CVE-2018-20955

Swann SWWHD-INTCAM-HD devices have the twipc root password, leading to FTP access as root. NOTE: all affected customers were migrated by 2020-08-31...

Default credentials

Swann SWWHD-INTCAM-HD devices have the twipc root password, leading to FTP access as root. NOTE: all affected customers were migrated by 2020-08-31...

CVE-2018-20955

Swann SWWHD-INTCAM-HD devices have the twipc root password, leading to FTP access as root. NOTE: all affected customers were migrated by 2020-08-31...

CVE-2018-20955

The CVE-2018-20955 entry affects Swann SWWHD-INTCAM-HD devices, where a hardcoded/twipc root password allows FTP access as root. This enables high-severity, network-based impact to confidentiality, integrity, and availability. Public references confirm root FTP access due to default credentials. ...

CVE-2018-20955: Use of Hard-coded Credentials

Swann SWWHD-INTCAM-HD devices have the twipc root password, leading to FTP access as root. NOTE: all affected customers were migrated by 2020-08-31...

CVE-2018-20883

cPanel before 74.0.8 allows FTP access during account suspension SEC-449...

Design/Logic Flaw

cPanel before 74.0.8 allows FTP access during account suspension SEC-449...

CVE-2018-20883

cPanel before 74.0.8 allows FTP access during account suspension SEC-449...

PT-2019-10312

Name of the Vulnerable Software and Affected Versions: cPanel versions prior to 74.0.8 Description: The issue allows FTP access during account suspension. Recommendations: For versions prior to 74.0.8, update to version 74.0.8 or later to resolve the issue...

CVE-2018-20883: Improper Input Validation

cPanel before 74.0.8 allows FTP access during account suspension SEC-449...

CVE-2019-6549

An attacker could retrieve plain-text credentials stored in a XML file on PR100088 Modbus gateway versions prior to Release R02 or Software Version 1.1.13166 through FTP...

CVE-2017-3209

The DBPOWER U818A WIFI quadcopter drone provides FTP access over its own local access point, and allows full file permissions to the anonymous user. The DBPower U818A WIFI quadcopter drone runs an FTP server that by default allows anonymous access without a password, and provides full filesystem...

CVE-2017-3209 The DBPOWER U818A WIFI quadcopter drone provides FTP access over its own local access point, and allows full file permissions to the anonymous user

The DBPOWER U818A WIFI quadcopter drone provides FTP access over its own local access point, and allows full file permissions to the anonymous user. The DBPower U818A WIFI quadcopter drone runs an FTP server that by default allows anonymous access without a password, and provides full filesystem...

Sn1per v5.0 - Automated Pentest Recon Scanner

Sn1per Community Edition is an automated scanner that can be used during a penetration test to enumerate and scan for vulnerabilities. Sn1per Professional is Xero Security's premium reporting addon for Professional Penetration Testers, Bug Bounty Researchers and Corporate Security teams to manage...

CVE-2018-7779

In Schneider Electric Wiser for KNX V2.1.0 and prior, homeLYnk V2.0.1 and prior; and spaceLYnk V2.1.0 and prior, weak and unprotected FTP access could allow an attacker unauthorized access...

Design/Logic Flaw

In Schneider Electric Wiser for KNX V2.1.0 and prior, homeLYnk V2.0.1 and prior; and spaceLYnk V2.1.0 and prior, weak and unprotected FTP access could allow an attacker unauthorized access...

CVE-2018-7779

In Schneider Electric Wiser for KNX (V2.1.0 and prior), homeLYnk (V2.0.1 and prior), and spaceLYnk (V2.1.0 and prior), the vulnerability stems from weak and unprotected FTP access that could allow an attacker unauthorized access. The sources identify affected products and versions and describe th...

CVE-2018-7779: Undefined Security Weakness

In Schneider Electric Wiser for KNX V2.1.0 and prior, homeLYnk V2.0.1 and prior; and spaceLYnk V2.1.0 and prior, weak and unprotected FTP access could allow an attacker unauthorized access...

Sn1per - Automated PenTest Recon Scanner

Sn1per is an automated scanner that can be used during a penetration test to enumerate and scan for vulnerabilities. DEMO VIDEO: FEATURES: Automatically collects basic recon ie. whois, ping, DNS, etc. Automatically launches Google hacking queries against a target domain Automatically enumerates...

DBPOWER U818A WIFI quadcopter drone allows full filesystem permissions to anonymous FTP

Overview The DBPOWER U818A WIFI quadcopter drone provides FTP access over its own local access point, and allows full file permissions to the anonymous user. Description The DBPOWER U8181A WIFI quadcopter drone is designed to record images and video from the air. The drone provides an undocumente...