Lucene search
+L

883 matches found

Kitploit
Kitploit
•added 2021/02/20 11:30 a.m.•334 views

DirDar - A Tool That Searches For (403-Forbidden) Directories To Break It And Get Dir Listing On It

bypass forbidden directories - find and identify dir listing - you can use it as directory brute-forcer as well Compatabily This tool is compatible with all kind of operating systems as long as you have GO compiler installed Install You can use this command if you have Go installed and configured...

7.2AI score
SaveExploits0References2
CNVD
CNVD
•added 2021/02/10 12:00 a.m.•9 views

Unauthorized Access Vulnerability in VRM of Bosch (China) Investment Co.

Bosch China Investment Co., Ltd. operates in the fields of machinery manufacturing, light industry, electronics and information industry. An unauthorized access vulnerability exists in the VRM of Bosch China Investment Co. Ltd. that can be exploited by attackers to obtain sensitive information...

6.6AI score
SaveExploits0
CNVD
CNVD
•added 2021/02/01 12:00 a.m.•57 views

Bosch FSM-2500 server and Bosch FSM-5000 server hard-coded vulnerability

Bosch FSM-2500 and Bosch FSM-5000 are both panel-ready fire control systems from Bosch of Germany. Bosch FSM-2500 and Bosch FSM-5000 suffer from a hard-coded vulnerability that could be exploited by remote attackers to submit special requests to gain unauthorized access to the database system wit...

10CVSS4.1AI score0.03741EPSS
SaveExploits0References1
CNVD
CNVD
•added 2021/02/01 12:00 a.m.•64 views

Bosch FSM-2500 and Bosch FSM-5000 password compromise vulnerability

Bosch FSM-2500 and Bosch FSM-5000 are both panel-ready fire control systems from Bosch of Germany. Bosch FSM-2500 and Bosch FSM-5000 are vulnerable to a password disclosure vulnerability that could be exploited by a remote attacker to submit a special request that could gain access to sensitive...

4.9CVSS2.2AI score0.00568EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2021/01/26 6:16 p.m.•22 views

CVE-2020-6779

Use of Hard-coded Credentials in the database of Bosch FSM-2500 server and Bosch FSM-5000 server up to and including version 5.2 allows an unauthenticated remote attacker to log into the database with admin-privileges. This may result in complete compromise of the confidentiality and integrity of...

10CVSS7.5AI score0.03741EPSS
SaveExploits0References1
NVD
NVD
•added 2021/01/26 6:16 p.m.•37 views

CVE-2020-6780

Use of Password Hash With Insufficient Computational Effort in the database of Bosch FSM-2500 server and Bosch FSM-5000 server up to and including version 5.2 allows a remote attacker with admin privileges to dump the credentials of other users and possibly recover their plain-text passwords by...

4.9CVSS4.9AI score0.00568EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2021/01/26 6:16 p.m.•21 views

CVE-2020-6780

Use of Password Hash With Insufficient Computational Effort in the database of Bosch FSM-2500 server and Bosch FSM-5000 server up to and including version 5.2 allows a remote attacker with admin privileges to dump the credentials of other users and possibly recover their plain-text passwords by...

4.9CVSS5.8AI score0.00568EPSS
SaveExploits0References1
Prion
Prion
•added 2021/01/26 6:16 p.m.•25 views

Hardcoded credentials

Use of Hard-coded Credentials in the database of Bosch FSM-2500 server and Bosch FSM-5000 server up to and including version 5.2 allows an unauthenticated remote attacker to log into the database with admin-privileges. This may result in complete compromise of the confidentiality and integrity of...

10CVSS9.7AI score0.03741EPSS
SaveExploits0References1Affected Software2
Prion
Prion
•added 2021/01/26 6:16 p.m.•28 views

Default credentials

Use of Password Hash With Insufficient Computational Effort in the database of Bosch FSM-2500 server and Bosch FSM-5000 server up to and including version 5.2 allows a remote attacker with admin privileges to dump the credentials of other users and possibly recover their plain-text passwords by...

4CVSS5.2AI score0.00568EPSS
SaveExploits0References1Affected Software2
CNNVD
CNNVD
•added 2021/01/26 12:00 a.m.•19 views

Bosch FSM-2500 server and Bosch FSM-5000 server have vulnerabilities related to trust management.

Bosch FSM-2500 and Bosch FSM-5000 are both panel-ready fire control systems from Bosch of Germany. Bosch FSM-2500 and Bosch FSM-5000 suffer from a hard-coded vulnerability that could be exploited by remote attackers to submit special requests to gain unauthorized access to the database system wit...

10CVSS7.3AI score0.03741EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2021/01/26 12:00 a.m.•22 views

Bosch FSM-2500 and Bosch FSM-5000 access control system vulnerabilities

Bosch FSM-2500 and Bosch FSM-5000 are both panel-ready fire control systems from Bosch of Germany. Bosch FSM-2500 and Bosch FSM-5000 are vulnerable to a password disclosure vulnerability that could be exploited by a remote attacker to submit a special request that could gain access to sensitive...

4.9CVSS5.8AI score0.00568EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2021/01/25 6:41 p.m.•40 views

CVE-2020-6780 Password Hash With Insufficient Computational Effort in the Database of Bosch FSM-2500 Server and Bosch FSM-5000 Server

Use of Password Hash With Insufficient Computational Effort in the database of Bosch FSM-2500 server and Bosch FSM-5000 server up to and including version 5.2 allows a remote attacker with admin privileges to dump the credentials of other users and possibly recover their plain-text passwords by...

4.4CVSS5.3AI score0.00568EPSS
SaveExploits0References1
CVE
CVE
•added 2021/01/25 6:41 p.m.•78 views

CVE-2020-6779

CVE-2020-6779 affects Bosch FSM-2500 and FSM-5000 servers (up to v5.2). The root cause is hard-coded credentials in the database, enabling an unauthenticated remote attacker to log in with admin privileges. Impact stated: complete compromise of confidentiality and integrity of stored data and hig...

10CVSS9.8AI score0.03741EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2021/01/25 6:41 p.m.•41 views

CVE-2020-6779 Hard-coded Credentials in the Database of Bosch FSM-2500 Server and Bosch FSM-5000 Server

Use of Hard-coded Credentials in the database of Bosch FSM-2500 server and Bosch FSM-5000 server up to and including version 5.2 allows an unauthenticated remote attacker to log into the database with admin-privileges. This may result in complete compromise of the confidentiality and integrity of...

10CVSS9.8AI score0.03741EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2021/01/25 12:00 a.m.•5 views

PT-2021-12596

Name of the Vulnerable Software and Affected Versions: Bosch FSM-2500 server versions up to and including 5.2 Bosch FSM-5000 server versions up to and including 5.2 Description: The issue allows a remote attacker with admin privileges to dump the credentials of other users and possibly recover...

4.9CVSS5.8AI score0.00568EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2021/01/25 12:00 a.m.•7 views

PT-2021-12595

Name of the Vulnerable Software and Affected Versions: Bosch FSM-2500 server versions up to and including 5.2 Bosch FSM-5000 server versions up to and including 5.2 Description: The issue allows an unauthenticated remote attacker to log into the database with admin-privileges due to the use of...

10CVSS6.2AI score0.03741EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/01/25 12:00 a.m.•11 views

CVE-2020-6779: Use of Hard-coded Credentials

Use of Hard-coded Credentials in the database of Bosch FSM-2500 server and Bosch FSM-5000 server up to and including version 5.2 allows an unauthenticated remote attacker to log into the database with admin-privileges. This may result in complete compromise of the confidentiality and integrity of...

10CVSS6.1AI score0.03741EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/01/25 12:00 a.m.•8 views

CVE-2020-6780: Use of Password Hash With Insufficient Computational Effort

Use of Password Hash With Insufficient Computational Effort in the database of Bosch FSM-2500 server and Bosch FSM-5000 server up to and including version 5.2 allows a remote attacker with admin privileges to dump the credentials of other users and possibly recover their plain-text passwords by...

4.9CVSS5.8AI score0.00568EPSS
SaveExploits0References3
CNVD
CNVD
•added 2021/01/21 12:00 a.m.•20 views

Bosch PRAESIDEO and Bosch PRAESENSA Cross-Site Scripting Vulnerabilities

Bosch Praesideo and Bosch Praesensa are both products of Bosch, Germany.Bosch Praesideo is a device for digital broadcasting in public places. The device can provide daily information dissemination, emergency broadcasting, fire alarm and other functions for buildings and public places.Bosch...

4.8CVSS6AI score0.00617EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2021/01/20 12:00 a.m.•12 views

CVE-2020-6779

Use of Hard-coded Credentials in the database of Bosch FSM-2500 server and Bosch FSM-5000 server up to and including version 5.2 allows an unauthenticated remote attacker to log into the database with admin-privileges. This may result in complete compromise of the confidentiality and integrity of...

10CVSS8.8AI score0.03741EPSS
SaveExploits0References2
Rows per page
Query Builder