415 matches found
CVE-2023-42336
An issue in NETIS SYSTEMS WF2409Ev4 v.1.0.1.705 allows a remote attacker to execute arbitrary code and obtain sensitive information via the password parameter in the /etc/shadow.sample component...
NETIS SYSTEMS WF2409E Trust Management Issues Vulnerability
NETIS SYSTEMS WF2409E is a wireless router from NETIS SYSTEMS. A security vulnerability exists in the NETIS SYSTEMS WF2409Ev4 v.1.0.1.705 version that originates from obtaining sensitive information via the password parameter in the /etc/shadow.sample component...
The vulnerability of Fortinet’s FortiNAC and FortiNAC-F access control devices stems from insufficient protection of registration data, allowing attackers to gain unauthorized access to protected information.
The vulnerability of the access control devices in Fortinet’s FortiNAC and FortiNAC-F systems stems from insufficient protection of registration data during the processing of the /etc/shadow file. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected...
Exploit for Out-of-bounds Write in Linux Linux_Kernel
CVE-2022-1015 id uid=1000d gid=1000d groups=1000d...
SUSE CVE-2007-0003
pamunix.so in Linux-PAM 0.99.7.0 allows context-dependent attackers to log into accounts whose password hash, as stored in /etc/passwd or /etc/shadow, has only two characters...
SUSE CVE-2011-4966
modules/rlmunix/rlmunix.c in FreeRADIUS before 2.2.0, when unix mode is enabled for user authentication, does not properly check the password expiration in /etc/shadow, which allows remote authenticated users to authenticate using an expired password...
SUSE CVE-2013-3713
The image creation configuration in aaabase before 16.26.1 for openSUSE 13.1 KDE adds the root user to the "users" group when installing from a live image, which allows local users to obtain sensitive information and possibly have other unspecified impacts, as demonstrated by reading /etc/shadow...
SUSE CVE-2016-1601
yast2-users before 3.1.47, as used in SUSE Linux Enterprise 12 SP1, does not properly set empty password fields in /etc/shadow during an AutoYaST installation when the profile does not contain inst-sys users, which might allow attackers to have unspecified impact via unknown vectors...
SUSE CVE-2019-19234
In Sudo through 1.8.29, the fact that a user has been blocked e.g., by using the ! character in the shadow file instead of a password hash is not considered, allowing an attacker who has access to a Runas ALL sudoer account to impersonate any blocked user. NOTE: The software maintainer believes...
CVE-2021-37316
SQL injection vulnerability in Cloud Disk in ASUS RT-AC68U router firmware version before 3.0.0.4.386.41634 allows remote attackers to view sensitive information via /etc/shadow...
CVE-2023-24149
TOTOLINK CA300-PoE V6.2c.884 was discovered to contain a hard code password for root which is stored in the component /etc/shadow...
ASUS RT-AC68U SQL注入漏洞
ASUS RT-AC68U is a router from Asus China. A security vulnerability exists in ASUS RT-AC68U router firmware versions prior to 3.0.0.4.386.41634, which originates from a SQL injection vulnerability in the cloud disk. An attacker could exploit the vulnerability to view sensitive information via...
TOTOLINK CA300-PoE 信任管理问题漏洞
The TOTOLINK CA300-PoE is a wireless access point from China Gion Electronics TOTOLINK. A security vulnerability exists in TOTOLINK CA300-PoE version V6.2c.884, which originates from /etc/shadow storing the password of the root account...
Vulnerability of the fileio.c component, /etc/shadow, /etc/.shadow.swp, and the text editor Vim, allowing an attacker to access confidential data
The vulnerability of the fileio.c component, /etc/shadow, and /etc/.shadow.swp from the Vim text editor is related to the disclosure of information in the erroneous data area. Exploiting this vulnerability allows an attacker to gain access to confidential data...
CVE-2022-36159
Contec FXA3200 version 1.13 and under were discovered to contain a hard coded hash password for root stored in the component /etc/shadow. As the password strength is weak, it can be cracked in few minutes. Through this credential, a malicious actor can access the Wireless LAN Manager interface an...
MimiPenguin
This searches process memory for needles that indicate where cleartext passwords may be located. If any needles are discovered in the target process memory, collected strings in adjacent memory will be hashed and compared with password hashes found in /etc/shadow. Module Options msf use...
PT-2022-23237 · Contec · Contec Fxa3200
Name of the Vulnerable Software and Affected Versions: Contec FXA3200 versions 1.13 and under Description: The issue concerns a hard-coded hash password for the root user stored in the /etc/shadow component. This password is weak and can be cracked in a few minutes. Once the password is obtained,...
TOTOLINK A860R /etc/shadow.sample hardcoded vulnerability
TOTOLINK A860R is a dual-band wireless router with a maximum transmission rate of 1200Mbps, 6-antenna dual-band concurrent technology, and support for remote management by mobile APP, which is suitable for small and medium-sized enterprises and home network environments. The TOTOLINK A860R suffer...
TOTOLINK A860R 信任管理问题漏洞
TOTOLINK A860R is a dual-band wireless router with a maximum transmission rate of 1200Mbps, 6-antenna dual-band concurrent technology, and support for remote management by mobile APP, which is suitable for small and medium-sized enterprises and home network environments. The TOTOLINK A860R suffer...