Oracle GlassFish Application Server
An application server whose internal console was targeted by the attacker's scripts testing default credentials. No deployment was confirmed.
Tag: default credentials
SAP Help Portal: Documentation and Configuration Resources
SAP Help Portal provides documentation and sample configurations. In the case of CVE-2026-44761, sample scripts with hard-coded credentials were provided, leading to…
SAP Patches Critical CVSS 9.9 NetWeaver ABAP Flaw Allowing Data Exposure or Modification
SAP has released its July 2026 security updates, addressing multiple vulnerabilities including a critical out-of-bounds write flaw in SAP NetWeaver Application Server…
SAP Commerce Cloud: E-Commerce Platform
SAP Commerce Cloud is a cloud-based e-commerce solution. A critical default credentials vulnerability (CVE-2026-44761) was patched, involving a sample OAuth 2.0 client.
Cyber Av3ngers: Iranian-Linked Hacktivist Group Exploiting Default Credentials in Critical Infrastructure
Cyber Av3ngers is an Iranian-linked hacktivist group that targeted the Municipal Water Authority of Aliquippa in Pennsylvania in November 2023, exploiting default…
Paradox.ai: AI-Powered Hiring Platform Provider
Paradox.ai operates the McHire platform used by McDonald's for AI-powered hiring. In 2025, researchers found a weak legacy admin account with default…
McHire: McDonald’s AI-Powered Hiring Platform
McHire is an AI-powered hiring platform operated by Paradox.ai for McDonald's. In 2025, researchers accessed it via a weak legacy admin account…