Default credentials

An exploitable Cleartext Transmission of Password vulnerability exists in the Web Application functionality of Moxa AWK-3131A Wireless Access Point running firmware 1.1. The Change Password functionality of the Web Application transmits the password in cleartext. An attacker capable of intercepti...

CVE-2016-8716

CVE-2016-8716 affects Moxa AWK-3131A Wireless Access Point (firmware 1.1). The Web Application Change Password function transmits the password in cleartext, enabling an attacker who can intercept traffic to obtain valid credentials. Documents from multiple sources (Talos, Tenable plugin, Seebug, ...

CVE-2016-8716

An exploitable Cleartext Transmission of Password vulnerability exists in the Web Application functionality of Moxa AWK-3131A Wireless Access Point running firmware 1.1. The Change Password functionality of the Web Application transmits the password in cleartext. An attacker capable of intercepti...

CVE-2015-2887

iBaby M3S has a password of admin for the backdoor admin account...

CVE-2015-2885

Lens Peek-a-View is affected by an elevation of privilege / backdoor access vulnerability due to hard-coded backdoor credentials: admin (password 2601hx), user (password user), and guest (password guest). This condition potentially allows unauthorized access to the device, depending on how backdo...

CVE-2016-5070

Sierra Wireless GX 440 devices with ALEOS firmware 4.3.2 store passwords in cleartext...

CVE-2015-2887

iBaby M3S has a password of admin for the backdoor admin account...

Moxa AWK-3131A Web Application Cleartext Transmission of Password Vulnerability

Summary An exploitable Cleartext Transmission of Password vulnerability exists in the Web Application functionality of Moxa AWK-3131A Wireless Access Point running firmware 1.1. The Change Password functionality of the Web Application transmits the password in cleartext. An attacker capable of...

CVE-2015-8989

McAfee Vulnerability Manager (MVM) – Enterprise Manager web portal is affected by CVE-2015-8989. The vulnerability stems from unsalted passwords stored for user accounts, enabling attackers to brute-force passwords against the MVM database. Affected: McAfee Vulnerability Manager prior to version ...

CVE-2017-6343

The web interface on Dahua DHI-HCVR7216A-S3 devices with NVR Firmware 3.210.0001.10 2016-06-06, Camera Firmware 2.400.0000.28.R 2016-03-29, and SmartPSS Software 1.16.1 2017-01-19 allows remote attackers to obtain login access by leveraging knowledge of the MD5 Admin Hash without knowledge of the...

Weak Password Vulnerability in Some Users of Zhiyuan Synergy A8 System

Zhiyuan A8 system is an OA office management software. A weak password vulnerability exists in some users of Zhiyuan Synergy A8 system. An attacker is allowed to utilize the weak password 123456 to log in to the system background and obtain administrator privileges...

SUSE-SU-2017:0475-1 Security update for susestudio

This update provides SUSE Studio Runner 1.3.14, which brings fixes for the following issues: - bsc968797: 11 SP3 appliance gets invalid distribution upgrade from SLMS. - bsc947225: Second build of appliance will not register to SLMS, wrong product name. - bsc983404: UEFI boot missing for SLE11 SP...

Honeywell XL Web II Controller plaintext stored password vulnerability (CNVD-2017-00914)

Honeywell XL Web Controller is a web-based SCADA system. A plaintext stored password vulnerability exists in Honeywell XL Web II Controller, which can be exploited by an attacker to obtain a user's password...

CVE-2016-6602

CVE-2016-6601 and CVE-2016-6602 affect ZOHO WebNMS Framework 5.2 and 5.2 SP1. CVE-2016-6601 is a local file inclusion in the file download path (servlets/FetchFile) allowing reading arbitrary files via a .. in fileName. CVE-2016-6602 describes weak obfuscation storing passwords in WEB-INF/conf/se...

phpMyAdmin Insecure Password Vulnerability

phpMyAdmin is a free, web-based MySQL database management tool developed by the phpMyAdmin team. The tool is capable of creating and deleting databases, creating, deleting, and modifying database tables, executing SQL script commands, and more. phpMyAdmin has a security vulnerability. Allowing an...

Weak Password Vulnerability in Free Planning Enterprise Website Management System

Free Planner Enterprise Website Management System is an ASP-based website builder. Freedom of planning enterprise website management system default weak password vulnerability, attackers exploit the vulnerability through the default weak password admin/admin login website background, get backgrou...

CVE-2016-9013

Django 1.8.x before 1.8.16, 1.9.x before 1.9.11, and 1.10.x before 1.10.3 use a hardcoded password for a temporary database user created when running tests with an Oracle database, which makes it easier for remote attackers to obtain access to the database server by leveraging failure to manually...

CVE-2016-8502

Yandex Protect Anti-phishing warning in Yandex Browser for desktop from version 15.12.0 to 16.2 could be used by remote attacker for brute-forcing passwords from important web-resource with special JavaScript...

Trello: Subdomain Take over & username enemuration

Bug 1 ====== The ip of domain is not pointing to wpengine.com,Attacker can signup there and takeover subdomain by using this ip check the error message by visiting domain ip it say's that: This domain is successfully pointed at WP Engine, but is not configured for an account on our platform. If y...

Weak Password Vulnerability in Mapper VPN3005C-104 Appliance

The Maipu VPN3005C-104 device is a security gateway developed by Maipu. A weak password vulnerability exists in the Maipu VPN3005C-104 device. It allows an attacker to log in to the system backend and gain administrator privileges by using the account password admin\admin...