Default credentials

The reset password page in Puppet Enterprise before 3.0.1 does not force entry of the current password, which allows attackers to modify user passwords by leveraging session hijacking, an unattended workstation, or other vectors...

Dell KVM Default Credentials (HTTP)

The remote Dell KVM is using known default credentials. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

IBM GCM16/GCM32 Default Credentials (HTTP)

The remote IBM GCM16 or GCM32 KVM is using known default credentials. Copyright C 2013 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free...

Avocent KVM Default Credentials (HTTP)

The remote Avocent KVM is using known default credentials. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fujitsu KVM Default Credentials (HTTP)

The remote Fujitsu KVM is using known default credentials. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

HP IP Console Switch KVM Default Credentials (HTTP)

The remote HP KVM is using known default credentials. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

http-default-accounts NSE Script

Tests for access with default credentials used by a variety of web applications and devices. It works similar to http-enum, we detect applications by matching known paths and launching a login routine using default credentials when found. This script depends on a fingerprint file containing the...

Default credentials

IBM InfoSphere Information Server through 8.5 FP3, 8.7 through FP2, and 9.1 produces login-failure messages indicating whether the username or password is incorrect, which allows remote attackers to enumerate user accounts via a brute-force attack...

Default credentials

The Intelligent Platform Management Interface IPMI implementation in Integrated Management Module IMM and Integrated Management Module II IMM2 on IBM BladeCenter, Flex System, System x iDataPlex, and System x3 servers has a default password for the IPMI user account, which makes it easier for...

Default credentials

Cisco TelePresence System Software 1.10.1 and earlier on 500, 13X0, 1X00, 30X0, and 3X00 devices, and 6.0.3 and earlier on TX 9X00 devices, has a default password for the pwrecovery account, which makes it easier for remote attackers to modify the configuration or perform arbitrary actions via...

Seagate NAS Default Credentials (HTTP)

The remote Seagate NAS is using known default credentials. Copyright C 2013 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; yo...

Cisco TelePresence System Default Credentials Vulnerability

A vulnerability in Cisco TelePresence System could allow a remote attacker to access the web server via a user account that is created with default credentials. The vulnerability is due to a default user account being created at installation time. An attacker could exploit this vulnerability by...

Remotely Exploitable Bug Affects Wide Range of Cisco TelePresence Systems

There’s a serious vulnerability in Cisco’s popular TelePresence system that could give an attacker complete control of the affected system. The vulnerability affects a broad range of TelePresence models, although there are workarounds available. The vulnerability results from the fact that there...

Cisco Releases Security Advisory

Cisco has released a security advisory to address a vulnerability in the Cisco TelePresence System. This vulnerability may allow a remote attacker to access the web server via a user account created with default credentials, which gives the attacker full administrative rights to the system. US-CE...

PineApp Mail-SeCure Default Credentials

The remote PineApp Mail-SeCure install uses a default set of credentials 'pineapp' / 'password' to control access to its management interface. With this information, an attacker can gain administrative access to the application. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...

Zoom Telephonics X4/X5 ADSL Modem - Multiple Vulnerabilities

Vulnerable Products - Zoom X4 ADSL Modem and Router running Nucleus/4.3 UPnP/1.0Virata-EmWeb/R620 Server All GS Firmware versions Zoom X5 ADSL Modem and Router running Nucleus/4.3 UPnP/1.0Virata-EmWeb/R620 Server All GS Firmware versions Note: A similar vulnerability was reported several years ag...

Default credentials

The Digital Alert Systems DASDEC EAS device before 2.0-2 and the Monroe Electronics R189 One-Net EAS device before 2.0-2 have a default password for an administrative account, which makes it easier for remote attackers to obtain access via an IP network...

GroundWork Monitor Enterprise Default Credentials

The remote host has a version of GroundWork Monitor Enterprise installed that is protected by a known set of default credentials. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid67018; scriptversion"1.5";...

大量致远OA默认口令并且公网开放

简要描述： 这款oa销量很广啊，弱口令什么的最可爱了，没技术含量，不赚功劳，只赚苦劳。看之前的一个系统给了rank11，我多几个，要个15不过分吧。 详细说明： 大量弱口令，两种，一种是sysytem，system，另一种是seeyoon，seeyoon。 漏洞证明： 网速太慢，不上图了，直接加上链接，管理员自行核实。 http://oa.shuanglun.com/yyoa/index.jsp 双轮酒业 http://122.158.251.34:8080/yyoa/ 集贤县农村信用合作社...

HP D2D/StorOnce Storage Unit Backdoor (SSH)

HP D2D/StorOnce Storage Units are prone to a security-bypass vulnerability. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...