CVE-2017-7575

Schneider Electric Modicon TM221CE16R 1.3.3.3 devices allow remote attackers to discover the application-protection password via a \x00\x01\x00\x00\x00\x05\x01\x5a\x00\x03\x00 request to the Modbus port 502/tcp. Subsequently the application may be arbitrarily downloaded, modified, and uploaded...

PT-2017-17810

Name of the Vulnerable Software and Affected Versions Schneider Electric Modicon TM221CE16R version 1.3.3.3 Description The issue allows remote attackers to discover the application-protection password by sending a specific request to the Modbus port 502/tcp. After obtaining the password, an...

CVE-2016-10314

Jensen of Scandinavia AS Air:Link 3G AL3G version 2.23m Rev. 3, Air:Link 5000AC AL5000AC version 1.13, and Air:Link 59300 AL59300 version 1.04 Rev. 4 devices allow remote attackers to read passwords via a direct request to the x.asp page...

CVE-2016-10314

The CVE-2016-10314 entry affects Jensen of ScandinaviaAir:Link devices: AL3G (2.23m, Rev. 3), AL5000AC (1.13), and AL59300 (1.04, Rev. 4). The issue is an information-disclosure vulnerability allowing remote attackers to read passwords via a direct request to the x.asp page. The Red Hat/NVD entri...

CVE-2017-5227

QNAP QTS before 4.2.4 Build 20170313 allows local users to obtain sensitive Domain Administrator password information by reading data in an XOR format within the /etc/config/uLinux.conf configuration file...

iball Baton 150M Wireless Router password disclosure vulnerability

No description provided by source...

CVE-2014-8701

Wonder CMS 2014 allows remote attackers to obtain sensitive information by viewing /files/password, which reveals the unsalted MD5 hashed password...

CVE-2017-5674

CVE-2017-5674 affects a GoAhead-based web server used in Foscam, VStarcam, and several white-label IP cameras. The vulnerability arises from crafting a malformed HTTP request (GET system.ini HTTP/1.1 with no leading slash) that discloses the device’s configuration file containing login credential...

CVE-2017-5139

An issue was discovered in Honeywell XL Web II controller XL1000C500 XLWebExe-2-01-00 and prior, and XLWeb 500 XLWebExe-1-02-08 and prior. Any user is able to disclose a password by accessing a specific URL, because of Plaintext Storage of a Password...

Default credentials

An issue was discovered in Honeywell XL Web II controller XL1000C500 XLWebExe-2-01-00 and prior, and XLWeb 500 XLWebExe-1-02-08 and prior. Any user is able to disclose a password by accessing a specific URL, because of Plaintext Storage of a Password...

CVE-2017-5139

An issue was discovered in Honeywell XL Web II controller XL1000C500 XLWebExe-2-01-00 and prior, and XLWeb 500 XLWebExe-1-02-08 and prior. Any user is able to disclose a password by accessing a specific URL, because of Plaintext Storage of a Password...

CVE-2017-5139

CVE-2017-5139 affects Honeywell XL Web II controller family (XL1000C500 XLWebExe-2-01-00 and prior; XLWeb 500 XLWebExe-1-02-08 and prior). Root cause: plaintext storage of a password, enabling password disclosure via a specific URL. Impact per sources: remote exposure of passwords, with high-seve...

Kodi 17.1 - Arbitrary File Disclosure

Exploit Title: Kodi - Local File Inclusion Date: 12 February 2017 Exploit Author: Eric Flokstra Vendor Homepage: https://kodi.tv/ Software Link: https://kodi.tv/download/ Version: Kodi version 17.1 Krypton, Chorus version 2.4.2 Tested on: Linux Kodi formerly XBMC is a free and open-source media...

Fortinet FortiOS 5.2.x < 5.2.10 / 5.4.1 < 5.4.2 Local Password Hash Disclosure (FG-IR-16-050)

The remote FortiGate device is running a version of FortiOS that is 5.2.x prior to 5.2.10, or else it is running version 5.4.1. It is, therefore, affected by a local information disclosure vulnerability due to a failure to properly protect password hashes stored on the device. A local attacker ca...

NETWAVE IP Camera Password Disclosure Vulnerability

NETWAVE IP Camera is a webcam product. NETWAVE IP Camera suffers from a password disclosure vulnerability, which allows an attacker to obtain the username and password of the device via POC code, resulting in a password disclosure risk...

NETGEAR Administrator Password Disclosure

This module will collect the password for the admin user. The exploit will not complete if password recovery is set on the router. The password is received by passing the token generated from unauth.cgi to passwordrecovered.cgi. This exploit works on many different NETGEAR products. The full list...

Schneider Electric StruxureWare Data Center Expert Product Password Disclosure Vulnerability

StruxureWare Data Center Expert is a DCIM Data Center Infrastructure Management solution designed to monitor and control infrastructure, including security, power and environment. A password disclosure vulnerability exists in the Schneider Electric StruxureWare Data Center Expert product. The...

Netgear router password disclosure Vulnerability(CVE-2017-5521)

0x01 vulnerability overview NETGEAR is a United States well-known router manufacturers, its products are used worldwide extensively. Recently, foreign security researcher Simon Kenin find NETGEAR router more series there is a password leak Vulnerability, CVE-2017-5521-in. When the router Password...

Netwave IP Camera Server - Password Disclosure

No description provided by source. !/usr/bin/python2.7 Run the exploit against the victim to get WIFI password If the victim is vulnerable to memory leak it will try to extract the username and password for the weblogin magic for you bash: wget -qO- http://HOST:PORT//proc/kcore | strings wget -qO...

Honeywell XL Web Multiple Vulnerabilities

Honeywell XL Web is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...