CVE-2025-30106

On IROAD v9 devices, the dashcam has hardcoded default credentials "qwertyuiop" that cannot be changed by the user. This allows an attacker within Wi-Fi range to connect to the device's network to perform sniffing...

CVE-2025-30137

An issue was discovered in the G-Net GNET APK 2.6.2. Hardcoded credentials exist in in APK for ports 9091 and 9092. The GNET mobile application contains hardcoded credentials that provide unauthorized access to the dashcam's API endpoints on ports 9091 and 9092. Once the GNET SSID is connected to...

PT-2025-11605

Name of the Vulnerable Software and Affected Versions IROAD APK version 5.2.5 Description The mobile application for the dashcam contains hardcoded credentials that allow an attacker on the local Wi-Fi network to access API endpoints and retrieve sensitive device information, including live and...

PT-2025-11613

Name of the Vulnerable Software and Affected Versions Forvia Hella HELLA Driving Recorder DR 820 affected versions not specified Description An issue exists where hardcoded credentials are present in the APK for ports 9091 and 9092. The dashcam's Android application contains these credentials,...

PT-2025-11619

Name of the Vulnerable Software and Affected Versions ROADCAM X3 devices affected versions not specified Description An issue was discovered where the mobile app APK, Viidure, contains hardcoded FTP credentials for the FTPX user account. This enables attackers to gain unauthorized access and...

PT-2025-11601

Name of the Vulnerable Software and Affected Versions IROAD version v9 Description The issue concerns hardcoded default credentials, specifically qwertyuiop, which are used by the dashcam and cannot be altered by the user. This setup allows an attacker, who is within Wi-Fi range, to connect to th...

CVE-2025-30137: Use of Hard-coded Credentials

An issue was discovered in the G-Net GNET APK 2.6.2. Hardcoded credentials exist in in APK for ports 9091 and 9092. The GNET mobile application contains hardcoded credentials that provide unauthorized access to the dashcam's API endpoints on ports 9091 and 9092. Once the GNET SSID is connected to...

CVE-2025-30113: Use of Hard-coded Credentials

An issue was discovered on the Forvia Hella HELLA Driving Recorder DR 820. Hardcoded Credentials exist in the APK for Ports 9091 and 9092. The dashcam's Android application contains hardcoded credentials that allow unauthorized access to device settings through ports 9091 and 9092. These...

CVE-2025-30109: Use of Hard-coded Credentials

In the IROAD APK 5.2.5, there are Hardcoded Credentials in the APK for ports 9091 and 9092. The mobile application for the dashcam contains hardcoded credentials that allow an attacker on the local Wi-Fi network to access API endpoints and retrieve sensitive device information, including live and...

CVE-2025-30113

The Forvia Hella HELLA Driving Recorder DR 820 is affected by a vulnerability involving hardcoded credentials within its Android application (APK). These credentials, stored in cleartext , are used for Ports 9091 and 9092 . An attacker who gains access to the dashcam's network can exploit these c...

CVE-2025-1724: Use of Hard-coded Credentials

Zohocorp's ManageEngine Analytics Plus and Zoho Analytics on-premise versions older than 6130 are vulnerable to an AD only account takeover because of a hardcoded sensitive token...

CVE-2025-27255: Use of Hard-coded Credentials

Use of Hard-coded Credentials vulnerability in GE Vernova EnerVista UR Setup allows Privilege Escalation. The local user database is encrypted using an hardcoded password retrievable by an attacker analyzing the application code...

CVE-2025-27643: Use of Hard-coded Credentials

Vasion Print formerly PrinterLogic before Virtual Appliance Host 22.0.933 Application 20.0.2368 allows Hardcoded AWS API Key V-2024-006...

CVE-2025-25729

An information disclosure vulnerability in Bosscomm IF740 Firmware versions:11001.7078 & v11001.0000 and System versions: 6.25 & 6.00 allows attackers to obtain hardcoded cleartext credentials via the update or boot process...

CVE-2025-25570

Vue Vben Admin 2.10.1 allows unauthorized login to the backend due to an issue with hardcoded credentials...

CVE-2024-50688

SunGrow iSolarCloud Android application V2.1.6.20241017 and prior contains hardcoded credentials. The application regardless of the user account and the cloud uses the same MQTT credentials for exchanging the device telemetry...

CVE-2025-25570

Vue Vben Admin 2.10.1 allows unauthorized login to the backend due to an issue with hardcoded credentials...

CVE-2025-25570

Vue Vben Admin 2.10.1 allows unauthorized login to the backend due to an issue with hardcoded credentials...

CVE-2025-25729

An information disclosure vulnerability in Bosscomm IF740 Firmware versions:11001.7078 & v11001.0000 and System versions: 6.25 & 6.00 allows attackers to obtain hardcoded cleartext credentials via the update or boot process...

CVE-2025-25729

The Bosscomm IF740 OBD2 scanner is affected by an information disclosure vulnerability (CVE-2025-25729) in Firmware versions 11001.7078 & v11001.0000 and System versions 6.25 & 6.00 . The root cause is the storage of hardcoded cleartext credentials (passwords) within the device, which can be obta...