共收录 273 条相关情报。
← 返回所有主题CVE-2026-85391
Peppermint through 0.5.5 contains a hardcoded JWT signing secret in docker-compose.yml that allows unauthenticated attac
CVE-2026-85391
Peppermint through 0.5.5 contains a hardcoded JWT signing secret in docker-compose.yml that allows unauthenticated attac
CVE-2024-7952
A data exposure vulnerability exists in the affected product. There are hardcoded links in the source code that lead to
CVE-2026-18931
Use of Hard-coded Credentials vulnerability in TMT Machine Industry and Trade Ltd. Co. Talassoft Industrial Management S
CVE-2026-38577
Insecure hardcoded credentials in the Admin account of Tenda HG21 V4.0.0-260302 allows attackers to gain root access.
CVE-2026-82808
A vulnerability was identified in Inbox Foundry ActiveInbox Extension up to 7.10.24 on Chrome. Impacted is an unknown fu
CVE-2026-82448
Shinobi before commit 5a76c74f contains a hardcoded connection key in the child node service that allows unauthenticated
CVE-2026-82448
Shinobi before commit 5a76c74f contains a hardcoded connection key in the child node service that allows unauthenticated
CVE-2026-19412
This vulnerability exists in the CP Plus CP-XR-DE21-S Router due to the presence of hardcoded HTTP Digest authentication
CVE-2026-13086
A stack-based buffer overflow in the epm (Endpoint Protection Manager) service used by the deprecated Mobile Security fe
CVE-2026-71396
Bendix EC80 Brake ECU uses hard-coded credentials, which could allow an attacker to disable automatic traction control.
CVE-2026-78251
DJI drones contain an FTP service that uses hardcoded credentials shared across affected models and permits authenticate
CVE-2026-59769
FA-50 all versions contain hard-coded credentials. An attacker, who knows the credentials and has access to the vessel'
CVE-2026-78062
A vulnerability was identified in vas3k TaxHacker up to 0.8.2. The affected element is the function envSchema.parse of t
CVE-2026-76131
Use of hard-coded credentials issue exists in VOCALOID6 , which may allow an attacker to impersonate a legitimate VOCALO
CVE-2026-76392
In Splunk AI Toolkit versions below 6.0.0, a user who does not hold the "admin" or "power" Splunk roles could obtain pre
CVE-2026-76392
In Splunk AI Toolkit versions below 6.0.0, a user who does not hold the "admin" or "power" Splunk roles could obtain pre
CVE-2026-71960
Cudy WR3000 2.0 running firmware before 2.5.24 contains a hard-coded JWT HMAC signing secret vulnerability in the Mosqui
CVE-2026-50601
Planet9 是 Acer 推出的一款桌面应用程序，本次发现的安全漏洞源自该程序内置了一个硬编码的只读 API 密钥。这一密钥被硬编码在客户端中，使得任何能够分析或逆向该应用的攻击者都能提取该密钥。由于该密钥被赋予了对 Acer 内部代码
CVE-2026-19901
A security flaw has been discovered in LB-LINK X-PRO 1.0.22-20231206. This affects an unknown function of the file /etc/