6583 matches found
FingerTec Devices Default Credentials (Telnet)
FingerTec device is using known default credentials. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Cisco Nexus 3000 Series and 3500 Platform Switches Insecure Default Credentials Vulnerability (cisco-sa-20160302-n3k)
A vulnerability in Cisco NX-OS Software running on Cisco Nexus 3000 Series Switches and Cisco Nexus 3500 Platform Switches could allow an unauthenticated, remote attacker to log in to the device with the privileges of the root user with bash shell access. Copyright C 2016 Greenbone Networks GmbH...
Climber - Check UNIX/Linux Systems For Privilege Escalation
Automated auditing tool to check UNIX/Linux systems misconfigurations which may allow local privilege escalation. Dependencies python = 2.7 python-crypto python-mako python-paramiko Note Climber needs Exscript, a Python module and a template processor for automating network connections over...
TurboGate邮件网关漏洞合集
简要描述： 拓波软件旗下另一款产品，用户量还是挺大的。 详细说明： TurboGate其实相当于TurboMail的早期版本，TurboGate集成了大量的在TurboMail中出现的漏洞。 这里只列出无需登录即可利用的漏洞，厂商可以根据TurboMail漏洞进行自查。 1. http://.../bugs/wooyun-2016-0167905 在TurboGate中使用的是axis2%remote; $alpharand g00dPa$$w0rD $alpharand 1 1 https://images.seebug.org/upload/201603/052322256...
Fedora 22 : prosody-0.9.9-2.fc22 (2016-e289f41b76)
Prosody 0.9.9 ============= A summary of changes: Security fixes -------------- Fix path traversal vulnerability in modhttpfiles CVE-2016-1231 Fix use of weak PRNG in generation of dialback secrets CVE-2016-1232 Bugs ---- Improve handling of CNAME records in DNS Fix traceback when deleting a user...
Hardcoded credentials
Cisco NX-OS 6.02U61 through 6.02U65 on Nexus 3000 devices and 6.02A61 through 6.02A65 and 6.02A71 on Nexus 3500 devices has hardcoded credentials, which allows remote attackers to obtain root privileges via a 1 TELNET or 2 SSH session, aka Bug ID CSCuy25800...
CVE-2016-1329
Cisco NX-OS 6.02U61 through 6.02U65 on Nexus 3000 devices and 6.02A61 through 6.02A65 and 6.02A71 on Nexus 3500 devices has hardcoded credentials, which allows remote attackers to obtain root privileges via a 1 TELNET or 2 SSH session, aka Bug ID CSCuy25800...
CVE-2016-1329
CVE-2016-1329 affects Cisco NX-OS on Nexus 3000 (6.0(2)U6(1)–6.0(2)U6(5)) and Nexus 3500 (6.0(2)A6(1)–6.0(2)A6(5), 6.0(2)A7(1)). The root cause is hardcoded/default credentials present in an account created at installation, allowing unauthenticated remote attackers to obtain root privileges via T...
CVE-2016-1329
Cisco NX-OS 6.02U61 through 6.02U65 on Nexus 3000 devices and 6.02A61 through 6.02A65 and 6.02A71 on Nexus 3500 devices has hardcoded credentials, which allows remote attackers to obtain root privileges via a 1 TELNET or 2 SSH session, aka Bug ID CSCuy25800...
VMware ESX / ESXi Multiple Vulnerabilities (VMSA-2012-0006) (remote check)
The remote VMware ESX / ESXi host is missing a security-related patch. It is, therefore, affected by multiple vulnerabilities, including remote code execution vulnerabilities, in the following components : - Kernel - krb5 telnet daemon %NASLMINLEVEL 70300 C Tenable Network Security, Inc...
Cisco Nexus 3000 and 3500 Insecure Default Telnet Credentials (cisco-sa-20160302-n3k)
The remote Cisco Nexus device has a known set of hardcoded default user credentials. An unauthenticated, remote attacker can exploit this to authenticate remotely to the device via Telnet with the privileges of the root user with bash shell access. TRUSTED...
GE SNMP/Web Interface Adapter Version Detection
Detection of installed version of SNMP/Web Adapter. The script performs Telnet based detection of SNMP/Web Adapter SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...
XenMobile Does Not Recognize Licenses Installed on a Remote License Server
XenMobile does not recognize licenses installed on a remote license server. The ZDM.log file shows that cached license has expired and XenMobile temporary license expires after 30 days. Telnet from XenMobile server to licensing server over 7279 fails and netstat on licensing server shows that the...
[SECURITY] Fedora 22 Update: mingw-curl-7.47.0-1.fc22
cURL is a tool for getting files from HTTP, FTP, FILE, LDAP, LDAPS, DICT, TELNET and TFTP servers, using any of the supported protocols. cURL is designed to work without user interaction or any kind of interactivity. cURL offers many useful capabilities, like proxy support, user authentication, F...
Arris DG1670A Cable Modem Remote Command Execution
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 KL-001-2016-001 : Arris DG1670A Cable Modem Remote Command Execution Title: Arris DG1670A Cable Modem Remote Command Execution Advisory ID: KL-001-2016-001 Publication Date: 2016.02.12 Publication URL:...
ziggystartux
ziggystartux A Kaiten rewrite, with much new functionality, an...
Arris DG1670A Cable Modem Remote Command Execution
Vulnerability Details Affected Vendor: Arris Affected Product: Cable Modem Affected Version: DG1670A, TG1670 Platform: Embedded Linux CWE Classification: CWE-73: External Control of File Name or Path; CWE-77: Improper Neutralization of Special Elements used in a Command; CWE-522: Insufficiently...
Imgur: SSRF in https://imgur.com/vidgif/url
Hello, Short description ======== https://imgur.com/vidgif/url endpoint is vulnerable to a SSRF vulnerability which allows an attacker to craft connections originating from imgur servers to any destination on the internet and imgur internal network and craft outgoing UDP-packets / telnet-based...
D-Link DCS-930L - Authenticated Remote Command Execution (Metasploit)
Exploit for hardware platform in category remote exploits This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 'D-Link DCS-930L Authenticated Remote Command Execution', 'Description' = %...
D-Link DCS-930L - (Authenticated) Remote Command Execution (Metasploit)
This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 'D-Link DCS-930L Authenticated Remote Command Execution', 'Description' = %q The D-Link DCS-930L Network Video Camera is vulnerable t...