25 matches found
CVE-2017-7722
CVE-2017-7722 affects SolarWinds Log & Event Manager (LEM) versions before 6.3.1 Hotfix 4. The vulnerability resides in the restrictssh portion of the menuing script used when SSH is accessed with the default credentials (username: cmc, password). Exploitation can escape the restricted shell via ...
SolarWinds LEM Default SSH Password Remote Code Execution
This module exploits the default credentials of SolarWinds LEM. A menu system is encountered when the SSH service is accessed with the default username and password which is "cmc" and "password". By exploiting a vulnerability that exist on the menuing script, an attacker can escape from restricte...
CVE-2014-7722
The CVE-2014-7722 entry concerns the Android app The Indian Jeweller (com.magzter.indianjeweller) v3.0. The vulnerability is that the app does not verify X.509 certificates from SSL servers, allowing a man-in-the-middle to spoof servers and access sensitive information via a crafted certificate. ...
SuSE 10 Security Update : Apache (ZYPP Patch Number 7722)
This update fixes a remote denial of service bug memory exhaustion in the Apache 2 HTTP server, that could be triggered by remote attackers using multiple overlapping Request Ranges. CVE-2011-3192 It also fixes a bug, where the LimitRequestFieldsize config option into account when parsing headers...