Pallium Vehicle Tracking: before 17.10.2024...

12,000+ API Keys and Passwords Found in Public Datasets Used for LLM Training

A dataset used to train large language models LLMs has been found to contain nearly 12,000 live secrets, which allow for successful authentication. The findings once again highlight how hard-coded credentials pose a severe security risk to users and organizations alike, not to mention compounding...

TRENDnet TEW-929DRU security vulnerabilities

The TRENDnet TEW-929DRU is a wireless router from TRENDnet. The TRENDnet TEW-929DRU suffers from a hard-coded password vulnerability that can be exploited by an attacker to log in as root...

Bosscomm IF740 information leakage vulnerability

Bosscomm IF740 is an OBD2 scanner for automotive diagnostics from Bosscomm. It can read the codes of the car engine, SRS, ABS, TCM, and so on. A security vulnerability exists in the Bosscomm IF740 that stems from a hard-coded plaintext credential disclosure...

CVE-2024-9334

Use of Hard-coded Credentials, Storage of Sensitive Data in a Mechanism without Access Control vulnerability in E-Kent Pallium Vehicle Tracking allows Authentication Bypass. This issue affects Pallium Vehicle Tracking: before 17.10.2024...

CVE-2024-9334

Use of Hard-coded Credentials, Storage of Sensitive Data in a Mechanism without Access Control vulnerability in E-Kent Pallium Vehicle Tracking allows Authentication Bypass. This issue affects Pallium Vehicle Tracking: before 17.10.2024...

CVE-2024-9334 Information Disclosure in E-Kent's Pallium Vehicle Tracking

Use of Hard-coded Credentials, Storage of Sensitive Data in a Mechanism without Access Control vulnerability in E-Kent Pallium Vehicle Tracking allows Authentication Bypass. This issue affects Pallium Vehicle Tracking: before 17.10.2024...

CVE-2024-9334

CVE-2024-9334 concerns the E‑Kent Pallium Vehicle Tracking system, where the root cause is the use of hard‑coded credentials and storage of sensitive data in a mechanism without proper access control. This combination enables an authentication bypass , potentially allowing unauthorized access to ...