241 matches found
Apache Cloudstack default account
Default account with known password...
XYCMS enterprise built Station system default database, the backend to get WebShell-vulnerability warning-the black bar safety net
Keywords: inurl:showkbxx. asp? id= With the injection point Default database:data/xy! 1 2 3. mdb The default account and password: admin admin There are many websites that are anti-injection, this time we can download the database, and then a local build, to replace the original database, for...
Useresponse 1.0.2 Backdoor / CSRF / Code Execution
!/usr/bin/python -------------------- | abuseresponse.py | -------------------- Useresponse = 1.0.2 privilege escalation & remote code execution exploit vendor: USWebStyle http://www.uswebstyle.com/ software: http://www.useresponse.com/ vulns found by bcoles @bclose and mrme @netninja exploit by...
Useresponse <= 1.0.2 Privilege Escalation & RCE Exploit
Exploit for php platform in category web applications !/usr/bin/python -------------------- | abuseresponse.py | -------------------- Useresponse = 1.0.2 privilege escalation & remote code execution exploit vendor: USWebStyle http://www.uswebstyle.com/ software: http://www.useresponse.com/ vulns...
Signaling network separate development site of source code vulnerabilities and fixes-vulnerability warning-the black bar safety net
Editor vulnerability the default background ubbcode/adminlogin. asp Database ubbcode/db/ewebeditor. mdb The default account password yzm 1 1 1 1 1 1 Get the webshell method Landing back click on the“style management”-select the new style just to write this a few style name:scriptkiddies Feel free...
RuggedCom RuggedOS Default 'factory' Account Backdoor
Binary data scadaruggedosfactorybackdoor.nbin...
Signaling network of independently developed web site source code vulnerability-vulnerability warning-the black bar safety net
Google search inurl:product1. asp? tyc= Editor vulnerability the default background ubbcode/adminlogin. asp Database ubbcode/db/ewebeditor. mdb The default account password yzm 1 1 1 1 1 1 Get the webshell method Landing back click on the“style management”-select the new style just to write this...
ecshop数据库默认账户信息，导致网站信息泄漏
简要描述： ecshop在默认安装的时候，安装程序会添加两个管理员账户，虽然管理员账户没有操作权限，但是通过这两个账户还是可以看到网站的订单数据. 详细说明： ecshop在默认安装的时候，安装程序会添加两个管理员账户，虽然管理员账户没有操作权限，但是通过这两个账户还是可以看到网站的订单数据. 这是adminuser表的截图。 漏洞证明： 随便找个ecshop的网站，打开后台,使用用户名:bjgonghuo1密码:bjgonghuo1可登录。 或者使用用户名：shgonghuo 密码：shgonghuo http://www.lefei.com/admin/...
HP StorageWorks P4000 Virtual SAN Appliance Command Execution
This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 "HP StorageWorks...
JEECMS the background of any file editing vulnerability and get a shell-vulnerability warning-the black bar safety net
JEECMS is based on java technology development, inheritance of its strong, stable, secure, efficient, cross-platform, and many other advantages · use of SpringMVC3+Spring3+Hibernate3+Freemarker mainstream technical architecture security is doing very perverted, when the site after the installatio...
JEECMS后台任意文件编辑漏洞and官方漏洞及拿shell
简要描述： JEECMS后台任意文件编辑漏洞以及官方的demo站、官方服务器安全问题 详细说明： 2.x后台： login/Jeecms.do 3.x后台： jeeadmin/jeecms/index.do 默认账户：admin 默认密码：password 获取tomcat密码： /jeeadmin/jeecms/template/vedit.do?root=../../conf/&name=../../conf/tomcat-users.xml 获取JDBC数据库账号密码：...
HP StorageWorks P2000 security vulnerabilities
Default account, directory traversal...
Cisco TelePresence System Integrator / Cisco IP Video Phone E20 default account vulnereability
Default root account is enabled...
Cisco Security Advisory: Cisco IP Video Phone E20 Default Root Account
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Cisco IP Video Phone E20 Default Root Account Advisory ID: cisco-sa-20120118-te Revision 1.0 For Public Release 2012 January 18 16:00 UTC GMT +--------------------------------------------------------------------- Summary ======= Cisco TelePresence...
Modicon FTP Default Account/Password Usage (SCADA)
Binary data 6276.prm...
Modicon telnet Default Account Detection (SCADA)
Binary data 6278.prm...
Modicon FTP Default Account/Password Usage (SCADA)
Binary data 6277.prm...
Modicon telnet Default Account/Password Detection (SCADA)
Binary data 6280.prm...
Modicon PLC HTTP Default Account/Password Detection (SCADA)
Binary data 6287.prm...
ZDI-12-015 : (0Day) HP StorageWorks P2000 G3 Directory Traversal and Default Account Vulnerabilities
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ZDI-12-015 : 0Day HP StorageWorks P2000 G3 Directory Traversal and Default Account Vulnerabilities http://www.zerodayinitiative.com/advisories/ZDI-12-015 January 12, 2012 - -- CVE ID: CVE-2011-4788 - -- CVSS: 9, AV:N/AC:L/Au:N/C:C/I:P/A:P - -- Affecte...