1946 matches found
Lobby Track Desktop Default Admin Credentials Vulnerability
Jolly Technologies Lobby Track Desktop is a desktop visitor management application from Jolly Technologies USA. The program has features such as pre-registering visitors, capturing photos and scanning driver's licenses. A security vulnerability exists in Jolly Technologies Lobby Track Desktop...
CVE-2019-6441
An issue was discovered on Shenzhen Coship RT3050 4.0.0.40, RT3052 4.0.0.48, RT7620 10.0.0.49, WM3300 5.0.0.54, and WM3300 5.0.0.55 devices. The password reset functionality of the router doesn't have backend validation for the current password and doesn't require any type of authentication. By...
Liferay CE Portal Groovy-Console Remote Command Execution
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class MetasploitModule 'Liferay CE Portal Tomcat %q This module uses the Liferay CE Portal Groovy script console to execute OS commands. The Groovy...
CVE-2019-1607
A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying operating system of an affected device. The vulnerability is due to insufficient validation of arguments passed to certain CLI commands. An attacker coul...
Multiple Vulnerabilities in Splunk Universal Forwarder
The Splunk Universal Forwarder collects data from a data source or another forwarder and sends it to a forwarder or a deployment of Splunk. The Universal Forwarder can send data to SplunkEnterprise, Splunk Light, or Splunk Cloud, and it also replaces the Splunk Enterprise Light Forwarder and is...
Quest NetVault Backup Server 11.4.5 - Process Manager Service SQL Injection Remote Code Execution
Quest NetVault Backup Server 11.4.5 - Process Manager Service SQL Injection Remote Code Execution Exploit Title: Quest NetVault Backup Server 11.4.5 Process Manager Service SQL Injection Remote Code Execution Vulnerability ZDI-17-982 Date: 2-21-2019 Exploit Author: credit goes to rgod for finding...
PT-2019-1535 · Cisco · Cisco Network Assurance Engine
Name of the Vulnerable Software and Affected Versions: Cisco Network Assurance Engine NAE Release 3.01 Description: A vulnerability in the management web interface of Cisco Network Assurance Engine NAE could allow an unauthenticated, local attacker to gain unauthorized access or cause a Denial of...
Format string
An issue was discovered on MOBOTIX S14 MX-V4.2.1.61 devices. Administrator Credentials are stored in the 13-character DES hash format...
Active Scans Target Vulnerable Cisco Routers for Remote Code-Execution
UPDATE Malicious scanning activity targeting Cisco Small Business RV320 and RV325 Dual Gigabit WAN VPN routers is underway, with a swell of opportunistic probes looking for vulnerable devices ramping up since Friday. According to Bad Packets Report’s honeypot data, cyberattackers are targeting a...
CVE-2018-15459 Cisco Identity Services Engine Privilege Escalation Vulnerability
A vulnerability in the administrative web interface of Cisco Identity Services Engine ISE could allow an authenticated, remote attacker to gain additional privileges on an affected device. The vulnerability is due to improper controls on certain pages in the web interface. An attacker could explo...
Insecure Default Configuration
tripleoheattemplates is vulnerable to insecure default configuration. The vulnerabilty exists due to the default configuration set for the OpenDayLight ODL admin users' credentials, allowing malicious users to gain unauthorized access...
AudioCode 400HD - Command Injection
AudioCode 400HD - Command Injection CVE-2018-10093 Remote command injection vulnerability in AudioCode IP phones Description The AudioCodes 400HD series of IP phones consists in a range of easy-to-use, feature-rich desktop devices for the service provider hosted services, enterprise IP telephony...
AudioCode 400HD - Command Injection
CVE-2018-10093 Remote command injection vulnerability in AudioCode IP phones Description The AudioCodes 400HD series of IP phones consists in a range of easy-to-use, feature-rich desktop devices for the service provider hosted services, enterprise IP telephony and contact center markets. The CGI...
AudioCode 400HD Remote Command Injection Vulnerability
Exploit for cgi platform in category web applications CVE-2018-10093 Remote command injection vulnerability in AudioCode IP phones Description The AudioCodes 400HD series of IP phones consists in a range of easy-to-use, feature-rich desktop devices for the service provider hosted services,...
AudioCode 400HD Remote Command Injection
CVE-2018-10093 Remote command injection vulnerability in AudioCode IP phones Description The AudioCodes 400HD series of IP phones consists in a range of easy-to-use, feature-rich desktop devices for the service provider hosted services, enterprise IP telephony and contact center markets. The CGI...
The vulnerability of the software controller for the centralized control of wireless networks by D-Link Central WiFi Manager arises from the use of pre-installed credentials. This allows a hacker to execute arbitrary PHP code.
The vulnerability of the D-Link Central WiFi Manager software control panel lies in the use of pre-installed credentials FTP services: admin, admin, which are running on port 9000. Exploiting this vulnerability allows a malicious actor to execute arbitrary PHP code by loading it into the root...
Multiple D-Link Devices Administrator Credentials Disclosure Vulnerability
D-Link DSL-2770L and others are wireless router products from AUO D-Link. A security vulnerability exists in the spaces.htm file in multiple D-Link devices. A remote attacker could exploit the vulnerability to disclose admin credentials...
D-Link DIR-140L and DIR-640L Information Disclosure Vulnerability
The D-Link DIR-140L and DIR-640L are both wireless router products from AUO D-Link. An information disclosure vulnerability exists in the dirary0.js file in the D-Link DIR-140L version 1.02 and DIR-640L version 1.01RU, which can be exploited by remote attackers to disclose admin credentials...
D-Link DSL-2770L Administrator Credentials Disclosure Vulnerability
The D-Link DSL-2770L is a wireless router from AUO D-Link. A security vulnerability exists in the atbox.htm file in the D-Link DSL-2770L ME1.01 version, ME1.02 version, and AU1.06 version. An attacker can exploit the vulnerability to disclose admin credentials...
