Default credentials

nm-connection-editor in NetworkManager NM 0.7.x exports connection objects over D-Bus upon actions in the connection editor GUI, which allows local users to obtain sensitive information by reading D-Bus signals, as demonstrated by using dbus-monitor to discover the password for the WiFi network...

Oracle WebLogic Default Credentials

It is possible to log into the remote WebLogic installation by providing the default credentials. A remote attacker could exploit this to gain administrative control of this installation. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; i...

Default credentials

Moodle 1.8 before 1.8.11 and 1.9 before 1.9.7 does not use a random password salt in config.php, which makes it easier for attackers to conduct brute-force password guessing attacks...

phpShop Default Credentials

It is possible to log into the remote phpShop installation by providing default credentials. Several accounts are included in the default phpShop installation. A remote attacker could exploit this to gain unauthorized, potentially administrative control of the phpShop installation. %NASLMINLEVEL...

Request Tracker Default Credentials

It is possible to log into the Best Practical Solutions Request Tracker RT application by providing default credentials. A remote attacker can exploit this to gain administrative control. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; i...

HP Power Manager Management Default Credentials (HTTP)

The installed remote HP Power Manager has the default credentials SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:hp:powermanager...

HP Power Manager Default Credentials

The remote host is running HP Power Manager, a web-based user definable UPS management and monitoring utility. The installed version has a default password 'admin' set. An attacker may connect to it to reconfigure the application and control remote UPSs. %NASLMINLEVEL 70300 C Tenable Network...

OSSIM Web Frontend Default Credentials

It is possible to log into the remote OSSIM web frontend by providing the default credentials. A remote attacker could exploit this to gain administrative control of the OSSIM web frontend. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc';...

Infoblox IPAM Appliance Default Credentials

The remote host appears to be running Infoblox IPAM appliance. Nessus was able to log into the remote web console using default credentials. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid42212; scriptversion"1.12...

JDownloader Detection (HTTP)

HTTP based detection of JDownloader. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.100301";...

Default credentials

token.cgi in Bugzilla 3.4rc1 through 3.4.1 places a password in a URL at the beginning of a login session that occurs immediately after a password reset, which allows context-dependent attackers to discover passwords by reading 1 web-server access logs, 2 web-server Referer logs, or 3 the browser...

Huawei SmartAX MT880 - Multiple Cross-Site Request Forgery Vulnerabilities

Huawei SmartAX MT880 - Multiple Cross-Site Request Forgery Vulnerabilities Description: Huawei MT880 is a device offered by the algerian telecom operator - FAWRI, to provide ADSL Internet connexion and it's already widely in use. Overview: Huawei MT880 firmware and its default configuration has...

Huawei SmartAX MT880 Multiple XSRF Vulnerabilities

Exploit for hardware platform in category remote exploits ================================================== Huawei SmartAX MT880 Multiple XSRF Vulnerabilities ================================================== Description: Huawei MT880 is a device offered by the algerian telecom operator - FAWRI...

Huawei SmartAX MT880 - Multiple Cross-Site Request Forgery Vulnerabilities

Description: Huawei MT880 is a device offered by the algerian telecom operator - FAWRI, to provide ADSL Internet connexion and it's already widely in use. Overview: Huawei MT880 firmware and its default configuration has flaws, which allows LAN users to gain unauthorized full access to device. He...

Default credentials

The Web Services functionality in IBM WebSphere Application Server WAS 6.1 before 6.1.0.25 and 7.0 before 7.0.0.5, in certain circumstances involving the ibm-webservicesclient-bind.xmi file and custom password encryption, uses weak password obfuscation, which allows local users to cause a denial ...

Wyse Device Manager Default FTP Account

The remote FTP server has an account with a known username / password combination, possibly created as part of an installation of Wyse Device Manager. An attacker may be able to use this to gain authenticated access to the system, which could allow for other attacks against the affected applicati...

Default credentials

Drupal 5.x before 5.19 and 6.x before 6.13 does not properly sanitize failed login attempts for pages that contain a sortable table, which includes the username and password in links that can be read from 1 the HTTP referer header of external web sites that are visited from those links or 2 when...

HP DDMI Web Interface Default Credentials

The remote host is running HP Discovery & Dependency Mapping Inventory DDMI, which is used to automate discovery and inventory of network devices. The remote installation of HP DDMI has at least one account configured using default credentials. Knowing these, an attacker can gain access to the...

Default credentials

The Axesstel MV 410R has a certain default administrator password, and does not force a password change, which makes it easier for remote attackers to obtain access...

Default credentials

account-recover.php in TorrentTrader Classic 1.09 chooses random passwords from an insufficiently large set, which makes it easier for remote attackers to obtain a password via a brute-force attack...