Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
hardcoded vulnerabilities and exploits
(subscribe to this query)
9.8
CVSSv3
CVE-2022-31209
An issue exists in Infiray IRAY-A8Z3 1.0.957. The firmware contains a potential buffer overflow by calling strcpy() without checking the string length beforehand.
Infiray Iray-a8z3 Firmware 1.0.957
NA
CVE-2012-4964
The Samsung printer firmware prior to 20121031 has a hardcoded read-write SNMP community, which makes it easier for remote malicious users to obtain administrative access via an SNMP request.
Samsung Printer Firmware
8.8
CVSSv3
CVE-2022-31208
An issue exists in Infiray IRAY-A8Z3 1.0.957. The webserver contains an endpoint that can execute arbitrary commands by manipulating the cmd_string URL parameter.
Infiray Iray-a8z3 Firmware 1.0.957
9.8
CVSSv3
CVE-2017-12928
A hard-coded password of tecn0visi0n for the dlxuser account in TecnoVISION DLX Spot Player4 (all known versions) allows remote malicious users to log in via SSH and escalate privileges to root access with the same credentials.
Tecnovision Dlx Spot Player4 -
1 Github repository
9.8
CVSSv3
CVE-2023-33236
MXsecurity version 1.0 is vulnearble to hardcoded credential vulnerability. This vulnerability has been reported that can be exploited to craft arbitrary JWT tokens and subsequently bypass authentication for web-based APIs.
Moxa Mxsecurity 1.0
6.5
CVSSv3
CVE-2023-40058
Sensitive data was added to our public-facing knowledgebase that, if exploited, could be used to access components of Access Rights Manager (ARM) if the threat actor is in the same environment.
Solarwinds Access Rights Manager
9.8
CVSSv3
CVE-2022-31210
An issue exists in Infiray IRAY-A8Z3 1.0.957. The binary file /usr/local/sbin/webproject/set_param.cgi contains hardcoded credentials to the web application. Because these accounts cannot be deactivated or have their passwords changed, they are considered to be backdoor accounts.
Infiray Iray-a8z3 Firmware 1.0.957
9.8
CVSSv3
CVE-2022-31211
An issue exists in Infiray IRAY-A8Z3 1.0.957. There is a blank root password for TELNET by default.
Infiray Iray-a8z3 Firmware 1.0.957
NA
CVE-2023-32145
This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of D-Link DAP-1360 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the processing of login requests to the web-based user...
NA
CVE-2023-51629
This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of D-Link DCS-8300LHV2 IP cameras. Authentication is not required to exploit this vulnerability. The specific flaw exists within the configuration of the ONVIF API. The issue r...
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2023-24955
man-in-the-middle
dos
CVE-2024-2818
CVE-2024-30584
CVE-2024-31134
camera
CVE-2023-45866
CVE-2024-30585
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
« PREV
1
2
3
4
5
6
7
8
9
10
NEXT »