WebTitan Default Credentials (ssh)

The account 'admin' is using a default password. A remote, unauthenticated attacker could exploit this to log in as a privileged user and gain access to the WebTitan configuration menu. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid76777; scriptversion"$Revision: 1....

[ISME v0.7] IP Phone Scanning Made Easy

ISME is a small framework to test IP phones from several editors. It can gather information from IP phone infrastructures, test their web servers for default login/password combinations, and also implement attacks against the systems. ISME has been written in perl with a perl/Tk interface to...

Desarrollo Web Peru - Default Login Access / SQL Injection Vulnerabilities

Exploit for php platform in category web applications 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 x...

P1 Networks Modem Backdoor

P1 Networks is the first company to launch commercial WiMAX services in Malaysia back in August 2008. Subscribers connect to the base station via a supplied modem. By default, the modem has its port 80 open to allow owner to access its admin interface from a web browser. Currently, the default...

Desarrollo Web Peru Default Login

1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 x Official Website: http://www.1337day.com 0 1 x...

Dell iDRAC Default Login

This module attempts to login to a iDRAC webserver instance using default username and password. Tested against Dell Remote Access Controller 6 - Express version 1.50 and 1.85, Controller 7 - Enterprise 2.63.60.62 Controller 8 - Enterprise 2.83.05 Controller 9 - Enterprise 4.40.00.00 This module...

Twitter Makes HTTPS Default Login Option

Twitter has finally gotten on board the SSL train and made HTTPS the default login option for all of its users who sign in through the Web interface. The company had made secure login an option for users last year but hadn’t made it the default mechanism. On Monday, officials at Twitter said that...

OKI Printer Default Login Credential Scanner

This module scans for OKI printers via SNMP, then tries to connect to found devices with vendor default administrator credentials via HTTP authentication. By default, OKI network printers use the last six digits of the MAC as admin password. This module requires Metasploit:...

Chi youdao professional travel system v1. 0 injected and the column directory vulnerability-vulnerability warning-the black bar safety net

| “Chi youdao”professional travel site system is wise to have team professional development, for the current tourism platform for powerful features developers! Back office management The default background path:/admin/login. asp The default administrator: user:admin Default password: psw:1 2 3 4 ...

Hardware Vendor Offers Backdoor with Every Product

IT administrators know there’s nothing more frustrating than losing administrative access to your network equipment. But Allied Telesis, a Japan-based maker of switches, routers and other networking devices, has a fix: guaranteed backdoors for every product. That revelation comes after a support...

HP Client Automation Default Credentials

The remote install of HP Client Automation has a default password 'secret' set. An attacker may connect to it to reconfigure the application and control remote devices. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description...

RoadRunner Cablemodem Remote Root

Hello. This is the introduction to a large-scale RoadRunner Cable-Router exploit on the Ambit U10C019 CableModem. Basically, the default Cable Router that RoadRunner/TimeWarner gives to its customers by default: 1 Allows for remote login with user: admin, password: cableroot. 2 Allows remote acce...

On plesk virtual host to mention the right-vulnerability warning-the black bar safety net

This virtual machine in a foreign country relatively popular. Safety performance is also very high, where the next record to mention the right methods. 1. mysql adminthe original rootand the default passwordsetupdidn't change,by mysql to provide the right 2. Parallels Plesk Control Panel,in 8 8 8...

Impact Software AdPeeps 8.5d1 - Cross-Site Scripting HTML Injection

Impact Software AdPeeps 8.5d1 - Cross-Site Scripting HTML Injection AdPeeps Ad Rotator - XSS and HTML Injection Vulnerabilities Version Affected: 8.5d1 3-18-09 newest Info: Ad Peeps is a banner rotator and text ad rotator - all in one that allows you to track, sell and manage banner ads,...

Inquira Apache Tomcat Default Login

Bonjour, During a recent penetration test, we discovered and worked with Inquira to close numerous web-based issues. The vendor has not replied back about a formal release of these issues, so I am posting this notice here to inform customers to check for an update for their products. You can...

Siemens ADSL SL2-141 CSRF Exploit

No description provided by source. ?php / ================================================ || Siemens ADSL SL2-141 Router CSRF Exploit || ================================================ - Successful attacks will allow remote access to the router over the internet. - Will Bruteforce the random...

Siemens ADSL SL2-141 XSRF Exploit

"; // Uses the default login to auth Admin:Admin, could use a dictionary instead. // Just some stuff to keep the user busy, aka Rickroll $mystr="Unbelivable moviefunction siera var bullshit='Possibly the funniest video on the web param name="movie"...

Siemens ADSL SL2-141 - Cross-Site Request Forgery

Siemens ADSL SL2-141 - Cross-Site Request Forgery "; // Uses the default login to auth Admin:Admin, could use a dictionary instead. // Just some stuff to keep the user busy, aka Rickroll $mystr="Unbelivable moviefunction siera var bullshit='Possibly the funniest video on the web param...

Siemens ADSL SL2-141 - Cross-Site Request Forgery

"; // Uses the default login to auth Admin:Admin, could use a dictionary instead. // Just some stuff to keep the user busy, aka Rickroll $mystr="Unbelivable moviefunction siera var bullshit='Possibly the funniest video on the web param name="quality" value=...

Siemens ADSL SL2-141 CSRF Exploit

Exploit for hardware platform in category remote exploits ================================= Siemens ADSL SL2-141 CSRF Exploit ================================= "; // Uses the default login to auth Admin:Admin, could use a dictionary instead. // Just some stuff to keep the user busy, aka Rickroll...