27 matches found
EUVD-2016-10817
ZKTeco ZKBioSecurity 3.0 contains a local authorization bypass vulnerability in visLogin.jsp that allows attackers to authenticate without valid credentials by spoofing localhost requests. Attackers can exploit the EnvironmentUtil.getClientIp method which treats IPv6 loopback address...
CVE-2016-20031
ZKTeco ZKBioSecurity 3.0 contains a local authorization bypass vulnerability in visLogin.jsp that allows attackers to authenticate without valid credentials by spoofing localhost requests. Attackers can exploit the EnvironmentUtil.getClientIp method which treats IPv6 loopback address...
CVE-2016-20031 ZKTeco ZKBioSecurity 3.0 Local Authorization Bypass via visLogin.jsp
ZKTeco ZKBioSecurity 3.0 contains a local authorization bypass vulnerability in visLogin.jsp that allows attackers to authenticate without valid credentials by spoofing localhost requests. Attackers can exploit the EnvironmentUtil.getClientIp method which treats IPv6 loopback address...
EUVD-2025-201469
Malicious code in sd-123456 npm...
MAL-2025-192347 Malicious code in sd-123456 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00b44fd36c7e696d952fccf6c85284d4a4b2fbd1c47062ef87b5ed6d13368fc6 The package sd-123456 was found to contain malicious code...
Malicious code in sd-123456 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00b44fd36c7e696d952fccf6c85284d4a4b2fbd1c47062ef87b5ed6d13368fc6 The package sd-123456 was found to contain malicious code...
EUVD-2025-123456
Malicious code in prettier-enceladus-pegasus-bunyan npm...
Poor Password Choices
Look at this: McDonald's chose the password "123456" for a major corporate system...
CVE-2024-13966
ZKTeco BioTime allows unauthenticated attackers to enumerate usernames and log in as any user with a password unchanged from the default value '123456'. Users should change their passwords located under the Attendance Settings tab as "Self-Password"...
PT-2023-12552 · Uniview · Uniview Ip Camera
Name of the Vulnerable Software and Affected Versions: Uniview IP Camera versions prior to the fixed version Description: The issue concerns an undocumented UDP service on port 7788 that allows a remote unauthenticated attacker to overflow an internal buffer and achieve code execution. By...
CVE-2023-123456
creationtimestamp| type| source ---|---|--- 2023-03-08 07:21:00+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/3890...
CVE-2021-44480
Wokka Lokka Q50 devices through 2021-11-30 allow remote attackers who know the SIM phone number and password to listen to a device's surroundings via a callback in an SMS command, as demonstrated by the 123456 and 523681 default passwords...
Revealed: The 200 Most used and Worst Passwords of 2021
By Waqas ''123456'' remains the most used and one of the worst passwords of 2021 - Here are the top 10 worst passwords used across the globe. This is a post from HackRead.com Read the original post: Revealed: The 200 Most used and Worst Passwords of 2021...
Weak password vulnerability in School of Continuing Education's online learning video system
Online video learning system has weak passwords for instructor accounts url: http://61.129.84.42:86/login.aspx?errtype=1 weak password account: teacher weak password password: 123456...
CVE-2018-18242
youke365 v1.1.5 has SQL injection via admin/login.html, as demonstrated by username=admin&pass=123456&code=9823&act=login&submit=%E7%99%BB+%E9%99%86...
Weak Password Vulnerability in Some Users of Zhiyuan Synergy A8 System
Zhiyuan A8 system is an OA office management software. A weak password vulnerability exists in some users of Zhiyuan Synergy A8 system. An attacker is allowed to utilize the weak password 123456 to log in to the system background and obtain administrator privileges...
金蝶某系统撞库&远程命令执行
简要描述: . 详细说明: 1.撞库:https://sso.youshang.com/sso/userAuthnAction.do无限制撞库 抓包,撞库,123456密码 以下可以登录: 漏洞证明: 登录一个作证明 2.http://service.youshang.com/fee/moneybagHome.do s-19远程命令执行...
CVE-2014-123456
...
Active News Manager CSRF Vulnerability (Add Admin)
Exploit for php platform in category web applications Active News Manager CSRF Vulnerability Add Admin ==================================================================== .:. Author : AtT4CKxT3rR0r1ST email protected .:. Script : http://www.gazatem.com/Products/activenewsmanager.asp === Exploit...
AdaptCMS 2.0.0 CSRF Vulnerability (Add Admin)
Exploit for php platform in category web applications AdaptCMS 2.0.0 CSRF Vulnerability Add Admin ==================================================================== .:. Author : AtT4CKxT3rR0r1ST email protected .:. Script :...