552 matches found
Default Password (changemenow) for 'root' Account
The account 'root' on the remote host has the password 'changemenow'. An attacker can leverage this issue to gain administrative access to the affected system. Note that Splunk virtual appliances are known to use these credentials to provide administrative access to the host. %NASLMINLEVEL 70300 ...
CVE-2015-0924
Ceragon FibeAir IP-10 bridges expose a default root password that can be exploited by remote attackers to gain administrative access via HTTP, SSH, TELNET, or CLI sessions. The issue stems from an embedded default password in affected devices, with multiple sources noting the risk and the need to...
Default credentials
The customization template in Red Hat CloudForms 3.1 Management Engine CFME 5.3 uses a default password for the root account when a password is not specified for a new image, which allows remote attackers to gain privileges...
Default Password (TANDBERG) for 'root' Account
The account 'root' on the remote host has the password 'TANDBERG'. An attacker may leverage this issue to gain administrative access to the affected system. Note that Cisco TelePresence Conductor virtual appliances are known to use these credentials to provide complete, administrative access to t...
DEBIAN-CVE-2014-6300
Cross-site scripting XSS vulnerability in the micro history implementation in phpMyAdmin 4.0.x before 4.0.10.3, 4.1.x before 4.1.14.4, and 4.2.x before 4.2.8.1 allows remote attackers to inject arbitrary web script or HTML, and consequently conduct a cross-site request forgery CSRF attack to crea...
UBUNTU-CVE-2014-6300
Cross-site scripting XSS vulnerability in the micro history implementation in phpMyAdmin 4.0.x before 4.0.10.3, 4.1.x before 4.1.14.4, and 4.2.x before 4.2.8.1 allows remote attackers to inject arbitrary web script or HTML, and consequently conduct a cross-site request forgery CSRF attack to crea...
CVE-2014-6300
Cross-site scripting XSS vulnerability in the micro history implementation in phpMyAdmin 4.0.x before 4.0.10.3, 4.1.x before 4.1.14.4, and 4.2.x before 4.2.8.1 allows remote attackers to inject arbitrary web script or HTML, and consequently conduct a cross-site request forgery CSRF attack to crea...
Cross site request forgery (csrf)
Cross-site scripting XSS vulnerability in the micro history implementation in phpMyAdmin 4.0.x before 4.0.10.3, 4.1.x before 4.1.14.4, and 4.2.x before 4.2.8.1 allows remote attackers to inject arbitrary web script or HTML, and consequently conduct a cross-site request forgery CSRF attack to crea...
CVE-2014-6300
Cross-site scripting XSS vulnerability in the micro history implementation in phpMyAdmin 4.0.x before 4.0.10.3, 4.1.x before 4.1.14.4, and 4.2.x before 4.2.8.1 allows remote attackers to inject arbitrary web script or HTML, and consequently conduct a cross-site request forgery CSRF attack to crea...
openSUSE Security Update : phpMyAdmin (openSUSE-SU-2014:1150-1)
phpMyAdmin was updated to 4.1.14.4 2014-09-13 fixing bugs and security issues. - PMASA-2014-10 CVE-2014-6300, CWE-661 CWE-352 http://www.phpmyadmin.net/homepage/security/PMASA-2014- 10.php A DOM based XSS was fixed that resulted to a CSRF that creates a ROOT account in certain conditions...
phpMyAdmin -- XSRF/CSRF due to DOM based XSS in the micro history feature
The phpMyAdmin development team reports: XSRF/CSRF due to DOM based XSS in the micro history feature. By deceiving a logged-in user to click on a crafted URL, it is possible to perform remote code execution and in some cases, create a root account due to a DOM based XSS vulnerability in the micro...
XSRF/CSRF due to DOM based XSS in the micro history feature
PMASA-2014-10 Announcement-ID: PMASA-2014-10 Date: 2014-09-13 Summary XSRF/CSRF due to DOM based XSS in the micro history feature Description By deceiving a logged-in user to click on a crafted URL, it is possible to perform remote code execution and in some cases, create a root account due to a...
Default Password (vmware) for 'root' Account
The account 'root' on the remote host has the password 'vmware'. An attacker may leverage this to gain administrator access to the affected system. Note that VMware vCenter Support Assistant Appliance and VMware vCenter Server Appliance are known to use these credentials. %NASLMINLEVEL 70300 C...
Default Password (default) for 'root' Account
The account 'root' on the remote host has the password 'default'. An attacker may leverage this issue to gain administrative access to the affected system. Note that F5 Networks is known to use these credentials to provide complete administrative access to its appliances. %NASLMINLEVEL 70300 C...
SGI IRIX 5.3 pkgadjust Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/419/info A vulnerability exists in the pkgadjust utility shipped with Irix 5.3 from Silicon Graphics. This vulnerability can result in the compromise of the root account. % cat getroot.c int main setuid0; chownsh,0,0;...
Tandberg E, EX and C Series Endpoints Default Credentials for Root Account
No description provided by source. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Cisco Security Advisory: Default Credentials for Root Account on Tandberg E, EX and C Series Endpoints Advisory ID: cisco-sa-20110202-tandberg Revision 1.0 For Public Release 2011 February 2 1600 UTC GMT...
linux/x86 append "/etc/passwd" & exit() 107 bytes
No description provided by source. / appendpasswd.c Payload: Adds the string: toor::0:0:t00r:/root:/bin/bash to /etc/passwd thereby adding a password-less root account with login name toor Platform: linux/x86 Size: 107 bytes Author: $andman / / 08049054 start: 8049054: eb 38 jmp 804908e callfunc...
Oracle8i Standard Edition 8.1.5 for Linux Installer Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/1035/info A vulnerability exists in the installation program for Oracle 8.1.5i. The Oracle installation scripts will create a directory named /tmp/orainstall, owned by oracle:dba, mode 711. Inside of this directory it wil...
QSSL QNX 4.25 A crypt() Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/1114/info A design error in the operation of the crypt3 function exists in QNX, from QNX System Software, Limited QSSL. The flaw allows the recovery of passwords from the hashes. On most Unix variants, crypt3 is based on ...
SSH 1.2.30 Daemon Logging Failure Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/2345/info SSH1 is the implementation of the Secure Shell communication protocol by SSH Communications. SSH1 is version 1 of the protocol specified by IETF draft to protect the integrity of traffic over the network. A...