Nortel Multiple Default Accounts

It is possible to log into the remote host by using a default set of credentials. An attacker may use these to gain access to the remote host. These credentials are commonly found on Nortel Accelar routing switches. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...

Yak! FTP Server Default Credentials (deprecated)

Binary data 1091.prm...

Sybase SQL-Anywhere Database Server Default Credentials

Binary data 5150.prm...

Sybase ASE (Adaptive Server Enterprise) Database Server Default Credentials

Binary data 5157.prm...

Serv-U 3.x, 4.x, 5.x local privilege escalation

/ Hax0rcitos proudly presents Serv-u Local Exploit v3.x. tested also against last version 5.1.0.0 All Serv-u Versions have default Login/password for local Administration. This account is only available to connect in the loopback interface, so a local user will be able to connect to Serv-u with...

XMicro.backdoor.txt

Backdoor in the X-Micro WLAN 11b Broadband Router FCC ID: RAFXWL-11BRRG Firmware Version: 1.2.2, 1.2.2.3 probably others too Remote: yes, easily expoitable Type: administration password, which always works The following username and password works in every case, even if you set an other password ...

CVE-2002-1577

SAP R/3 2.0B to 4.6D installs several clients with default users and passwords, which allows remote attackers to gain privileges via the 1 SAP, 2 SAPCPIC, 3 DDIC, 4 EARLYWATCH, or 5 TMSADM accounts...

ImageFolio All Versions : admin.cgi Directory transversal and file delete exploit.

/---------------------------- Pimp industries. -----------------------------/ ImageFolio All Versions : admin.cgi Directory transversal and file delete exploit. Company: www.imagefolio.com Background ------------- ImageFolio is a multi-platform, server-based, software...

Default Password for FTP 'admin' Account

The account 'admin' on the remote FTP server has the password 'password'. An attacker may leverage this to gain access to the affected system and launch further attacks against it. If the remote host is an NB1300 router, this would allow an attacker to steal the WAN credentials of the user, or ev...

CVS pserver Brute Force Access

It was possible to find the public CVS repository of the remote host by searching a list of commonly used passwords and CVS repositories. A remote attacker could exploit this to access or modify sensitive information. C Tenable Network Security, Inc. include"compat.inc"; ifdescription...

External access to Netgear RP114 "firewall"

The NetGear Web Safe Router RP114 with current firmware 3.26 is vulnerable in its default configuration. The router acts as a DHCP server for LAN clients and as a DHCP client on the external side. The IP address 192.168.0.1 is meant for local access, as DHCP server, DNS proxy, default gateway and...

CVE-2002-0310

CVE-2002-0310 affects Netwin WebNews 1.1k CGI. The issue arises from default usernames and cleartext passwords that cannot be deleted by the administrator, enabling remote attackers to gain privileges using the listed credential pairs (testweb/newstest, alwn3845/imaptest, alwi3845/wtest3452, test...

CVE-2001-1195

CVE-2001-1195 affects Novell GroupWise Servlet Manager (groupwise servlet server) with default credentials. Connected sources confirm that a default username/password (e.g., servlet/manager) enables remote attackers to access the servlet manager and potentially gain privileges. The OpenVAS entrie...

CVE-2001-1213

The CVE-2001-1213 entry applies to DataWizard FtpXQ 2.0 and 2.1, where a default configuration uses a default username and password, enabling remote attackers to read and write arbitrary files in the root folder. Root cause: default credentials in the product’s default setup. Impact per NVD: conf...

CVE-2001-1213

The default configuration of DataWizard FtpXQ 2.0 and 2.1 includes a default username and password, which allows remote attackers to read and write arbitrary files in the root folder...

Microsoft SQL Server Default Credentials

The SQL Server has a common password for one or more accounts. These accounts may be used to gain access to the records in the database or even allow remote command execution. %NASLMINLEVEL 70300 MSSQL Brute Forcer This script checks a SQL Server instance for common username and password...

Novell Groupwise 5.56.0 Servlet Gateway - Default Authentication

Novell Groupwise 5.56.0 Servlet Gateway - Default Authentication source: https://www.securityfocus.com/bid/3697/info Novell Groupwise Servlet Gateway is a product that allows Java servlets to be run with NetWare, using Novell JVM for NetWare v1.1.7b and NetWare Enterprise Web Server. A remote...

CVE-2001-0632

Sun Chili!Soft 3.5.2 on Linux and 3.6 on AIX creates a default admin username and password in the default installation, which can allow a remote attacker to gain additional privileges...

CVE-2001-0051

IBM DB2 Universal Database version 6.1 creates an account with a default user name and password, which allows remote attackers to gain access to the database...

Sun Java Web Server 1.1.3/2.0 Servlets - information Disclosure

source: https://www.securityfocus.com/bid/1498/info The servlet sunexamples.RealmDumpServlet, which is packaged by Default with Sun's Java Web Server, can be used to discover ACLs and local users on the server. http://javawebserver.com/pservlet.html User: sherwin User: floorsoft User: shaw User:...