Search Vulnerabilities

Unauthenticated File Read and Deletion via Hardcoded Encryption Key in RadChart

RadAsyncUpload Default HMAC Key Fallback Vulnerability in Telerik UI for ASP.NET AJAX

praisonai-platform: JWT signing key defaults to hardcoded "dev-secret-change-me", allowing token forgery for any user when PLATFORM_ENV is unset

clawvet < 0.7.5 Hard-coded JWT Secret Session Forgery

Hardcoded Cryptographic Key Information Disclosure Vulnerability on TP-Link Kasa EC70 and EC71

Flowise - Weak Default JWT Secrets in Authentication Middleware

DataEase: Hardcoded JWT Signing Secret in ShareLink

WordPress Enable CORS plugin <= 2.0.3 - Backdoor vulnerability

Setracker2 Children's Smartwatch Ecosystem Use of hard-coded cryptographic key

NetComm NF20MESH < R6B032 Hardcoded AES Key Authentication Bypass

Use of hard-coded cryptographic keys in Canon EOS Network Setting Tool Version 1

Hard-coded cryptographic key in Wertheim SafeController Software allows decryption of sensitive configuration data

Weak custom cryptography and hard-coded keys in Wertheim SafeController 65000 allow traffic decryption

Naxclow IoT Platform Use of hard-coded cryptographic key

Aqara Home Android SDK hardcoded keys

GL.iNet XE3000 glnassys hard-coded key

HAX CMS Vulnerable to Private Key Disclosure via Broken HMAC Implementation

Hardcoded Cryptographic Keys and Weak IV Generation in linqi

Hardcoded Cryptographic Key Vulnerability in GX Earth ONT Models

Firmware Theft & IMEI Spoofing via Connect-OTA