Lucene search
+L

3111 matches found

Cvelist
Cvelist
added 4 days ago33 views

CVE-2026-6374 Hardcoded Credentials in Zyxel WAH7601 Router

Use of Hard-coded Credentials vulnerability in Zyxel Networks WAH7601 allows Read Sensitive Constants Within an Executable. This issue affects WAH7601: through 20.07.2026...

7.3CVSS0.00231EPSS
SaveExploits0References1
CVE
CVE
added 4 days ago24 views

CVE-2026-6374

The vulnerability CVE-2026-6374 affects Zyxel Networks WAH7601 routers (through 20.07.2026). The issue is a Hardcoded Credentials flaw that enables reading sensitive constants within an executable. CVSS 3.1 base score 7.3 (HIGH) with Attack Vector Adjacent, Attack Complexity Low, Privileges Requi...

7.3CVSS5.3AI score0.00231EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/08/06 12:31 a.m.11 views

EUVD-2025-210622

My Safetipin Android Application 5.2.1 contains Hardcoded credentials in the authentication module, which allows remote attackers to bypass authentication and gain unauthorized access to user accounts via predictable OTP values...

5.6AI score0.00437EPSS
SaveExploits0References3
NVD
NVD
added 2026/08/05 10:17 p.m.11 views

CVE-2025-63823

My Safetipin Android Application 5.2.1 contains Hardcoded credentials in the authentication module, which allows remote attackers to bypass authentication and gain unauthorized access to user accounts via predictable OTP values...

9.8CVSS0.00437EPSS
SaveExploits0References2
OSSF Malicious Packages
OSSF Malicious Packages
added 2026/08/05 4:34 p.m.15 views

Malicious code in @astralcore/sl-aura (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91ae2c72e5e03d23f3f5704859e8c92b9ce6c565c6d14d744d4382b980a0d233 This WhatsApp bot package ships several mechanisms that give the author persistent remote control of any installer's running instance and access to t...

5.8AI score
SaveExploits0References5
NVD
NVD
added 2026/08/05 2:16 p.m.9 views

CVE-2025-70962

Zosi C519M V4.2.8.823C01450BA is vulnerable to Incorrect Access Control. The application contains hardcoded credentials in the RTSP authentication mechanism. An attacker with network access can use the unchangeable default credentials to access the RTSP video stream, resulting in unauthorized...

7.5CVSS0.00382EPSS
SaveExploits1References2
NVD
NVD
added 2026/08/05 8:16 a.m.7 views

CVE-2026-71207

The Stock-Inventory-Management-System application's login.php assigns raw username/password values to and builds its authentication query by directly concatenating those session values into a SQL statement with no parameterization or escaping. The same script additionally contains hardcoded...

9.8CVSS0.00531EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2026/08/05 6:59 a.m.9 views

CVE-2026-71207 Stock-Inventory-Management-System - Unauthenticated SQL Injection and Hardcoded Credentials in login.php Enable Full Authentication Bypass

The Stock-Inventory-Management-System application's login.php assigns raw username/password values to and builds its authentication query by directly concatenating those session values into a SQL statement with no parameterization or escaping. The same script additionally contains hardcoded...

9.8CVSS5.5AI score0.00531EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/08/05 6:59 a.m.12 views

EUVD-2026-53204

The Stock-Inventory-Management-System application's login.php assigns raw $POST username/password values to $SESSION and builds its authentication query by directly concatenating those session values into a SQL statement with no parameterization or escaping. An unauthenticated remote attacker can...

9.8CVSS5.8AI score0.00531EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/08/05 6:59 a.m.39 views

CVE-2026-71207 Stock-Inventory-Management-System - Unauthenticated SQL Injection and Hardcoded Credentials in login.php Enable Full Authentication Bypass

The Stock-Inventory-Management-System application's login.php assigns raw username/password values to and builds its authentication query by directly concatenating those session values into a SQL statement with no parameterization or escaping. The same script additionally contains hardcoded...

9.8CVSS0.00531EPSS
SaveExploits0References1
CVE
CVE
added 2026/08/05 6:59 a.m.56 views

CVE-2026-71207

The Stock-Inventory-Management-System is affected in login.php, where raw $_POST values are assigned to $_SESSION and concatenated into a SQL query without parameterization, enabling unauthenticated SQL injection. An attacker could bypass authentication by submitting payloads like ' OR '1'='1, le...

9.8CVSS5.5AI score0.00531EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2026/08/05 12:0 a.m.8 views

CVE-2025-70962

Zosi C519M V4.2.8.823C01450BA is vulnerable to Incorrect Access Control. The application contains hardcoded credentials in the RTSP authentication mechanism. An attacker with network access can use the unchangeable default credentials to access the RTSP video stream, resulting in unauthorized...

5.5AI score0.00382EPSS
SaveExploits1References3
CVE
CVE
added 2026/08/05 12:0 a.m.50 views

CVE-2025-63823

The CVE-2025-63823 entry affects My Safetipin Android Application version 5.2.1, where hardcoded credentials in the authentication module enable remote attackers to bypass authentication and gain unauthorized access to user accounts through predictable OTP values. The root cause is the hardcoded ...

9.8CVSS5.6AI score0.00437EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2026/08/05 12:0 a.m.29 views

CVE-2025-70962

Zosi C519M V4.2.8.823C01450BA is vulnerable to Incorrect Access Control. The application contains hardcoded credentials in the RTSP authentication mechanism. An attacker with network access can use the unchangeable default credentials to access the RTSP video stream, resulting in unauthorized...

0.00382EPSS
SaveExploits1References2
Cvelist
Cvelist
added 2026/08/05 12:0 a.m.28 views

CVE-2025-63823

My Safetipin Android Application 5.2.1 contains Hardcoded credentials in the authentication module, which allows remote attackers to bypass authentication and gain unauthorized access to user accounts via predictable OTP values...

0.00437EPSS
SaveExploits0References2
CVE
CVE
added 2026/08/05 12:0 a.m.20 views

CVE-2025-70962

CVE-2025-70962 affects Zosi C519M, version V4.2.8.823C01450BA. The issue is Incorrect Access Control due to hardcoded credentials in the RTSP authentication, allowing network-remote access to the RTSP video stream and unauthorized camera viewing. A PoC/exploit is available (GitHub: https://github...

7.5CVSS5.5AI score0.00382EPSS
SaveExploits1References2
EUVD
EUVD
added 2026/08/05 12:0 a.m.9 views

EUVD-2025-210619

Zosi C519M V4.2.8.823C01450BA is vulnerable to Incorrect Access Control. The application contains hardcoded credentials in the RTSP authentication mechanism. An attacker with network access can use the unchangeable default credentials to access the RTSP video stream, resulting in unauthorized...

7.5CVSS5.5AI score0.00382EPSS
SaveExploits1References2
NVD
NVD
added 2026/07/27 9:16 p.m.12 views

CVE-2026-12001

A hardcoded credential vulnerability exists in the firmware of multiple TP-Link routers TL-WR845N v4, TL-WR850N v3, TL-WR902AC v4, Archer C20 v6 & Archer MR200 v5. Authentication-related credential material is embedded within a password file in the firmware image and may be recovered through...

5.2CVSS0.00251EPSS
SaveExploits0References11
CVE
CVE
added 2026/07/27 8:8 p.m.43 views

CVE-2026-12001

The CVE-2026-12001 entry describes a hardcoded credential vulnerability in the firmware of multiple TP-Link routers (TL-WR845N v4, TL-WR850N v3, Archer C20 v6, Archer MR200 v5). The credential material is embedded in a password file within the firmware image and can be recovered through firmware ...

5.2CVSS5.1AI score0.00251EPSS
SaveExploits0References11
EUVD
EUVD
added 2026/07/27 8:8 p.m.8 views

EUVD-2026-49587

A hardcoded credential vulnerability exists in the firmware of multiple TP-Link routers TL-WR845N v4, TL-WR850N v3, Archer C20 v6 & Archer MR200 v5. Authentication-related credential material is embedded within a password file in the firmware image and may be recovered through firmware analysis...

5.2CVSS5.8AI score0.00251EPSS
SaveExploits0References9
Rows per page
Query Builder