907 matches found
CentOS Web Panel Cross-Site Request Forgery Vulnerability (CNVD-2019-40074)
CentOS Web Panel CWP is a free web-hosting control panel that makes it easy to manage multiple servers without having to access the server via SSH for every little task that needs to be done. A cross-site request forgery vulnerability exists in the "Forgot Password" feature in CentOS Web Panel...
CVE-2019-13477
In CentOS-WebPanel.com aka CWP CentOS Web Panel 0.9.8.837, CSRF in the forgot password function allows an attacker to change the password for the root account...
CVE-2019-14986
eQ-3 Homematic CCU2 and CCU3 with the CUxD AddOn before 2.3.0 installed allow administrative operations by unauthenticated attackers with access to the web interface, because features such as File-Browser and Shell Command as well as "Set root password" are exposed...
CVE-2019-14986
eQ-3 Homematic CCU2 and CCU3 with the CUxD AddOn before 2.3.0 installed allow administrative operations by unauthenticated attackers with access to the web interface, because features such as File-Browser and Shell Command as well as "Set root password" are exposed...
Design/Logic Flaw
eQ-3 Homematic CCU2 and CCU3 with the CUxD AddOn before 2.3.0 installed allow administrative operations by unauthenticated attackers with access to the web interface, because features such as File-Browser and Shell Command as well as "Set root password" are exposed...
CVE-2019-14986
eQ-3 Homematic CCU2 and CCU3 with the CUxD AddOn before 2.3.0 installed allow administrative operations by unauthenticated attackers with access to the web interface, because features such as File-Browser and Shell Command as well as "Set root password" are exposed...
CVE-2016-10862
Neet AirStream NAS1.1 devices have a password of ifconfig for the root account. This cannot be changed via the configuration page...
CVE-2018-20955
Swann SWWHD-INTCAM-HD devices have the twipc root password, leading to FTP access as root. NOTE: all affected customers were migrated by 2020-08-31...
Default credentials
Swann SWWHD-INTCAM-HD devices have the twipc root password, leading to FTP access as root. NOTE: all affected customers were migrated by 2020-08-31...
CVE-2016-10862
Neet AirStream NAS1.1 devices have a password of ifconfig for the root account. This cannot be changed via the configuration page...
CVE-2018-20955
Swann SWWHD-INTCAM-HD devices have the twipc root password, leading to FTP access as root. NOTE: all affected customers were migrated by 2020-08-31...
CVE-2018-20955
The CVE-2018-20955 entry affects Swann SWWHD-INTCAM-HD devices, where a hardcoded/twipc root password allows FTP access as root. This enables high-severity, network-based impact to confidentiality, integrity, and availability. Public references confirm root FTP access due to default credentials. ...
CVE-2019-14389
cPanel before 82.0.2 allows local users to discover the MySQL root password SEC-510...
CVE-2019-14389
cPanel before 82.0.2 allows local users to discover the MySQL root password SEC-510...
Default credentials
cPanel before 82.0.2 allows local users to discover the MySQL root password SEC-510...
CVE-2019-14389
CVE-2019-14389 affects cPanel prior to 82.0.2 . The vulnerability allows local users to obtain the MySQL root password, i.e., an information disclosure (SEC-510). Reported details from multiple sources indicate the root cause is in cPanel versions before 82.0.2, with the impact described as discl...
Schneider Electric Pelco Endura NET55XX Encoder - Authentication Bypass Exploit
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule "Schneider Electric Pelco Endura NET55XX Encoder", 'Description' = %q This module exploits inadequate access controls within the webUI to enable t...
Schneider Electric Pelco Endura NET55XX Encoder
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule "Schneider Electric Pelco Endura NET55XX Encoder", 'Description' = %q This module exploits inadequate access controls within the webUI to enable...
Schneider Electric Pelco Endura NET55XX Encoder
This module exploits inadequate access controls within the webUI to enable the SSH service and change the root password. This module has been tested successfully on: NET5501, NET5501-I, NET5501-XT, NET5504, NET5500, NET5516, NET550 versions. This module requires Metasploit:...