Lucene search
+L

2489 matches found

The Hacker News
The Hacker News
added 2016/11/30 8:34 p.m.18 views

Password Manager Pro — Easiest Way to Keep Enterprises Secure

Recent corporate breaches have taught us something important — the average enterprise user is spectacularly bad at choosing good passwords. As modern enterprise is becoming a hybrid organization with infrastructure spread across on-premises data centers as well as in the cloud, security of...

7.9AI score
SaveExploits0
Prion
Prion
added 2016/11/30 6:59 p.m.24 views

Command injection

IBM QRadar SIEM 7.1 before MR2 Patch 13 and 7.2 before 7.2.7 executes unspecified processes at an incorrect privilege level, which makes it easier for remote authenticated users to obtain root access by leveraging a command-injection issue...

8.5CVSS6.6AI score0.01565EPSS
SaveExploits0References2Affected Software1
NVD
NVD
added 2016/11/25 3:59 a.m.13 views

CVE-2016-5788

General Electric GE Bently Nevada 3500/22M USB with firmware before 5.0 and Bently Nevada 3500/22M Serial have open ports, which makes it easier for remote attackers to obtain privileged access via unspecified vectors...

10CVSS9.3AI score0.02324EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2016/11/25 3:38 a.m.28 views

CVE-2016-5788

General Electric GE Bently Nevada 3500/22M USB with firmware before 5.0 and Bently Nevada 3500/22M Serial have open ports, which makes it easier for remote attackers to obtain privileged access via unspecified vectors...

9.3AI score0.02324EPSS
SaveExploits0References2
NVD
NVD
added 2016/11/18 9:59 p.m.25 views

CVE-2016-8561

A vulnerability has been identified in SIMATIC CP 1543-1 All versions V2.0.28, SIPLUS NET CP 1543-1 All versions V2.0.28. Users with elevated privileges to TIA-Portal and project data on the engineering station could possibly get privileged access on affected devices...

6.6CVSS6.3AI score0.01585EPSS
SaveExploits0References4
Prion
Prion
added 2016/11/18 9:59 p.m.25 views

Design/Logic Flaw

A vulnerability has been identified in SIMATIC CP 1543-1 All versions V2.0.28, SIPLUS NET CP 1543-1 All versions V2.0.28. Users with elevated privileges to TIA-Portal and project data on the engineering station could possibly get privileged access on affected devices...

6CVSS6.8AI score0.01585EPSS
SaveExploits0References4
Cvelist
Cvelist
added 2016/11/18 9:00 p.m.39 views

CVE-2016-8561

A vulnerability has been identified in SIMATIC CP 1543-1 All versions V2.0.28, SIPLUS NET CP 1543-1 All versions V2.0.28. Users with elevated privileges to TIA-Portal and project data on the engineering station could possibly get privileged access on affected devices...

6.3AI score0.01585EPSS
SaveExploits0References4
CVE
CVE
added 2016/11/18 9:00 p.m.63 views

CVE-2016-8561

Summary (CVE-2016-8561) : The Siemens SIMATIC CP 1543-1 and SIPLUS NET CP 1543-1 are affected (versions prior to 2.0.28). The root cause is improper privilege management (CWE-269), enabling users with elevated TIA-Portal and project-data access to gain privileged access on the device. The ICS adv...

6.6CVSS6.3AI score0.01585EPSS
SaveExploits0References4Affected Software1
IBM AIX
IBM AIX
added 2016/11/07 10:35 a.m.569 views

Vulnerability in lquerylv in LVM impacts AIX,Vulnerability in lquerylv in LVM impacts VIOS

IBM SECURITY ADVISORY First Issued: Mon Nov 7 10:35:13 CST 2016 The most recent version of this document is available here: http://aix.software.ibm.com/aix/efixes/security/lquerylvadvisory.asc https://aix.software.ibm.com/aix/efixes/security/lquerylvadvisory.asc...

7.8CVSS7.3AI score0.02485EPSS
SaveExploits2
CERT
CERT
added 2016/10/20 12:00 a.m.42 views

Synology NAS servers contain insecure default credentials

Overview Synology NAS servers DS107, DS116, and DS213, use default credentials. Description CWE-255: Credentials Management - CVE-2016-6554Synology NAS servers DS107, firmware version 3.1-1639 and prior, and DS116, DS213, firmware versions prior to 5.2-5644-1, use non-random default credentials o...

10CVSS9.7AI score0.0413EPSS
SaveExploits0References3
CERT
CERT
added 2016/10/20 12:00 a.m.38 views

Nuuo NT-4040 firmware contains insecure default credentials

Overview Nuuo NT-4040 Titan, firmware NT-404001.07.0000.00151120, uses default credentials Description CWE-255: Credentials Management - CVE-2016-6553Nuuo NT-4040 Titan, firmware NT-404001.07.0000.00151120, uses non-random default credentials of: admin:admin and localdisplay:111111 . A remote...

10CVSS9.7AI score0.02878EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2016/10/06 10:00 a.m.34 views

CVE-2015-0721

Cisco NX-OS 4.0 through 7.3 on Multilayer Director and Nexus 1000V, 2000, 3000, 3500, 4000, 5000, 5500, 5600, 6000, 7000, 7700, and 9000 devices allows remote authenticated users to bypass intended AAA restrictions and obtain privileged CLI access via crafted parameters in an SSH connection...

7.5AI score0.02754EPSS
SaveExploits0References3
CNVD
CNVD
added 2016/09/18 12:00 a.m.2 views

BINOM3 Electric Power Quality Meter Stores Sensitive Information Vulnerability

The BINOM3 Electric Power Quality Meter is a universal multifunctional power quality monitor. A vulnerability exists in the storage of sensitive information in the BINOM3 Electric Power Quality Meter. An attacker could exploit the vulnerability to gain privileged access to the device...

6.7AI score
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2016/09/15 12:00 a.m.166 views

Moxa MiiNePort Blank Default Telnet Password

The remote device has a telnet service protected by blank default credentials that allow privileged access to the device. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid93527; scriptversion"1.10";...

7.5CVSS7.6AI score0.01427EPSS
SaveExploits0References2
exploitpack
exploitpack
added 2016/08/15 12:00 a.m.24 views

Zabbix 2.2.x3.0.x - SQL Injection

Zabbix 2.2.x3.0.x - SQL Injection ========================================== Title: Zabbix 3.0.3 SQL Injection Vulnerability Product: Zabbix Vulnerable Versions: 2.2.x, 3.0.x Fixed Version: 3.0.4 Homepage: http://www.zabbix.com Patch link: https://support.zabbix.com/browse/ZBX-11023 Credit:...

SaveExploits0
Packet Storm
Packet Storm
added 2016/06/23 12:00 a.m.58 views

EdgeCore ES3526XA Manager CSRF / Access Bypass / Weak Credentials

EdgeCore - Layer2+ Fast Ethernet Standalone Switch ES3526XA Manager - Multiple Vulnerabilities Also rebranded as: SMC TigerSwitch 10/100 SMC6128L2 Manager Object ID: 1.3.6.1.4.1.259.8.1.5 Switch Information Main Board: Number of Ports 26 Hardware Version R01 Management Software: Loader Version...

0.8AI score
SaveExploits0
CNVD
CNVD
added 2016/05/10 12:00 a.m.3 views

QEMU VGA Module Denial of Service Vulnerability (CNVD-2016-03097)

QEMU is a simulation processor software developed by French programmer Fabrice Bellard. The software is fast and cross-platform. A denial of service vulnerability exists in the VGA module of QEMU. An attacker could exploit this vulnerability to cause a denial of service QEMU process crash, intege...

5.5CVSS8.2AI score0.00513EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2016/04/29 12:00 a.m.7 views

PT-2016-4163 · Ibm +2 · Ibm Sdk +3

Name of the Vulnerable Software and Affected Versions: IBM SDK, Java Technology Edition versions 6.0.0 through 6.0.16.24 IBM SDK, Java Technology Edition 6 R1 versions 6.1.0 through 6.1.8.24 IBM SDK, Java Technology Edition 7 versions 7.0.0 through 7.0.9.39 IBM SDK, Java Technology Edition 7 R1...

10CVSS8.2AI score0.92334EPSS
SaveExploits1References73
Hacker One
Hacker One
added 2016/04/04 6:29 a.m.106 views

Snapchat: Administrator access to a Django Administration Panel on *.sc-corp.net via bruteforced credentials

Hey team, While doing some recon for Snapchat's domains, I came across a particular domain of interest - sc-corp.net. It seems that this domain hosts a lot of Snapchat's internal tools, web applications and staging environments such as Phabricator and other administration panels. From analyzing S...

0.3AI score
SaveExploits0
NVD
NVD
added 2016/03/18 2:59 p.m.21 views

CVE-2014-9768

IBM Tivoli NetView Access Services NVAS allows remote authenticated users to gain privileges by entering the ADM command and modifying a "page ID" field to the EMSPG2 transaction code. NOTE: the vendor's perspective is that configuration and use of available security controls in the NVAS product...

9CVSS8.6AI score0.01852EPSS
SaveExploits0References2
Rows per page
Query Builder