PT-2025-18042 · WordPress · Admin/Site Enhancements (Ase) Wordpress Plugin

Name of the Vulnerable Software and Affected Versions: Admin and Site Enhancements ASE WordPress plugin versions prior to 7.6.10 Description: The issue concerns the use of a hardcoded password in the Password Protection feature of the Admin and Site Enhancements ASE WordPress plugin. This allows ...

CVE-2025-32985

NETSCOUT nGeniusONE before 6.4.0 b2350 has Hardcoded Credentials that can be obtained from JAR files...

CVE-2025-43916

Sonos api.sonos.com through 2025-04-21, when the /login/v3/oauth endpoint is used, accepts a redirecturi containing userinfo in the authority component, which is not consistent with RFC 6819 section 5.2.3.5. An authorization code may be sent to an attacker-controlled destination. This might have...

CVE-2025-28031

TOTOLINK A810R V4.1.2cu.5182B20201026 was discovered to contain a hardcoded password for the telnet service in product.ini...

CVE-2025-32985

NETSCOUT nGeniusONE before 6.4.0 b2350 has Hardcoded Credentials that can be obtained from JAR files...

CVE-2025-32985

NETSCOUT nGeniusONE before 6.4.0 b2350 has Hardcoded Credentials that can be obtained from JAR files...

CVE-2025-32985

NETSCOUT nGeniusONE before 6.4.0 b2350 has Hardcoded Credentials that can be obtained from JAR files...

CVE-2025-32985: Use of Hard-coded Credentials

NETSCOUT nGeniusONE before 6.4.0 b2350 has Hardcoded Credentials that can be obtained from JAR files...

PT-2025-17943 · Netscout · Netscout Ngeniusone

Name of the Vulnerable Software and Affected Versions: NETSCOUT nGeniusONE versions prior to 6.4.0 b2350 Description: The issue concerns hardcoded credentials in NETSCOUT nGeniusONE that can be obtained from JAR files. Recommendations: For versions prior to 6.4.0 b2350, update to version 6.4.0...

CVE-2025-32985

NETSCOUT nGeniusONE before 6.4.0 b2350 has Hardcoded Credentials that can be obtained from JAR files...

CVE-2025-32985

NETSCOUT nGeniusONE versions prior to 6.4.0 b2350 are vulnerable to a security flaw involving hardcoded credentials . These credentials can be extracted from the application's JAR files . To resolve this issue, users are recommended to update to version 6.4.0 b2350 or later. No specific exploit l...

SUSE CVE-2025-30206

Dpanel is a Docker visualization panel system which provides complete Docker management functions. The Dpanel service contains a hardcoded JWT secret in its default configuration, allowing attackers to generate valid JWT tokens and compromise the host machine. This security flaw allows attackers ...

Authentication Bypass

Dpanel is vulnerable to Authentication Bypass. The vulnerability is due to use of a hardcoded JWT secret due to the default configuration embedding a static secret, allowing attackers to forge valid tokens and gain unauthorized administrative access...

CVE-2025-28031

TOTOLINK A810R V4.1.2cu.5182B20201026 was discovered to contain a hardcoded password for the telnet service in product.ini...

CVE-2025-28031

TOTOLINK A810R V4.1.2cu.5182B20201026 was discovered to contain a hardcoded password for the telnet service in product.ini...

CVE-2025-28031

TOTOLINK A810R V4.1.2cu.5182B20201026 was discovered to contain a hardcoded password for the telnet service in product.ini...

SolarWinds Web Help Desk Hardcoded Credential

SolarWinds Web Help Desk proof of concept hardcoded credential exploit that retrieves the 25 most recent tickets...

CVE-2025-28031

The TOTOLINK A810R wireless dual-band router, specifically version V4.1.2cu.5182_B20201026 , contains a hardcoded password for the telnet service within the product.ini file. This trust management issue can allow an attacker to cause an authentication error or disclose protected information. To m...

PT-2025-17554 · Totolink · Totolink A810R

Name of the Vulnerable Software and Affected Versions: TOTOLINK A810R version 4.1.2cu.5182 B20201026 Description: The issue concerns a hardcoded password for the telnet service, which is stored in the product.ini file. Recommendations: For version 4.1.2cu.5182 B20201026, consider changing the...

TOTOLINK A810R security vulnerabilities

TOTOLINK A810R is a wireless dual-band router from China's Gion Electronics TOTOLINK. A trust management issue vulnerability exists in TOTOLINK A810R version V4.1.2cu.5182B20201026, which stems from the presence of hardcoded passwords in product.ini. An attacker can exploit the vulnerability to...