#cwe-798

共收录 273 条相关情报。

← 返回所有主题
漏洞预警2026-09-20 发布INFO

The ZTE SmartLife application has a hardcoded key. The key used to decrypt account server information is stored in plaintext in the code. Once the key is obtained, the server in...

CVE-2026-86555

The ZTE SmartLife application has a hardcoded key. The key used to decrypt account server information is stored in plain

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-20 发布INFO

A security flaw has been discovered in aiyiyi121 SxDevOps 1.0/1.1. This issue affects some unknown processing of the file backend/sxdevops/settings.py of the component Settings ...

CVE-2026-93970

A security flaw has been discovered in aiyiyi121 SxDevOps 1.0/1.1. This issue affects some unknown processing of the fil

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-20 发布INFO

A vulnerability was identified in aiyiyi121 SxDevOps 1.0/1.1. This vulnerability affects the function ensure_default_superuser of the file rbac/services.py. The manipulation lea...

CVE-2026-93969

A vulnerability was identified in aiyiyi121 SxDevOps 1.0/1.1. This vulnerability affects the function ensure_default_sup

历史摘要 · 未重新核验 · NVD

安全公告2026-09-20 发布INFO

aiyiyi121 SxDevOps Settings settings.py hard-coded credentials

CVE-2026-93970

A security flaw has been discovered in aiyiyi121 SxDevOps 1.0/1.1. This issue affects some unknown processing of the fil

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-09-20 发布INFO

aiyiyi121 SxDevOps services.py ensure_default_superuser hard-coded credentials

CVE-2026-93969

A vulnerability was identified in aiyiyi121 SxDevOps 1.0/1.1. This vulnerability affects the function ensure_default_sup

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-09-18 发布INFO

IBM Guardium Data Protection 12.2 is vulnerable to a hardcoded credentials vulnerability in the...

CVE-2026-84034

IBM Guardium Data Protection 12.2 is vulnerable to a hardcoded credentials vulnerability in the hardware_assess/obstore

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-09-18 发布INFO

IBM Guardium Data Protection 12.2 is vulnerable to a hardcoded credentials vulnerability in the hardware_assess/obstore binaries. A low-privileged authenticated user can recover...

CVE-2026-84034

IBM Guardium Data Protection 12.2 is vulnerable to a hardcoded credentials vulnerability in the hardware_assess/obstore

历史摘要 · 未重新核验 · NVD

安全公告2026-09-18 发布INFO

AnyCable: Telemetry Subsystem Contains Hardcoded Authentication Token and Transmits CLI Arguments Including Secrets

CVE-2026-63406

### Summary The telemetry subsystem embeds a hardcoded auth token (`"secret"`) in the public source and transmits raw CL

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-09-18 发布INFO

AnyCable is a realtime server for reliable two-way communication that supports any backend. Prior to 1.6.15, the telemetry subsystem in telemetry/config.go enables tracking with...

CVE-2026-63406

AnyCable is a realtime server for reliable two-way communication that supports any backend. Prior to 1.6.15, the telemet

历史摘要 · 未重新核验 · NVD

安全公告2026-09-18 发布INFO

AnyCable: Telemetry Subsystem Contains Hardcoded Authentication Token and Transmits CLI Arguments Including Secrets

CVE-2026-63406

AnyCable is a realtime server for reliable two-way communication that supports any backend. Prior to 1.6.15, the telemet

历史摘要 · 未重新核验 · OSV.dev

漏洞预警2026-09-18 发布INFO

Bransys ELD is shipped with hardcoded MQTT credentials, which will grant read access to real-time data for every active device across a subset of carriers that were connected to...

CVE-2026-86520

Bransys ELD is shipped with hardcoded MQTT credentials, which will grant read access to real-time data for every active

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-18 发布INFO

Bransys ELD is shipped with hardcoded MQTT credentials, which will grant read access to real-time data for every active device across a subset of carriers that were connected to...

CVE-2026-77960

Bransys ELD is shipped with hardcoded MQTT credentials, which will grant read access to real-time data for every active

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-17 发布INFO

WeGIA is a web manager for charitable institutions. Prior to 3.8.5, web/html/socio/sistema/controller/deletar_socios.php exposes an unauthenticated GET endpoint whose chave para...

CVE-2026-54767

WeGIA is a web manager for charitable institutions. Prior to 3.8.5, web/html/socio/sistema/controller/deletar_socios.php

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-17 发布INFO

Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains a Use of Hard-coded Credentials vulnerability. An unauthenticated attacker with remote access could po...

CVE-2026-81440

Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains a Use of Hard-coded Credentials vulnerability

历史摘要 · 未重新核验 · NVD

安全公告2026-09-16 发布INFO

Feast through 0.66.0 fails to verify JWT token signatures before establishing user identity,...

CVE-2026-92787

Feast through 0.66.0 fails to verify JWT token signatures before establishing user identity, allowing attackers to bypas

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-09-15 发布INFO

The affected products use hard-coded credentials, which could allow an attacker to run the ftpd service as root, providing remote root file access where FTP is reachable.

CVE-2026-68950

The affected products use hard-coded credentials, which could allow an attacker to run the ftpd service as root, providi

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-15 发布INFO

The affected products use hard-coded credentials, which could allow remote access to files with root privileges where FTP is reachable.

CVE-2026-66890

The affected products use hard-coded credentials, which could allow remote access to files with root privileges where FT

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-15 发布INFO

OpenBMC's IPMI implementation, phosphor-net-ipmid, contains a logic flaw in which an unauthenticated client can force the RAKP Message 1 handler to return before it overwrites t...

CVE-2026-16141

OpenBMC's IPMI implementation, phosphor-net-ipmid, contains a logic flaw in which an unauthenticated client can force th

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-15 发布INFO

PraisonAI is a multi-agent teams system. Prior to 0.1.6, praisonai_platform/services/auth_service.py falls back to the public dev-secret-change-me HS256 signing key when PLATFOR...

CVE-2026-57148

PraisonAI is a multi-agent teams system. Prior to 0.1.6, praisonai_platform/services/auth_service.py falls back to the p

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-15 发布INFO

PraisonAI is a multi-agent teams system. Prior to 0.1.6, praisonai_platform/services/auth_service.py assigns the public dev-secret-change-me value to JWT_SECRET when PLATFORM_JW...

CVE-2026-57147

PraisonAI is a multi-agent teams system. Prior to 0.1.6, praisonai_platform/services/auth_service.py assigns the public

历史摘要 · 未重新核验 · NVD