232 matches found
CVE-2019-19033
CVE-2019-19033: Jalios JCMS 10 Conta Backdoor / Bypass de Autenticação I. VULNERABILIDADE O Jalios JCMS 10 permite que atacantes acessem qualquer parte do site e do servidor WebDAV com privilégios administrativos por meio de uma conta de backdoor usando qualquer nome de usuário e uma senha...
D-Link Network Attached Storage - Backdoor Account
A vulnerability, which was classified as very critical, has been found in D-Link DNS-320L, DNS-325, DNS-327L and DNS-340L up to 20240403. This issue affects some unknown processing of the file /cgi-bin/nassharing.cgi of the component HTTP GET Request Handler. The manipulation of the argument user...
KevinLAB BEMS (Building Energy Management System) - Backdoor Account
KevinLAB BEMS has an undocumented backdoor account, and these sets of credentials are never exposed to the end-user and cannot be changed through any normal operation of the solution through the RMI. An attacker could exploit this vulnerability by logging in using the backdoor account with highes...
honeypot-dlink-CVE-2024-3273
honeypot-dlink-CVE-2024-3273 针对CVE-2024-3273的快速简易蜜罐。 此模板可用于在约10分钟内设置一个基本蜜罐。 快速总结： 查找（fofa、shodan、onyphe等）。 使用wgetclonehttp.sh克隆它。 手动调整以使蜜罐更真实（克隆不完美，因此某些文件返回404）。 向server.py添加匹配利用路径的规则（以及利用处理逻辑）。 保存并运行！ 文件通过设置--save-headers标志下载（等同于curl的--include），以模仿我们伪装成的服务器会发送的头部。 来源 ：...
DblTekGoIPPwn
DblTekGoIPPwn Tool per sfruttare il sistema di risposta alle challenge nei dispositivi DblTek GoIP vulnerabili. Può generare risposte a challenge specifiche, testare gli host per la vulnerabilità, eseguire comandi su host vulnerabili, inviare messaggi SMS da un host e accedere a una shell root su...
CVE-2024-29972
TG Join Us https://t.me/WanLiChangChengWanLiChang 저희와 함께 정기적으로 다양한 취약점 EXP와 POC를 받아보세요. CVE-2024-29972-EXP CVE-2024-29972 Zyxel Nas Backdoor Account 백도어 계정 무단 활성화 FOFA app="ZyXEL-NAS326" 주의사항 이 EXP 악용 스크립트는 CVE-2024-29972와 CVE-2024-29973의 결합 악용입니다. '콤보 펀치'라고도 부를 수 있습니다. 백도어 계정 NsaRescueAngel은 Roo...
vuln-chain-lab
File Upload Bypass + Stored XSS PoC Labor Eine bewusst verwundbare Webanwendung, die zeigt, wie ein File-Upload-Bypass mit Stored-XSS verkettet wird, um Backdoor-Admin-Konten zu erstellen, selbst wenn CSP-, CORS- und CSRF-Schutzmaßnahmen vorhanden sind. Ausführlicher Blogbeitrag: KurtiseBear Blog...
dlink
Iniezione di comandi e account backdoor nei dispositivi NAS D-Link Riepilogo della vulnerabilità: La vulnerabilità descritta interessa diversi dispositivi NAS D-Link, inclusi i modelli DNS-340L, DNS-320L, DNS-327L e DNS-325, tra gli altri. La vulnerabilità risiede nell'URI nassharing.cgi , che è...
CVE-2026-52520
Emlog CMS = 2.6.14 contains a stored cross-site scripting XSS vulnerability in the article publishing module /admin/article.php. A remote authenticated attacker can inject arbitrary JavaScript code via the article content. When an administrator reviews or previews the submitted article in the...
D-Link Network Attached Storage - Command Injection and Backdoor Account
UNSUPPORTED WHEN ASSIGNED A vulnerability, which was classified as critical, was found in D-Link DNS-320L, DNS-325, DNS-327L and DNS-340L up to 20240403. Affected is an unknown function of the file /cgi-bin/nassharing.cgi of the component HTTP GET Request Handler. The manipulation of the argument...
CVE-2025-71317 NetMan 204 Hard-coded Backdoor Credentials
NetMan 204 contains a hard-coded backdoor account with the username and password 'eurek' that grants administrative access. A remote, unauthenticated attacker can authenticate through the cgi-bin/login.cgi endpoint for example /cgi-bin/login.cgi?username=eurek&password=eurek, which due to lax...
CVE-2026-42289
ChurchCRM is an open-source church management system. Prior to 7.3.2, UserEditor.php processes user account creation and permission updates entirely through $POST parameters with no CSRF token validation. An unauthenticated attacker can craft a malicious HTML page that, when visited by an...
CVE-2020-37135
AMSS++ 4.7 is affected by an authentication bypass that lets attackers access administrative accounts using hardcoded credentials (default admin/admin or admin/1234 depending on source), enabling unauthorized admin access. The vulnerability is documented across multiple feeds (CVE-2020-37135) wit...
CVE-2020-37135 AMSS++ 4.7 - Backdoor Admin Account
AMSS++ 4.7 contains an authentication bypass vulnerability that allows attackers to access administrative accounts using hardcoded credentials. Attackers can log in with the default admin username and password '1234' to gain unauthorized administrative access to the system...
CVE-2023-53895
PimpMyLog 1.7.14 contains an improper access control vulnerability that allows remote attackers to create admin accounts without authorization through the configuration endpoint. Attackers can exploit the unsanitized username field to inject malicious JavaScript, create a hidden backdoor account,...
CVE-2023-53895
PimpMyLog 1.7.14 contains an improper access control vulnerability that allows remote attackers to create admin accounts without authorization through the configuration endpoint. Attackers can exploit the unsanitized username field to inject malicious JavaScript, create a hidden backdoor account,...
CVE-2023-53895 PimpMyLog 1.7.14 Improper Access Control via Account Creation Endpoint
PimpMyLog 1.7.14 contains an improper access control vulnerability that allows remote attackers to create admin accounts without authorization through the configuration endpoint. Attackers can exploit the unsanitized username field to inject malicious JavaScript, create a hidden backdoor account,...
PT-2025-51743
Name of the Vulnerable Software and Affected Versions PimpMyLog version 1.7.14 Description The software contains an improper access control issue that allows remote attackers to create administrator accounts without authorization through the configuration endpoint. Attackers can exploit the...
