CWE-259

CWE-259 · 7 records · 6 with a public proof-of-concept

Records the NVD classes under CWE-259, highest CVSS first.

  1. HIGH 7.3CVE-2026-101052public PoC2026-09-28

    A security vulnerability has been detected in refly-ai refly up to 1.1.0. This issue affects some unknown processing of the file apps/api/src/modules/config/app.config.ts of the component JWT Token Handler. The manipulation with the input test leads to hard-co…

    AI risk analysis on Exploit-DB.ai →

  2. HIGH 7.3CVE-2026-97877public PoC2026-09-25

    A vulnerability was determined in zhistaredu StarTraining up to 3.8.1. This issue affects the function UserLoginService.createToken of the file application.yml of the component JWT Token Handler. This manipulation of the argument user_id/company_id causes use …

    AI risk analysis on Exploit-DB.ai →

  3. HIGH 7.3CVE-2026-93970public PoC2026-09-20

    A security flaw has been discovered in aiyiyi121 SxDevOps 1.0/1.1. This issue affects some unknown processing of the file backend/sxdevops/settings.py of the component Settings Handler. The manipulation results in hard-coded credentials. The attack may be perf…

    AI risk analysis on Exploit-DB.ai →

  4. HIGH 7.3CVE-2026-93969public PoC2026-09-20

    A vulnerability was identified in aiyiyi121 SxDevOps 1.0/1.1. This vulnerability affects the function ensure_default_superuser of the file rbac/services.py. The manipulation leads to hard-coded credentials. The attack is possible to be carried out remotely. Th…

    AI risk analysis on Exploit-DB.ai →

  5. MEDIUM 5.6CVE-2026-704132026-09-28

    Dell Live Optics Collector, versions prior to 27.2.13.310, contain(s) a Use of Hard-coded Password vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Information exposure.

    AI risk analysis on Exploit-DB.ai →

  6. MEDIUM 5.6CVE-2026-96548public PoC2026-09-23

    A flaw has been found in sfturing hosp_order up to 627f426331da8086ce8fff2017d65b1ddef384f8. This affects an unknown part of the file ssm_pro/src/main/resources/jdbc.properties. This manipulation causes hard-coded credentials. It is possible to initiate the at…

    AI risk analysis on Exploit-DB.ai →

  7. MEDIUM 5CVE-2026-65117public PoC2026-09-22

    NVIDIA Infrastructure Controller for Linux contains a vulnerability where an attacker could cause use of a hard-coded password. A successful exploit of this vulnerability might lead to data tampering, denial of service, and information disclosure.

    AI risk analysis on Exploit-DB.ai →