Default credentials

mailpassword.py in Plone 2.1 through 4.1, 4.2.x through 4.2.5, and 4.3.x through 4.3.1 allows remote authenticated users to bypass the prohibition on password changes via the forgotten password email functionality...

[EyeWitness] A Rapid Web Application Triage Tool

EyeWitness is a rapid web application triage tool designed to take screenshots of websites, provide some server header info, and identify default credentials if possible. The author would love for EyeWitness to identify more default credentials of various web applications. So as you find devices...

HP Integrated Lights-Out (iLO) Default Credentials

The remote HP Integrated Lights-Out iLO install uses a default set of credentials 'Admin' / 'Admin' or 'Oper' / 'Oper' to control access to its management interface. With this information, an attacker can gain access to the application. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...

Default credentials

The Foscam FI8910W camera with firmware before 11.37.2.55 allows remote attackers to obtain sensitive video and image data via a blank username and password...

IBM Rational Focal Point Default Credentials

Nessus was able to login to the remote IBM Rational Focal Point install using a default set of known credentials. A remote attacker using these credentials can gain administrative access to the web application. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc';...

Oracle WebCenter Sites Default Credentials Check

Oracle WebCenter Sites formerly known as FatWire Content Server is running on the remote host, and Nessus was able to authenticate to it using a set of known default credentials. This allows a remote attacker to gain administrative access to sites running on the server. %NASLMINLEVEL 70300 C...

Default credentials

The account-creation functionality in IBM Rational Focal Point 6.4.x and 6.5.x before 6.5.2.3 and 6.6.x before 6.6.1 places the new user's default password within the creation page, which allows remote attackers to obtain sensitive information by reading the HTML source code...

Nortel Meridian Integrated RAN Default Admin Credentials

The remote device is a Nortel Meridian Integrated RAN MIRAN that uses a set of known, default credentials 'admin' / 'admin000'. Knowing these, an attacker able to connect to the service can gain complete control of the device. Nortel MIRAN is a system card that provides multi-tasking voice...

Nortel CS Signaling Server Default Admin Credentials

The remote device is a Nortel CS Signaling Server that uses a set of known, default credentials. Knowing these, an attacker able to connect to the service can gain complete control of the device. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid72600;...

Cisco UCS Director Software Has Default Credentials Open to Attackers

Cisco’s UCS Director infrastructure management product contains a set of default credentials that any remote attacker can exploit to take complete control of any vulnerable machine. The flaw is in UCS Director versions 4.0.0.2 and below. The Cisco UCS Director software is designed to allow...

List of 8,000 FTP Credentials for Sale in Underground Forums

Hackers are targeting FTP upload sites with the hopes of redirecting victims to spam or even infecting webservers that rely on FTP applications for updates. Hold Security reported yesterday it had secured a list of credentials for close to 7,800 FTP sites being circulated in cybercrime forums. Th...

Dell KACE K2000 < 3.3.52857 Multiple Vulnerabilities

The remote Dell KACE K2000 appliance is affected by multiple vulnerabilities : - The appliance stores the recovery account password in plaintext within a PHP script. CVE-2011-4046 - The appliance can allow arbitrary command execution by leveraging database write access. CVE-2011-4047 - An...

Netsynt CRD Voice Router CLI Default Credentials (Telnet)

The remote Netsynt CRD Voice Router has a default password. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Default credentials

cgi-bin/postpf/cgi-bin/dynamic/config/config.html on Lexmark X94x before LC.BR.P142, X85x through LC4.BE.P487, X644 and X646 before LC2.MC.P374, X642 through LC2.MB.P318, W840 through LS.HA.P252, T64x before LS.ST.P344, X64xef through LC2.TI.P325, C935dn through LC.JO.P091, C920 through LS.TA.P15...

Alvarion Multiple Products Default Telnet Credentials

Nessus was able to log in to the remote Alvarion device using default credentials. These credentials are publicly known and can allow an attacker to gain privileged access to the device. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid72236; scriptversion"1.5";...

Audemat FMB80 RDS Encoder 'root' Default Credentials (Telnet)

The remote Audemat FMB80 RDS Encoder has no or default credentials set. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Cisco Video Surveillance Manager Default Root Credentials (HTTP)

The remote Cisco Video Surveillance Manager is using known default credentials. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Default credentials

The Expressway component in Cisco TelePresence Video Communication Server VCS uses the same default X.509 certificate across different customers' installations, which makes it easier for remote attackers to conduct man-in-the-middle attacks against SSL sessions by leveraging the certificate's tru...

HP Intelligent Management Center Web Administration Interface Default Credentials

The web administration interface for the HP Intelligent Management Center IMC application running on the remote host uses a known set of default credentials. A remote attacker can exploit this to gain administrative access to the web interface. C Tenable Network Security, Inc. include"compat.inc"...

Default credentials

The write-blocker in CRU Ditto Forensic FieldStation with firmware before 2013Oct15a has a default "ditto" username and password, which allows remote attackers to gain privileges...