4264 matches found
Default credentials
The WordPress Mobile Pack plugin before 2.0.2 for WordPress does not properly restrict access to password protected posts, which allows remote attackers to obtain sensitive information via an exportarticles action to export/content.php...
Barco ClickShare Device Default Credentials
Nessus was able to login to the web administration interface on the remote Barco ClickShare device using a default set of known credentials. A remote attacker can exploit this to gain administrative control of the device. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...
Halon Security Router User Interface Default Credentials
The remote Halon Security Router user interface uses a known set of default credentials. An attacker with access to the service can gain administrative access to the device. Additionally, these credentials allow SSH if enabled access to the device with root privileges. %NASLMINLEVEL 70300 C Tenab...
Default credentials
usr/lib/cgi-bin/createpasswdfile.py in Pyplate 0.08 uses world-readable permissions for passwd.db, which allows local users to obtain the administrator password by reading this file...
F5 Networks BIG-IP Web Interface Default Credential Check
Nessus was able to login to the administrative interface on the remote F5 Networks BIG-IP device using a known set of default credentials. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid76942; scriptversion"1.4";...
Datum Systems Satellite Modem Multiple Vulnerabilities
Datum Systems Satellite Modem is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CMSimple - Default Administrator Credentials
CMSimple - Default Administrator Credentials source: https://www.securityfocus.com/bid/68961/info CMSimple is prone to multiple security vulnerabilities including: 1. Multiple arbitrary PHP code-execution vulnerabilities 2. A weak authentication security-bypass vulnerability 3. Multiple security...
WebTitan Default Credentials (ssh)
The account 'admin' is using a default password. A remote, unauthenticated attacker could exploit this to log in as a privileged user and gain access to the WebTitan configuration menu. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid76777; scriptversion"$Revision: 1....
WebTitan Web Interface Default Credentials
The remote WebTitan web interface uses a default set of credentials 'admin' / 'hiadmin' to control access to its management interface. A remote, unauthenticated attacker could exploit this to log in as a privileged user and gain administrative access to the application. %NASLMINLEVEL 70300 C...
Default credentials
Infoblox NetMRI before 6.8.5 has a default password of admin for the "root" MySQL database account, which makes it easier for local users to obtain access via unspecified vectors...
Mobotix Cameras Default Admin Credentials (HTTP)
The remote Mobotix camera web interface is using default credentials. This VT has been deprecated as a duplicate of the VT SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...
Default credentials
Apache Syncope 1.1.x before 1.1.8 uses weak random values to generate passwords, which makes it easier for remote attackers to guess the password via a brute force attack...
Hardcoded Password Flaw Plagues Some Netgear Switches
A vulnerability in Netgear-branded ethernet switches could give an attacker full access to the hardware, including the ability to log into the device and execute arbitrary code. Netgear’s GS108PE Prosafe Plus switches running version 1.2.0.5 are at risk, according to an analyst at CERT/CC’s...
SMB Brute Force Logins With Default Credentials
A number of known default credentials are tried for the login via the SMB protocol. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescripti...
Default credentials
Settings in Apple iOS before 7.1.2 allows physically proximate attackers to bypass an intended iCloud password requirement, and turn off the Find My iPhone service, by leveraging incorrect state management...
Yealink VoIP Phone SIP-T38G - Remote Command Execution
No description provided by source. Title: Yealink VoIP Phone SIP-T38G Remote Command Execution Author: Mr.Un1k0d3r & Doreth.Z10 From RingZer0 Team Vendor Homepage: http://www.yealink.com/Companyprofile.aspx Version: VoIP Phone SIP-T38G CVE: CVE-2013-5758 Description: Using cgiServer.exx we are ab...
Netgear DGN1000B setup.cgi Remote Command Execution
No description provided by source. This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3...
Linksys WRT54GL apply.cgi Command Execution
No description provided by source. This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3...
Netgear DGN2200B pppoe.cgi Remote Command Execution
No description provided by source. This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3...
CA ARCserve D2D r15 Web Service Servlet Code Execution
No description provided by source. Computer Associates ARCserve D2D r15 Web Service Apache Axis2 World Accessible Servlet Code Execution Vulnerability Poc product homepage: https://support.ca.com/phpdocs/0/8363/support/arcserved2dsupport.html vulnerability: The Tomcat Server, which listens for...