CVE-2013-6884

CVE-2013-6884 affects the CRU Ditto Forensic FieldStation write-blocker firmware up to 2013Oct15a. The issue is a default credential pair (username: ditto, password: ditto) that enables remote attackers to gain privileges. Public references (NVD entry and related advisories) confirm the vulnerabi...

Cisco WAAS Mobile Server Web Administration Default Credentials

The web administration interface for Cisco WAAS Mobile on the remote web server uses a known default set of credentials 'admin / default'. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid71840; scriptversion"1.6";...

Default credentials

BlogEngine.NET 2.8.0.0 and earlier allows remote attackers to read usernames and password hashes via a request for the sioc.axd file...

Grandstream GXP VOIP Phones Default Credentials (HTTP)

The remote Grandstream GXP VOIP Phone is using known default credentials. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

OpenMediaVault Default Administrator Credentials

The remote OpenMediaVault install uses a default set of credentials 'admin' / 'openmediavault' to control access to its management interface. With this information, an attacker could gain administrative access to the application. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...

IPmux-2L TDM Pseudowire Access Gateway Default Credentials (Telnet)

The remote IPmux-2L TDM Pseudowire Access Gateway is using known default credentials. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if...

Palo Alto Networks PAN-OS Firewall/Panorama WebUI Default Credentials

The Palo Alto Networks PAN-OS Firewall / Panorama WebUI interface on the remote host has the 'admin' user account secured with the default password. An unauthenticated, remote attacker can exploit this to gain administrative access to the web interface. C Tenable Network Security, Inc...

Schneider Modicon M340 Device Default Credentials (HTTP)

The remote Schneider Modicon M340 device is using known default credentials. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Netin(Knight)content management system vulnerability-vulnerability warning-the black bar safety net

A very cold content management system, for the first time. Background path: netin/Login. asp Default user: admin/netin The default password is:0 0 0 0 0 0/netin2009 Default database:db$snetinb\db$snetin. mdb The default administrator table: BsUser Injection point: http://0day5.com/shownews.asp?id...

Vibo world CMS background get shell-vulnerability warning-the black bar safety net

Keywords: Powered by CNKSYS Background address: admin Default account password: admin admin Get the shell methods: Just find a place to upload a word picture of the horse, renamed to xx. asp ps:back Diamondback found: this app looks like Is makeover。。。。...

ManageEngine Desktop Central Default Administrator Credentials

The ManageEngine Desktop Central application running on the remote host uses a default set of credentials to control access to its management interface. An attacker can exploit this vulnerability to gain administrative access to the application. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...

Blackboard LC3000 Laundry Reader Default Credentials (Telnet)

The remote Blackboard LC3000 Laundry Reader is using known default credentials. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Blackboard LC3000 Laundry Reader Default Telnet Password

The remote device has a telnet service protected by known, default credentials that allow privileged access to the device. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid71096; scriptversion"1.8";...

Cisco Catalyst 3750-X Series Switch Default Credentials Vulnerability (CSCue92286)

The remote Cisco device potentially contains an issue which, due to default credentials on the Cisco Service Module, could allow a local attacker to gain unauthorized root access. TRUSTED...

Zabbix Web Interface Default Administrator Credentials

The remote Zabbix Web Interface uses a default set of credentials 'Admin' / 'zabbix' to control access to its management interface. With this information, an attacker can gain administrative access to the application. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...

Default credentials

The WIL-A module in Cisco TelePresence VX Clinical Assistant 1.2 before 1.21 changes the admin password to an empty password upon a reboot, which makes it easier for remote attackers to obtain access via the administrative interface, aka Bug ID CSCuj17238...

VICIdial Manager Send OS Command Injection Vulnerability

The file agc/managersend.php in the VICIdial web application uses unsanitized user input as part of a command that is executed using the PHP passthru function. A valid username, password and session are needed to access the injection point. Fortunately, VICIdial has two built-in accounts with...

VICIdial Manager Send OS Command Injection

This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 'VICIdial Manager Send OS Command Injection', 'Description' = %q The file agc/managersend.php in the VICIdial web application uses...

VICIdial Manager Send OS Command Injection

The file agc/managersend.php in the VICIdial web application uses unsanitized user input as part of a command that is executed using the PHP passthru function. A valid username, password and session are needed to access the injection point. Fortunately, VICIdial has two built-in accounts with...

Siemens Simatic SCADA WINCC SQL Insecure Default Credentials Security Bypass (CVE-2010-2772)

A security bypass vulnerability has been reported in Siemens SIMATIC WinCC server. A remote attacker can exploit this issue by using the default hard-coded password to bypass certain security restrictions and gain access to the application's database...