1464 matches found
CVE-2020-8001
The Intellian Aptus application 1.0.2 for Android has a hardcoded password of intellian for the masteruser FTP account...
PT-2020-19912
Name of the Vulnerable Software and Affected Versions Intellian Aptus application version 1.0.2 Description The issue concerns a hardcoded password in the masteruser FTP account, with the password being intellian. This hardcoded password could potentially allow unauthorized access. Recommendation...
PT-2020-19911
Name of the Vulnerable Software and Affected Versions Intellian Aptus Web version 1.24 Description The issue concerns a hardcoded password. Specifically, the password 12345678 is hardcoded for the intellian account. Recommendations For Intellian Aptus Web version 1.24, change the hardcoded passwo...
CVE-2020-7233: Insufficiently Protected Credentials
KMS Controls BAC-A1616BC BACnet devices have a cleartext password of snowman in the BACKDOORNAME variable in the BCLogon.swf file...
Cisco Data Center Network Manager serverinfo Hardcoded Password Information Disclosure Vulnerability
This vulnerability allows remote attackers to disclose sensitive information on affected installations of Cisco Data Center Network Manager. Authentication is not required to exploit this vulnerability. The specific flaw exists within the processing of web requests. The system contains a hard-cod...
CVE-2019-19021
TitanHQ WebTitan before 5.18 is affected by an authentication flaw involving a hidden, hard-coded administrator account. The issue enables anyone to log in with this account and obtain administrator privileges through the web administration interface. Root cause details are not elaborated beyond ...
CVE-2019-19033
Jalios JCMS 10 allows attackers to access any part of the website and the WebDAV server with administrative privileges via a backdoor account, by using any username and the hardcoded dev password...
CVE-2019-19033
Jalios JCMS 10 allows attackers to access any part of the website and the WebDAV server with administrative privileges via a backdoor account, by using any username and the hardcoded dev password...
PT-2019-15764
Name of the Vulnerable Software and Affected Versions Jalios JCMS version 10 Description The issue allows attackers to access any part of the website and the WebDAV server with administrative privileges via a backdoor account. This is achieved by using any username and a hardcoded dev password...
Hardcoded credentials
Brocade SANnav versions before v2.0 use a hard-coded password, which could allow local authenticated attackers to access a back-end database and gain privileges...
Cisco Small Business RV320 and RV325 Dual Gigabit WAN Routers Issues
Cisco firmware for Cisco RV320 and RV325 Dual Gigabit WAN VPN Routers is affected by the following issues: Static certificates and keys Hardcoded password hashes Multiple vulnerabilities in third-party software TPS components Static Certificates and Keys Two static X.509 certificates with the...
Cisco Small Business RV016, RV042, RV042G, and RV082 Routers Issues
Cisco firmware for certain Cisco Small Business RV Series Routers is affected by the following issues: Certificate and key issued to QNO Technology Hardcoded password hashes Multiple vulnerabilities in third-party software TPS components Certificate and Key Issued to QNO Technology An X.509...
PT-2019-3130
Name of the Vulnerable Software and Affected Versions Cisco Small Business RV160, RV260, and RV340 affected versions not specified Description The issue is related to the use of hardcoded password hashes for users root, debug-admin, cisco, admin, and guest. This could allow a remote attacker to...
CVE-2019-15867
The slick-popup plugin before 1.7.2 for WordPress has a hardcoded OmakPass13 password for the slickpopupteam account, after a Subscriber calls a certain AJAX action...
CVE-2019-15867
The slick-popup plugin before 1.7.2 for WordPress has a hardcoded OmakPass13 password for the slickpopupteam account, after a Subscriber calls a certain AJAX action...
CVE-2019-15867
The slick-popup plugin before 1.7.2 for WordPress has a hardcoded OmakPass13 password for the slickpopupteam account, after a Subscriber calls a certain AJAX action...
CVE-2019-15867
The slick-popup plugin before 1.7.2 for WordPress has a hardcoded OmakPass13 password for the slickpopupteam account, after a Subscriber calls a certain AJAX action...
CVE-2019-15867
The CVE-2019-15867 issue affects the WordPress slick-popup plugin (pre-1.7.2). It relies on a hardcoded credential OmakPass13# for the slickpopupteam account, enabling privilege escalation via a specific AJAX action (as described by connected sources). Practical impact is administrator-level acce...
PT-2019-14446
Name of the Vulnerable Software and Affected Versions slick-popup plugin versions prior to 1.7.2 Description The issue concerns a hardcoded password, specifically OmakPass13, for the slickpopupteam account in the slick-popup plugin. This password can be accessed after a Subscriber initiates a...