HP Universal CMDB Default Credentials Arbitrary File Upload (CVE-2014-2617)

A code execution vulnerability exists in HP Universal CMDB. The vulnerability is due to the use of hard-coded credentials when processing HTTP requests. A remote attacker can upload arbitrary files to arbitrary locations using the default credentials...

IBM Rational License Key Server Administration and Reporting Tool Default Credentials

Nessus was able to login to the remote web interface for the IBM Rational License Key Server Administration and Reporting Tool using a default set of known credentials. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description...

OpenMediaVault Default Admin Credentials (HTTP)

The remote OpenMediaVault web interface is using known default credentials. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

TP-Link TL-WR340G TL-WR340GD - Multiple Vulnerabilities

TP-Link TL-WR340G TL-WR340GD - Multiple Vulnerabilities Title: TP-LINK Model No. TL-WR340G/TL-WR340GD - Multiple Vulnerabilities Date: 01.07.14 Vendor: TP-LINK Affected versions: TL-WR340G/TL-WR340GD Tested on: Firmware Version - 4.3.7 Build 090901 Rel.61899n, Hardware Version - WR340G v5 081520C...

ManageEngine EventLog Analyzer Default Credentials

The remote ManageEngine EventLog Analyzer web administration interface uses a known set of default credentials. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid77479; scriptversion"1.5";...

Default credentials

The WordPress Mobile Pack plugin before 2.0.2 for WordPress does not properly restrict access to password protected posts, which allows remote attackers to obtain sensitive information via an exportarticles action to export/content.php...

Barco ClickShare Device Default Credentials

Nessus was able to login to the web administration interface on the remote Barco ClickShare device using a default set of known credentials. A remote attacker can exploit this to gain administrative control of the device. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...

Halon Security Router User Interface Default Credentials

The remote Halon Security Router user interface uses a known set of default credentials. An attacker with access to the service can gain administrative access to the device. Additionally, these credentials allow SSH if enabled access to the device with root privileges. %NASLMINLEVEL 70300 C Tenab...

Default credentials

usr/lib/cgi-bin/createpasswdfile.py in Pyplate 0.08 uses world-readable permissions for passwd.db, which allows local users to obtain the administrator password by reading this file...

F5 Networks BIG-IP Web Interface Default Credential Check

Nessus was able to login to the administrative interface on the remote F5 Networks BIG-IP device using a known set of default credentials. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid76942; scriptversion"1.4";...

Datum Systems Satellite Modem Multiple Vulnerabilities

Datum Systems Satellite Modem is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CMSimple - Default Administrator Credentials

CMSimple - Default Administrator Credentials source: https://www.securityfocus.com/bid/68961/info CMSimple is prone to multiple security vulnerabilities including: 1. Multiple arbitrary PHP code-execution vulnerabilities 2. A weak authentication security-bypass vulnerability 3. Multiple security...

WebTitan Web Interface Default Credentials

The remote WebTitan web interface uses a default set of credentials 'admin' / 'hiadmin' to control access to its management interface. A remote, unauthenticated attacker could exploit this to log in as a privileged user and gain administrative access to the application. %NASLMINLEVEL 70300 C...

WebTitan Default Credentials (ssh)

The account 'admin' is using a default password. A remote, unauthenticated attacker could exploit this to log in as a privileged user and gain access to the WebTitan configuration menu. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid76777; scriptversion"$Revision: 1....

Default credentials

Infoblox NetMRI before 6.8.5 has a default password of admin for the "root" MySQL database account, which makes it easier for local users to obtain access via unspecified vectors...

Mobotix Cameras Default Admin Credentials (HTTP)

The remote Mobotix camera web interface is using default credentials. This VT has been deprecated as a duplicate of the VT SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Default credentials

Apache Syncope 1.1.x before 1.1.8 uses weak random values to generate passwords, which makes it easier for remote attackers to guess the password via a brute force attack...

Hardcoded Password Flaw Plagues Some Netgear Switches

A vulnerability in Netgear-branded ethernet switches could give an attacker full access to the hardware, including the ability to log into the device and execute arbitrary code. Netgear’s GS108PE Prosafe Plus switches running version 1.2.0.5 are at risk, according to an analyst at CERT/CC’s...

SMB Brute Force Logins With Default Credentials

A number of known default credentials are tried for the login via the SMB protocol. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescripti...

Default credentials

Settings in Apple iOS before 7.1.2 allows physically proximate attackers to bypass an intended iCloud password requirement, and turn off the Find My iPhone service, by leveraging incorrect state management...