CWE-259: CWE-259

This vulnerability involves hard-coded credentials in the RSA/OAuth2/Database component of shsuishang ShopSuite ModulithShop, allowing attackers to ga...

This CVE describes a critical vulnerability in a Spring Boot ChatGPT integration component where hard-coded credentials were found in the source code....

This vulnerability in QSAN Storage Manager, XEVO, and SANOS allows local attackers to escalate privileges by using the system's MAC address as an auth...

Toshiba printers contain hardcoded credentials (CWE-259) that could allow attackers to gain unauthorized access to device management interfaces. This ...

This vulnerability in Macro-video Technologies V380E6_C1 IP cameras allows a physically proximate attacker to execute arbitrary code via the UART inte...

A hard-coded weak password vulnerability in H3C Magic-branded devices allows attackers to gain root access via Telnet. This affects all Magic-branded ...

This vulnerability allows unauthenticated attackers to execute API calls without credentials in Commvault software, bypassing authentication mechanism...

This CVE describes a hard-coded password vulnerability in multiple Hillrom ELI electrocardiograph devices. Attackers who discover the hard-coded crede...

This CVE describes a critical vulnerability in TOTOLINK A3600R routers where the Telnet service uses a hard-coded password in the product.ini file. At...

The KiotViet Sync WordPress plugin uses a hardcoded password for authentication, allowing unauthenticated attackers to bypass authorization and create...

This vulnerability exposes hard-coded credentials in the Druid component of yeqifu carRental software, allowing attackers to gain unauthorized access ...

Netwrix Directory Manager versions 11.0.0.0 and earlier, plus versions after 11.1.25134.03, contain a hardcoded password vulnerability (CWE-259). This...

The IROAD X5 Mobile App up to version 5.2.5 on Android contains hard-coded credentials in its API endpoints, allowing remote attackers to potentially ...

CVE-2024-32210 is a hard-coded credential vulnerability in LoMag WareHouse Management application versions 1.0.20.120 and older. This allows attackers...

Linqi versions before 1.4.0.1 on Windows contain a hardcoded password salt, which weakens password security by making password hashes predictable. Thi...

The NuCom NC-WR744G router version 8.5.5 Build 20200530.307 contains hard-coded credentials in its console application, allowing attackers to gain una...

The Audi UTR Dashcam 2.0 contains hard-coded credentials in its Video Stream Handler component, allowing attackers on the local network to access vide...