Cross site request forgery (csrf)

letodms 3.3.6 has CSRF via change password...

Fastweb Fastgate 0.00.81 - Remote Code Execution

Exploit Title: Fastweb Fastgate 0.00.81 - Remote Code Execution Date: 2019-11-13 Exploit Author: Riccardo Gasparini Vendor Homepage: https://www.fastweb.it/ Software Link: http://59.0.121.191:8080/ACS-server/file/0.00.81FW200Askey only from Fastweb ISP network Version: 0.00.81 Tested on: Linux CV...

Weak password vulnerability in H3C ACG1000-M switches

Xinhua San Technologies Co., Ltd. has a full range of overall digital infrastructure capabilities in computing, storage, networking and security, and provides one-stop digital solutions, including cloud computing, big data, intelligent connectivity, information security, new security, Internet of...

Weak Password Vulnerability in Huasan ER5100 Router

Ltd. Huasan, mainly provides research, development, production, sales and services of IT infrastructure products and solutions. A weak password vulnerability exists in the Huasan ER5100 router, which can be exploited by an attacker to log into the router's backend...

Weak Password Vulnerability in Huasan ER3260 Router

Ltd. Huasan, mainly provides research, development, production, sales and services of IT infrastructure products and solutions. A weak password vulnerability exists in the Huasan ER3260 router, which can be exploited by an attacker to log into the router's backend...

Cracking the Passwords of Early Internet Pioneers

Lots of them weren't very good: BSD co-inventor Dennis Ritchie, for instance, used "dmac" his middle name was MacAlistair; Stephen R. Bourne, creator of the Bourne shell command line interpreter, chose "bourne"; Eric Schmidt, an early developer of Unix software and now the executive chairman of...

Cobham plc EXPLORER 710 has an unspecified vulnerability (CNVD-2019-35799)

The Cobham plc EXPLORER 710 is a portable satellite terminal from Cobham plc, UK. It provides features such as satellite communications and Internet access. A security vulnerability exists in the Cobham plc EXPLORER 710 that originates from the use of the same root password for devices using...

Weak Password Vulnerability in Streaming Media Management Server

Streaming media server is the core system of streaming media application, and it is the key platform for operators to provide video services to users. The main function of streaming media server is to collect, cache, schedule and transmit and play streaming media content. A weak password...

CVE-2019-11664

Clear text password in browser in Micro Focus Service Manager product versions 9.30, 9.31, 9.32, 9.33, 9.34, 9.35, 9.40, 9.41, 9.50, 9.51, 9.52, 9.60, 9.61, 9.62. The vulnerability could be exploited to allow sensitive data exposure...

Weak password vulnerability in NetGuard Operations and Maintenance Security Gateway V3.0 at Beijing NetGuard Cloud Information Technology Co.

Netnifty O&M Security Gateway is a compliance management system for controlling and auditing user O&M operations in business environments. A weak password vulnerability exists in the Netnifty Operations and Maintenance Security Gateway of Beijing Netnifty Nebula Information Technology Company...

CVE-2019-4321

CVE-2019-4321 affects IBM Intelligent Operations Center (IOC) and IBM Water Operations for Waternamics, with affected versions IOC V5.1.0–V5.2.0, IOC for Emergency Management V5.1.0–V5.1.0.6, and Waternamics V5.1.0–V5.2.1.1. The root cause is a default configuration that does not require strong p...

Security Bulletin: Password vulnerability in IBM® Intelligent Operations Center (CVE-2019-4321)

Summary IBM® Intelligent Operations Center does not require that users should have strong passwords by default, which makes it easier for attackers to compromise user accounts. Vulnerability Details CVEID: CVE-2019-4321 DESCRIPTION: IBM Intelligent Operations Center IOC does not require that user...

Weak Password Vulnerability in the System-Log Audit System of Taihe Information Security Operation Center of Beijing Qixingchen Information Security Technology Co.

TAICHI Information Security Operation Center System - Log Audit System TSOC-SA, TSOC-SA is capable of real-time collection of logs, events, alarms and other information generated by security devices, network devices, hosts, operating systems, and various application systems from different vendors...

Weak password vulnerability in Tianyue Operation and Maintenance Security Gateway (Cloud Bastion) of Beijing Qixingchen Information Security Technology Co.

Tianyue O&M Security Gateway Cloud Bastion is a compliance management system that controls and audits user O&M operations in business environments. A weak password vulnerability exists in the Tianyue Operation and Maintenance Security Gateway Cloud Bastion of Beijing Qishen Information Security...

CVE-2016-10862

Neet AirStream NAS1.1 devices have a password of ifconfig for the root account. This cannot be changed via the configuration page...

Design/Logic Flaw

Neet AirStream NAS1.1 devices have a password of ifconfig for the root account. This cannot be changed via the configuration page...

CVE-2016-10862

Affected product: Neet AirStream NAS1.1. Issue: The root account uses the hard-coded password "ifconfig" that cannot be changed via the device’s configuration page, indicating a default credential trust-management problem. Impact (as described): CVSS metrics indicate high impact to confidentialit...

Default credentials

cPanel before 62.0.4 has a fixed password for the Munin MySQL test account SEC-196...

EspoCRM Trust Management Issue Vulnerabilities

EspoCRM is an open source web-based customer relationship management CRM system. The system provides features such as sales automation, community and customer support. EspoCRM is vulnerable to a trust management issue. An attacker can exploit this vulnerability to brute-force break a user's...

PHPEMS suffers from a weak password vulnerability

PHPEMS PHP Exam Management System online mock exam system based on PHP + Mysql development, is an open source and free PHP paperless mock exam system. PHPEMS has a weak password vulnerability that can be exploited by attackers to obtain sensitive information...