IBM RSA Default Credentials

The IBM Remote Supervisor Adapter is configured to use the default credentials to control access. Knowing these, an attacker can gain total control of the machine. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid50348; scriptversion"1.12"; scriptcvsdate"Date: 2018/11/...

Artica Default Credentials

It is possible to log into Artica's web management console using default credentials. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid50324; scriptversion"1.11"; scriptsetattributeattribute:"pluginmodificationdate"...

Default credentials

Apache Axis2, as used in dswsbobje.war in SAP BusinessObjects Enterprise XI 3.2, CA ARCserve D2D r15, and other products, has a default password of axis2 for the admin account, which makes it easier for remote attackers to execute arbitrary code by uploading a crafted web service...

Default Password (nagiosxi) for 'root' Account

It is possible to SSH into the remote Nagios XI virtual machine appliance by providing default credentials. A remote attacker could exploit this to gain complete control of the remote host. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc';...

Mura CMS Default Administrator Credentials

The remote Mura CMS install uses a default set of credentials 'admin' / 'admin' to control access to the Mura Admin. With this information, an attacker can gain administrative access to the application. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc';...

Linksys Router Debug Credentials (Gemtek / gemtekswd)

The remote Linksys device accepts hard-coded default credentials Gemtek / gemtekswd on a debug page. An attacker can run arbitrary commands on this device using this account. This flaw is known to affect two firmware versions : - Linksys WAP54Gv3 3.4.3.US - Linksys WAP54Gv3 3.5.3.Europe...

Firebird Default Credentials (Firebird Protocol)

It is possible to connect to the remote database service using default credentials. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if...

Splunk Default Administrator Credentials (Splunk Web)

The version of Splunk hosted on the remote web server uses a default set of credentials for the default administrator account. A remote attacker can exploit this to gain administrative access to the application. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'...

Splunk Default Administrator Credentials (splunkd)

The version of Splunk hosted on the remote web server uses a default set of credentials for the default administrator account. A remote attacker can exploit this to gain administrative access to the application. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'...

Linksys WAP Default Credentials Detection

Binary data 5649.prm...

Default credentials

The authenticate function in LDAPUserFolder/LDAPUserFolder.py in zope-ldapuserfolder 2.9-1 does not verify the password for the emergency account, which allows remote attackers to gain privileges...

Authentication flaw

The controller in Cisco Unified Wireless Network UWN Solution 7.x through 7.0.98.0 has 1 a default SNMP read-only community of public, 2 a default SNMP read-write community of private, and a value of "default" for the 3 SNMP v3 username, 4 SNMP v3 authentication password, and 5 SNMP v3 privacy...

Novell Teaming Default Credentials

The installed version of Novell Teaming hosted on the remote web server uses the default username and password to control access to its administrative console. Knowing these, an attacker can gain control of the affected application. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...

JBoss Administration Console Default Credentials

The JBoss Administration Console installed on the remote host uses the default username and password. Knowing these, an attacker can gain administrative control of the affected application. C Tenable Network Security, Inc. include'compat.inc'; if description scriptid47714; scriptversion"1.11";...

Default credentials

The Linear eMerge 50 and 5000 uses a default password of eMerge for the IEIeMerge account, which makes it easier for remote attackers to obtain Video Recorder data by establishing a session to the device...

Default credentials

admin/index.php in oBlog allows remote attackers to conduct brute-force password guessing attacks via HTTP requests...

Default credentials

Apple Safari before 5.0 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1 on Mac OS X 10.4, does not provide a warning about a 1 http or 2 https URL that contains a username and password, which makes it easier for remote attackers to conduct phishing attacks via a crafted URL...

Default credentials

Galileo Students Team Weborf before 0.12.1 allows remote attackers to cause a denial of service crash via a crafted Range header...

With the Database, Sometimes it's the Little Things That Matter

Most users are aware of the risks connected to the default, blank and weak username/password combinations associated with most applications. Yet it amazes the research community that many companies still don’t heed the following simple advice: 1 Don’t use easily guessed passwords. 2 Change the...

ManageEngine ADManager Plus Default Credentials

It is possible to log into the remote ADManager Plus installation by providing the default credentials. A remote attacker could exploit this to gain administrative control of the ADManager Plus installation. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc';...