Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
hardcoded vulnerabilities and exploits
(subscribe to this query)
NA
CVE-2023-33236
MXsecurity version 1.0 is vulnearble to hardcoded credential vulnerability. This vulnerability has been reported that can be exploited to craft arbitrary JWT tokens and subsequently bypass authentication for web-based APIs.
Moxa Mxsecurity 1.0
10
CVSSv2
CVE-2017-12928
A hard-coded password of tecn0visi0n for the dlxuser account in TecnoVISION DLX Spot Player4 (all known versions) allows remote malicious users to log in via SSH and escalate privileges to root access with the same credentials.
Tecnovision Dlx Spot Player4 -
1 Github repository
NA
CVE-2023-40058
Sensitive data was added to our public-facing knowledgebase that, if exploited, could be used to access components of Access Rights Manager (ARM) if the threat actor is in the same environment.
Solarwinds Access Rights Manager
7.5
CVSSv2
CVE-2012-4964
The Samsung printer firmware prior to 20121031 has a hardcoded read-write SNMP community, which makes it easier for remote malicious users to obtain administrative access via an SNMP request.
Samsung Printer Firmware
NA
CVE-2023-32145
This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of D-Link DAP-1360 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the processing of login requests to the web-based user...
9
CVSSv2
CVE-2022-31208
An issue exists in Infiray IRAY-A8Z3 1.0.957. The webserver contains an endpoint that can execute arbitrary commands by manipulating the cmd_string URL parameter.
Infiray Iray-a8z3 Firmware 1.0.957
10
CVSSv2
CVE-2022-31209
An issue exists in Infiray IRAY-A8Z3 1.0.957. The firmware contains a potential buffer overflow by calling strcpy() without checking the string length beforehand.
Infiray Iray-a8z3 Firmware 1.0.957
7.5
CVSSv2
CVE-2022-31210
An issue exists in Infiray IRAY-A8Z3 1.0.957. The binary file /usr/local/sbin/webproject/set_param.cgi contains hardcoded credentials to the web application. Because these accounts cannot be deactivated or have their passwords changed, they are considered to be backdoor accounts.
Infiray Iray-a8z3 Firmware 1.0.957
10
CVSSv2
CVE-2022-31211
An issue exists in Infiray IRAY-A8Z3 1.0.957. There is a blank root password for TELNET by default.
Infiray Iray-a8z3 Firmware 1.0.957
4.3
CVSSv2
CVE-2013-1351
Verax NMS before 2.10 allows authentication via the encrypted password without knowing the cleartext password.
Veraxsystems Network Management System
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-27977
IMAP
local users
CVE-2024-32038
CVE-2023-49963
CVE-2023-22869
CVE-2024-31497
local
CVE-2024-2961
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
« PREV
1
2
3
4
5
6
7
8
9
10
NEXT »