Lucene search
+L

190 matches found

Packet Storm
Packet Storm
•added 2026/02/23 12:00 a.m.•147 views

📄 AMSS++ 4.7 Backdoor Admin Account

AMSS++ version 4.7 has a hardcoded backdoor administrative account. Title: AMSS++ 4.7 - Backdoor Admin Account Author: indoushka Date: 2020-02-23 Tested on : windows 10 Français V.Pro / browser : Mozilla firefox 65.032-bit Vendor : http://amssplus.ubn4.go.th/amssplusdownload/amssplus431install.ra...

9.3CVSS5.4AI score0.00444EPSS
SaveExploits1
RedhatCVE
RedhatCVE
•added 2026/01/09 9:25 a.m.•16 views

CVE-2023-4467

A vulnerability was found in Poly Trio 8800 7.2.6.0019 and classified as critical. Affected by this issue is some unknown functionality of the component Test Automation Mode. The manipulation leads to backdoor. It is possible to launch the attack on the physical device. The exploit has been...

6.6CVSS6.6AI score0.00263EPSS
SaveExploits1References1
OSV
OSV
•added 2025/12/16 5:06 p.m.•15 views

CVE-2023-53895 PimpMyLog 1.7.14 Improper Access Control via Account Creation Endpoint

PimpMyLog 1.7.14 contains an improper access control vulnerability that allows remote attackers to create admin accounts without authorization through the configuration endpoint. Attackers can exploit the unsanitized username field to inject malicious JavaScript, create a hidden backdoor account,...

9.3CVSS6AI score
SaveExploits0References6
NVD
NVD
•added 2025/12/13 4:16 p.m.•13 views

CVE-2025-36752

Growatt ShineLan-X communication dongle has an undocumented backup account with undocumented credentials which allows significant level access to the device, such as allowing any attacker to access the Setting Center. This means that this is effectively backdoor for all devices utilizing a Growat...

9.8CVSS0.00319EPSS
SaveExploits0References1
OSV
OSV
•added 2025/12/13 4:16 p.m.•11 views

CVE-2025-36752

Growatt ShineLan-X communication dongle has an undocumented backup account with undocumented credentials which allows significant level access to the device, such as allowing any attacker to access the Setting Center. This means that this is effectively backdoor for all devices utilizing a Growat...

9.8CVSS5.8AI score0.00319EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/12/13 8:16 a.m.•7 views

CVE-2025-36752 Undocumented backup Account and No Password Configuration Capability

Growatt ShineLan-X communication dongle has an undocumented backup account with undocumented credentials which allows significant level access to the device, such as allowing any attacker to access the Setting Center. This means that this is effectively backdoor for all devices utilizing a Growat...

9.4CVSS6.5AI score0.00319EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/12/13 8:16 a.m.•40 views

CVE-2025-36752 Undocumented backup Account and No Password Configuration Capability

Growatt ShineLan-X communication dongle has an undocumented backup account with undocumented credentials which allows significant level access to the device, such as allowing any attacker to access the Setting Center. This means that this is effectively backdoor for all devices utilizing a Growat...

9.4CVSS0.00319EPSS
SaveExploits0References1
The Hacker News
The Hacker News
•added 2025/10/14 4:55 p.m.•13 views

Chinese Hackers Exploit ArcGIS Server as Backdoor for Over a Year

Threat actors with ties to China have been attributed to a novel campaign that compromised an ArcGIS system and turned it into a backdoor for more than a year. The activity, per ReliaQuest, is the handiwork of a Chinese state-sponsored hacking group called Flax Typhoon , which is also tracked as...

6.9AI score
SaveExploits0
NVD
NVD
•added 2025/10/09 4:15 p.m.•20 views

CVE-2025-59957

An Origin Validation Error vulnerability in an insufficient protected file of Juniper Networks Junos OS on EX4600 Series and QFX5000 Series allows an unauthenticated attacker with physical access to the device to create a backdoor which allows complete control of the system. When a device isn't...

7CVSS0.00186EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2025/10/08 12:00 a.m.•11 views

Juniper Junos OS Vulnerability (JSA103146)

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA103146 advisory. - An Origin Validation Error vulnerability in an insufficient protected file of Juniper Networks Junos OS on EX4600 Series and QFX5000 Series allows an unauthenticated...

7CVSS5.5AI score0.00186EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•26 views

EUVD-2002-1915

Malware in sbrugna...

7.5CVSS6.4AI score0.01532EPSS
SaveExploits0References4
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•15 views

EUVD-2021-23165

Malware in sbrugna...

5.4CVSS5.7AI score0.0172EPSS
SaveExploits2References5
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•13 views

EUVD-2000-1212

Malware in sbrugna...

5CVSS6.4AI score0.03252EPSS
SaveExploits2References5
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•15 views

EUVD-2019-4896

Malware in sbrugna...

8.8CVSS8.8AI score0.01521EPSS
SaveExploits1References2
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•7 views

EUVD-2013-6185

Malware in sbrugna...

7.5CVSS7.5AI score0.0097EPSS
SaveExploits1References3
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•10 views

EUVD-2018-3019

Malware in sbrugna...

9.8CVSS9.5AI score0.01776EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•15 views

EUVD-2019-6310

Malware in sbrugna...

9.1CVSS9.3AI score0.03376EPSS
SaveExploits1References6
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•6 views

EUVD-2017-9326

Malware in sbrugna...

7.5CVSS7.6AI score0.01167EPSS
SaveExploits1References2
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•17 views

EUVD-2020-2718

Malware in sbrugna...

7.2CVSS6.6AI score0.0052EPSS
SaveExploits1References4
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•12 views

EUVD-2022-43061

Malicious code in bioql PyPI...

10CVSS8.8AI score0.00308EPSS
SaveExploits0References1
Rows per page
Query Builder