Sony IPELA ENGINE IP Cameras Backdoor Accounts Vulnerability

Sony IPELA ENGINE IP Cameras contain multiple backdoors that, among other functionality, allow an attacker to enable the Telnet/SSH service for remote administration over the network. Other available functionality may have undesired effects to the camera image quality or other camera functionalit...

Default Password 'htinit' for 'htinit' Account (SSH)

The remote device is using known default credentials. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Blackstratus LOGStorm Default Credentials (MySQL Protocol)

The remote MySQL service has the password SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if description scriptoid"1.3.6.1.4.1.25623.1.0.140093...

BlackStratus LOGStorm Hardcoded 'webserveruser' Credentials (HTTP)

BlackStratus LOGStorm has hardcoded credentials SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:blackstratus:logstorm";...

BlackStratus LOGStorm 4.5.1.35 / 4.5.1.96 Remote Root

!/usr/bin/python logstorm-root.py BlackStratus LOGStorm Remote Root Exploit Jeremy Brown jbrown3264/gmail Dec 2016 -Synopsis- "Better Security and Compliance for Any Size Business" BlackStratus LOGStorm has multiple vulnerabilities that allow a remote unauthenticated user, among other things, to...

BlackStratus LOGStorm 4.5.1.354.5.1.96 - Remote Code Execution

BlackStratus LOGStorm 4.5.1.354.5.1.96 - Remote Code Execution !/usr/bin/python logstorm-root.py BlackStratus LOGStorm Remote Root Exploit Jeremy Brown jbrown3264/gmail Dec 2016 -Synopsis- "Better Security and Compliance for Any Size Business" BlackStratus LOGStorm has multiple vulnerabilities th...

Gooligan Malware Breaches 1 Million Google Accounts

Android malware called Gooligan is being blamed for 1 million breached Google accounts. The malware is still active, according Check Point Software Technologies, and is responsible for an additional 13,000 new breaches of Android devices daily. “We believe that it is the largest Google account...

Over 1 Million Google Accounts Hacked by 'Gooligan' Android Malware

If you own an Android smartphone, Beware! A new Android malware that has already breached more than 1 Million Google accounts is infecting around 13,000 devices every day. Dubbed Gooligan, the malware roots vulnerable Android devices to steal email addresses and authentication tokens stored on...

XenMobile user shows as "Anonymous" in XenMobile Admin Console

Within the XenMobile console, under the user column, few users started showning as anonymous. In zdm.logs we might see:User '[email protected]' not found or is disabled. Switching to anonymous mode...

Vulnerability of Microsoft Edge and Internet Explorer browsers, allowing attackers to compromise user accounts

The vulnerability of Microsoft Edge and Internet Explorer is related to the lack of protection for service data. Exploiting this vulnerability allows a malicious actor to access user accounts by analyzing the memory dump...

Vulnerabilities of Microsoft Edge and Internet Explorer browsers, which allow attackers to trigger service failures or execute arbitrary code.

The vulnerability of Microsoft Edge and Internet Explorer is related to the lack of protection for service data. Exploiting this vulnerability allows a malicious actor to access user accounts by analyzing the memory dump...

SPIP 3.1 Cross Site Scripting / Header Injection

Security Advisory - Curesec Research Team 1. Introduction Affected SPIP 3.1 Product: Fixed in: 3.1.2 / 3.0.23 Fixed Version http://www.spip.net/endownload Link: Vendor Website: http://www.spip.net/ Vulnerability Reflected & Persistent XSS, Host Header Injection, httpOnly Type: Cookie disclosure...

Default Password 'bakergiga' for 'root' Account (SSH)

The remote device is using known default credentials. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Over 300 Million AdultFriendFinder Accounts Exposed in Massive Data Breach

Adult Friend Finder, a casual dating website with the tagline "hookup, find sex or meet someone hot now," has suffered another massive data breach, but this time it is much worse than the last year. Over 300 Million AdultFriendFinder accounts have reportedly been exposed in a massive data breach...

VulnCheck KEV: CVE-1999-0502

A Unix account has a default, null, blank, or missing password...

Dedecms CSRF Vulnerability

Dedecms is an open source PHP open source website management system. Dedecms has a CSRF vulnerability that allows an attacker to exploit the vulnerability to perform unauthorized operations as an administrator and delete the account of any user...

Microsoft Windows Media Base Memory Corruption Vulnerability

Microsoft Windows is a series of operating systems released by the American company Microsoft. A memory corruption vulnerability exists when the Windows media base fails to properly handle objects in memory. An attacker who successfully exploited this vulnerability could install programs; view,...

Microsoft Windows Animation Manager Memory Corruption Vulnerability

Microsoft Windows is a series of operating systems released by the American company Microsoft. A memory corruption vulnerability exists when the Windows Animation Manager fails to properly handle objects in memory. An attacker who successfully exploited this vulnerability could install programs;...

Tesco Bank Stops Online Transactions

Tesco Bank, a U.K. retail bank, today put a halt to online transactions from current accounts after some customers reported over the weekend money missing from their accounts. The bank, which has more than seven million customers, told the BBC that 40,000 accounts were accessed and half of which...

Zomato: takeover a lot of accounts

Weak password may lead to breakthrough many accounts I have been able to penetrate more than 100 account now. ██████ These are some of the accounts, ███ Username password Timeout Length the response maryanne 123456 false 2241 "status":"true","name":"Mary Anne...