Same-Source Weak Password Scan Over HTTP

Many HTTP servers, especially on routers and other network device, have well-known default user credentials. In many cases, these default credentials are not changed by the administrator. An attacker might scan the network in order to discover such devices, and use these default credentials to lo...

Default credentials

An issue was discovered on NETGEAR R8500, R8300, R7000, R6400, R7300, R7100LG, R6300v2, WNDR3400v3, WNR3500Lv2, R6250, R6700, R6900, and R8000 devices. They are prone to password disclosure via simple crafted requests to the web management server. The bug is exploitable remotely if the remote...

TrueOnline ZyXEL / Billion Command Injection / Default Credentials

=============== Multiple vulnerabilities in TrueOnline / ZyXEL / Billion routers Discovered by Pedro Ribeiro [email protected], Agile Information Security ========================================================================== Disclosure: 26/12/2016 / Last updated: 12/01/2017 Summary: TrueOnlin...

Trend Micro InterScan Messaging Security (Virtual Appliance) 9.1.-1600 - Remote Code Execution (Metasploit)

Trend Micro InterScan Messaging Security Virtual Appliance 9.1.-1600 - Remote Code Execution Metasploit This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Trend Micro InterScan Messaging Security...

HTTP Brute Force Logins With Default Credentials Reporting

It was possible to login into the remote Web Application using default credentials. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescripti...

Cambium ePMP 1000 Login Scanner

This module scans for Cambium ePMP 1000 management login portals, and attempts to identify valid credentials. Default login credentials are - admin/admin, installer/installer, home/home and readonly/readonly. This module requires Metasploit: https://metasploit.com/download Current source:...

Starbucks: SAP Server - default credentials enabled

@ak1t4 reported that the Starbucks SAP server webgui was exposed to the internet with default TMSADM credentials. Although the risk was flagged as critical by the researcher, Starbucks security along with SAP security team performed an internal assessment on the risk and changed the severity to...

Default Password 'WhatsHappeningNow' for 'insight' Account (SSH)

The remote device is using known default credentials. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

BAVision IP Camera Web Server Login

This module will attempt to authenticate to an IP camera created by BAVision via the web service. By default, the vendor ships a default credential admin:123456 to its cameras, and the web server does not enforce lockouts in case of a bruteforce attack. This module requires Metasploit:...

Samsung DVR Design Vulnerability

Samsung DVRs are small PCs used to record TV broadcasts, cable or DirectTV transmissions. Samsung DVR design vulnerability. Since the Samsung DVR web browser defaults to using HTTP port 80 to transmit base64-encoded credentials in the cookie header and base64-encodes only the login and password. ...

Default credentials

Remedy AR System Server in BMC Remedy 8.1 SP 2, 9.0, 9.0 SP 1, and 9.1 allows attackers to reset arbitrary passwords via a blank previous password...

NETGEAR WNR2000v5 - Remote Code Execution

NETGEAR WNR2000v5 - Remote Code Execution Remote code execution in NETGEAR WNR2000v5 - by Pedro Ribeiro [email protected] / Agile Information Security Released on 20/12/2016 NOTE: this exploit is "alpha" quality and has been deprecated. Please see the modules accepted into the Metasploit framework...

NETGEAR WNR2000v5 - Remote Code Execution Exploit

Exploit for hardware platform in category remote exploits Source: https://raw.githubusercontent.com/pedrib/PoC/master/exploits/netgearPwn.rb Remote code execution in NETGEAR WNR2000v5 - by Pedro Ribeiro email protected / Agile Information Security Released on 20/12/2016 NOTE: this exploit is...

Default credentials

An issue was discovered in xrdp before 0.9.1. When successfully logging in using RDP into an xrdp session, the file /.vnc/sesman$usernamepasswd is created. Its content is the equivalent of the user's cleartext password, DES encrypted with a known key...

Default credentials

An issue was discovered in cookie encryption in phpMyAdmin. The decryption of the username/password is vulnerable to a padding oracle attack. This can allow an attacker who has access to a user's browser cookie file to decrypt the username and password. Furthermore, the same initialization vector...

Default credentials

The trove service user in 1 Openstack deployment aka crowbar-openstack and 2 Trove Barclamp aka barclamp-trove and crowbar-barclamp-trove in the Crowbar Framework has a default password, which makes it easier for remote attackers to obtain access via unspecified vectors...

Cisco IOS XR Software Default Credentials Vulnerability (cisco-sa-20161207-iosxr)

A vulnerability in Cisco IOS XR Software could allow an authenticated, local attacker to log in to the device with the privileges of the root user. Copyright C 2016 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective...

Cisco IOS XR Software Default Credentials Vulnerability

A vulnerability in Cisco IOS XR Software could allow an authenticated, local attacker to log in to the device with the privileges of the root user. The vulnerability is due to a user account that has a default and static password. An attacker could exploit this vulnerability by connecting to the...

Default credentials

The notifications component in IBM TRIRIGA Applications 10.4 and 10.5 before 10.5.1 allows remote authenticated users to obtain sensitive password information, and consequently gain privileges, via unspecified vectors...

Pushwoosh: Publicy accessible IDRAC instance at api-m.inapp.pushwoosh.com

Hi. I discovered a publicy accessible IDRAC instance at api-m.inapp.pushwoosh.com. I know this subdomain is out of scope, but still consider to report it. Since default credentials root/calvin not work, there are no security risks for now, but so far the instance is available to public, in the...