1947 matches found
CVE-2020-11449
An issue was discovered on Technicolor TC7337 8.89.17 devices. An attacker can discover admin credentials in the backup file, aka backupsettings.conf...
CVE-2020-11449
The CVE-2020-11449 entry applies to Technicolor TC7337 devices running version 8.89.17, where an attacker can extract admin credentials from the backup file (backupsettings.conf). This is the documented vulnerability and impact across multiple feeds; the connected documents confirm the same descr...
Drobo 5N2 4.1.1 - Remote Command Injection
Drobo 5N2 4.1.1 - Remote Command Injection Exploit Title: Drobo 5N2 4.1.1 - Remote Command Injection Date: 2020-03-12 Exploit Author: Rick Ramgattie, Ian Sindermann Vendor Homepage: https://www.drobo.com/ Version: 4.1.1 and lower. CVE: CVE-2018-14709, CVE-2018-14701 !/usr/bin/env python3 nasty.py...
CVE-2020-9476
ARRIS TG1692A devices allow remote attackers to discover the administrator login name and password by reading the /login page and performing base64 decoding...
CVE-2019-18238
In Moxa ioLogik 2500 series firmware, Version 3.0 or lower, and IOxpress configuration utility, Version 2.3.0 or lower, sensitive information is stored in configuration files without encryption, which may allow an attacker to access an administrative account...
D-Link DGS-1250 Header Injection
D-Link DGS-1250 header injection vulnerability ============================================== The latest version of this advisory is available at: https://sintonen.fi/advisories/d-link-dgs-1250-header-injection.txt Overview -------- D-Link DGS-1250 switch is susceptible to a header injection...
CVE-2019-15253
A vulnerability in the web-based management interface of Cisco Digital Network Architecture DNA Center could allow an authenticated, remote attacker to conduct a stored cross-site scripting XSS attack against a user of the web-based management interface of an affected device. The vulnerability is...
Wago PFC200 - Authenticated Remote Code Execution Exploit
Exploit for hardware platform in category web applications Exploit Title: Wago PFC200 - Authenticated Remote Code Execution Metasploit Exploit Author: Nico Jansen 0x483d Vendor Homepage: https://www.wago.com/ Version: 'Wago PFC200 authenticated remote code execution', 'Description' = %q The Wago...
Wago PFC200 Remote Code Execution
Exploit Title: Wago PFC200 - Authenticated Remote Code Execution Metasploit Date: 2020-02-05 Exploit Author: Nico Jansen 0x483d Vendor Homepage: https://www.wago.com/ Version: 'Wago PFC200 authenticated remote code execution', 'Description' = %q The Wago PFC200 up to incl. Firmware 11 020835 is...
CVE-2020-7984
SolarWinds N-central before 12.1 SP1 HF5 and 12.2 before SP1 HF2 allows remote attackers to retrieve cleartext domain admin credentials from the Agent & Probe settings, and obtain other sensitive information. The attacker can use a customer ID to self register and read any aspects of the...
CVE-2020-7984
SolarWinds N-central before 12.1 SP1 HF5 and 12.2 before SP1 HF2 allows remote attackers to retrieve cleartext domain admin credentials from the Agent & Probe settings, and obtain other sensitive information. The attacker can use a customer ID to self register and read any aspects of the...
CVE-2019-9493
The MyCar Controls of AutoMobility Distribution Inc., mobile application contains hard-coded admin credentials. A remote unauthenticated attacker may be able to send commands to and retrieve data from a target MyCar unit. This may allow the attacker to learn the location of a target, or gain...
CVE-2019-9493
The CVE-2019-9493 vulnerability affects AutoMobility’s MyCar Controls mobile apps, where hard-coded admin credentials in the app could let a remote, unauthenticated attacker issue commands to a target MyCar unit and extract data (potential location disclosure or vehicle access). Affected versions...
CVE-2019-20153
An issue was discovered in Determine formerly Selectica Contract Lifecycle Management CLM in v5.4. An XML external entity XXE vulnerability in the upload definition feature in definitionuploadattach.jsp allows authenticated remote attackers to read arbitrary files including configuration files...
Trend Micro Apex One and Trend Micro OfficeScan XG Credential Key Exposure Vulnerability
Trend Micro OfficeScan XG and Apex One are both products of Trend Micro, Inc. Trend Micro OfficeScan XG is a suite of distributed anti-virus software, and Apex One is a suite of endpoint security protection software that provides automated threat detection and response capabilities. A security...
Humax Wireless Voice Gateway HGB10R-2 Information Disclosure Vulnerability
The Humax Wireless Voice Gateway HGB10R-2 is a home wireless voice gateway device. The product includes features such as a modem, IP phone and router. A security vulnerability exists in the Humax Wireless Voice Gateway HGB10R-2 version 201608171855. An attacker could exploit the vulnerability to...
CVE-2019-19889
An issue was discovered on Humax Wireless Voice Gateway HGB10R-2 201608171855 devices. The attacker can discover admin credentials in the backup file, aka backupsettings.conf...
CVE-2019-19889
An issue was discovered on Humax Wireless Voice Gateway HGB10R-2 201608171855 devices. The attacker can discover admin credentials in the backup file, aka backupsettings.conf...