4396 matches found
CVE-2020-25561
SapphireIMS 5 utilized default sapphire:ims credentials to connect the client to server. This credential is saved in ServerConf.config file in the client...
SapphireIMS 信任管理问题漏洞
Tecknodreams SapphireIMS is an ITIL 2011 certified enterprise class service management system from Tecknodreams India. A default configuration issue vulnerability exists in Tecknodreams SapphireIMS version 5.0, which stems from the use of default sapphire:ims credentials to connect clients to the...
MTN Group: Default Login Credentials on https://broadbandmaps.mtn.com.gh/
Summary: Hello Team, I just found out that broadbandmaps.mtn.com.gh requires logging in when you visit it, but it turned out that you can actually login as an Admin and do anything on the specific site. when you visit the mentioned site you will get this F1405776 it will require to be logged in t...
Totolink A720R Command Execution Vulnerability
The Totolink A720R is a wireless router from Taiwan, China's Gion Electronics Totolink. The TOTOLINK A720R suffers from a command execution vulnerability that stems from improper design or implementation during code development of the network system. The vulnerability can be exploited by an...
CVE-2021-35327
A vulnerability in TOTOLINK A720R A720RFirmware v4.1.5cu.470B20200911 allows attackers to start the Telnet service, then login with the default credentials via a crafted POST request...
CVE-2021-35327
A vulnerability in TOTOLINK A720R A720RFirmware v4.1.5cu.470B20200911 allows attackers to start the Telnet service, then login with the default credentials via a crafted POST request...
Default credentials
When curl is instructed to get content using the metalink feature, and a user name and password are used to download the metalink XML file, those same credentials are then subsequently passed on to each of the servers from which curl will download or try to download the contents from. Often...
CVE-2021-35327
The CVE-2021-35327 entry concerns Totolink A720R routers (firmware v4.1.5cu.470_B20200911). Affected component: Telnet service authentication; root cause: improper handling allowing Telnet to start and login with default credentials via a crafted POST request. Reported impact: attacker could gain...
TotoLink A720R 安全漏洞
The Totolink A720R is a wireless router from Taiwan, China's Gion Electronics Totolink. The TOTOLINK A720R suffers from a command execution vulnerability that stems from improper design or implementation during code development of the network system. The vulnerability can be exploited by an...
PT-2021-20889
Name of the Vulnerable Software and Affected Versions: TOTOLINK A720R version v4.1.5cu.470 B20200911 Description: A vulnerability allows attackers to start the Telnet service and then login with the default credentials via a crafted POST request. Recommendations: For version v4.1.5cu.470 B2020091...
Apache Guacamole Default Credentials (HTTP)
The remote Apache Guacamole instance is using known default credentials for the HTTP login. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later...
Default credentials
In Liferay Portal 7.3.0 and earlier, and Liferay DXP 7.0 before fix pack 96, 7.1 before fix pack 18, and 7.2 before fix pack 5, password reset tokens are not invalidated after a user changes their password, which allows remote attackers to change the user’s password via the old password reset tok...
CVE-2021-37167
An insecure permissions issue was discovered in HMI3 Control Panel in Swisslog Healthcare Nexus Panel operated by released versions of software before Nexus Software 7.2.5.7. A user logged in using the default credentials can gain root access to the device, which provides permissions for all of t...
CVE-2021-37167
An insecure permissions issue was discovered in HMI3 Control Panel in Swisslog Healthcare Nexus Panel operated by released versions of software before Nexus Software 7.2.5.7. A user logged in using the default credentials can gain root access to the device, which provides permissions for all of t...
Default credentials
An insecure permissions issue was discovered in HMI3 Control Panel in Swisslog Healthcare Nexus Panel operated by released versions of software before Nexus Software 7.2.5.7. A user logged in using the default credentials can gain root access to the device, which provides permissions for all of t...
CVE-2021-37167
CVE-2021-37167 affects the HMI3 Control Panel in Swisslog Healthcare Nexus Panel, specifically released builds prior to Nexus Software 7.2.5.7. An insecure permissions issue allows a user who logs in with default credentials to gain root access to the device, granting full control over device fun...
CVE-2021-37167
An insecure permissions issue was discovered in HMI3 Control Panel in Swisslog Healthcare Nexus Panel operated by released versions of software before Nexus Software 7.2.5.7. A user logged in using the default credentials can gain root access to the device, which provides permissions for all of t...
PT-2021-21547 · Swisslog · Swisslog Healthcare Nexus Panel
Name of the Vulnerable Software and Affected Versions: Swisslog Healthcare Nexus Panel versions prior to 7.2.5.7 Description: An insecure permissions issue was discovered in the HMI3 Control Panel of the Swisslog Healthcare Nexus Panel. This issue allows a user logged in using the default...
Default credentials
TX9 Automatic Food Dispenser v3.2.57 devices allow access to a shell as root/superuser, a related issue to CVE-2019-16734. To connect, the telnet service is used on port 23 with the default password of 059AnkJ for the root account. The user can then download the filesystem through preinstalled...