Hardcoded Credentials in Uniguest Kiosk Software Lead to API Compromise