Default credentials

Cisco Mediator Framework 1.5.1 before 1.5.1.build.14-eng, 2.2 before 2.2.1.dev.1, and 3.0 before 3.0.9.release.1 on the Cisco Network Building Mediator NBM-2400 and NBM-4800 and the Richards-Zeta Mediator 2500 has a default password for the administrative user account and unspecified other...

Apache Axis2 Default Credentials

The installation of Apache Axis2 hosted on the remote web server uses a default set of credentials to control access to its administrative console. A remote attacker can exploit this to gain administrative control. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...

Default credentials

The web interface on the Cisco Scientific Atlanta WebSTAR DPC2100R2 cable modem with firmware 2.0.2r1256-060303 has a default administrative password aka SAPassword of W2402, which makes it easier for remote attackers to obtain privileged access...

NolaPro Default Credentials

The installation of NolaPro on the remote web server uses the default username and password to control access to its administrative console. Knowing these, an attacker can gain administrative control of the affected application. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...

Default credentials

The configuration page in ToutVirtual VirtualIQ Pro 3.2 build 7882 contains cleartext SSH credentials, which allows remote attackers to obtain sensitive information by reading the username and password fields...

TaskFreak! Default Credentials

The installation of TaskFreak! hosted on the remote web server uses the default username and password to control access to its administrative console. Knowing these, an attacker can gain control of the affected application. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...

Ektron CMS400.NET Default Credentials

It is possible to log into the Ektron CMS400.NET install on the remote host using a default set of credentials. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid46198; scriptversion"1.12";...

Default credentials

IBM WebSphere Application Server WAS 6.0 before 6.0.2.41, 6.1 before 6.1.0.31, and 7.0 before 7.0.0.9 does not properly define wsadmin scripting J2CConnectionFactory objects, which allows local users to discover a KeyRingPassword password by reading a cleartext field in the resources.xml file...

SAP Netweaver XRFC — Stack Overflow

Application: SAP BASIS Versions Affected: SAP XRFC 6.40/7.00 may be others Vendor URL: Bugs: Stack Overflow Exploits: YES DoS PoC Reported: 29.03.2010 Vendor response: 29.03.2010 Date of Public Advisory: 09.11.2010 Author: Alexey Sintsov Description It is possible to call stack overflow via RFC...

Hyperic HQ Web GUI Default Credentials

It is possible to log into the remote Hyperic HQ installation using its default credentials. A remote attacker could exploit this to gain administrative control of the application. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if...

Remote Help Default Credentials

It was possible to log in to the Remote Help server on the remote host using a default set of credentials. An attacker could exploit this flaw in order to gain complete control of the affected system. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc';...

Default credentials

Cisco Digital Media Manager DMM 5.0.x and 5.1.x has a default password for the Tomcat administration account, which makes it easier for remote attackers to execute arbitrary code via a crafted web application, aka Bug ID CSCta03378...

Cisco Security Advisory: Multiple Vulnerabilities in Cisco Digital Media Manager

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: Multiple Vulnerabilities in Cisco Digital Media Manager Advisory ID: cisco-sa-20100303-dmm http://www.cisco.com/warp/public/707/cisco-sa-20100303-dmm.shtml Revision 1.0 For Public Release 2010 March 03 1600 UTC GMT...

Cisco Digital Media Manager multiple security vulnerabilities

default credentials, privilege escalation, information leak...

Cisco Releases Multiple Security Advisories

Cisco has released three security advisories to address vulnerabilities. Security advisory cisco-sa-20100303-cucm, addresses multiple vulnerabilities in the Cisco Unified Communications Manager which affect the Session Initiation Protocol SIP, Skinny Client Control Protocol SCCP, and the Computer...

Cisco Network Building Mediator

Overview Cisco has identified multiple security vulnerabilitiesCisco, http://www.cisco.com/en/US/products/productssecurityadvisory09186a0080b2c518.shtml, website last visited May 27, 2010. in the Cisco Network Building Mediator NBM products. These vulnerabilities also affect the legacy...

FreePBX / PBXconfig Default Credentials

The remote web server hosts FreePBX or PBXconfig, both of which are web-based interfaces used to control and manage Asterisk. The remote installation of the interface has at least one account configured using default credentials. With this information, an attacker can gain administrative access t...

Default credentials

HP Operations Agent 8.51, 8.52, 8.53, and 8.60 on Solaris 10 uses a blank password for the opcop account, which allows remote attackers to execute arbitrary code via unspecified vectors...

TYPO3 Default Credentials

It is possible to log into the remote TYPO3 installation by providing the default credentials. A remote attacker can exploit this to gain administrative control of the TYPO3 installation. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; i...

Default credentials

nm-connection-editor in NetworkManager NM 0.7.x exports connection objects over D-Bus upon actions in the connection editor GUI, which allows local users to obtain sensitive information by reading D-Bus signals, as demonstrated by using dbus-monitor to discover the password for the WiFi network...