Lucene search
+L

7629 matches found

exploitpack
exploitpack
•added 2019/03/19 12:00 a.m.•64 views

Advanced Host Monitor 11.92 beta - Local Buffer Overflow

Advanced Host Monitor 11.92 beta - Local Buffer Overflow !/usr/bin/env python ------------------------------------------------------------------------------------------------------------------------------------ Exploit: Advanced Host Monitor 11.92 beta - Local Buffer Overflow EggHunter Date:...

0.1AI score
SaveExploits0
OpenVAS
OpenVAS
•added 2019/03/08 12:00 a.m.•34 views

NetLinx Controller Unprotected Access (Telnet)

The NetLinx Controller is accessible via an unprotected Telnet connection. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

7AI score
SaveExploits0
OpenVAS
OpenVAS
•added 2019/03/07 12:00 a.m.•47 views

NetLinx Controller Detection (Telnet)

Detection of NetLinx controller. The script sends a connection request to the server and attempts to detect the NetLinx controller via Telnet and to extract its version if possible. Copyright C 2019 Greenbone Networks GmbH SPDX-License-Identifier: GPL-2.0-or-later This program is free software; y...

SaveExploits0References1
Prion
Prion
•added 2019/03/05 9:29 p.m.•37 views

Hardcoded credentials

The Alcatel Lucent I-240W-Q GPON ONT using firmware version 3FE54567BOZJ19 contains multiple hard coded credentials for the Telnet and SSH interfaces...

10CVSS9.5AI score0.01979EPSS
SaveExploits1References1Affected Software1
osv_cve
osv_cve
•added 2019/03/05 9:29 p.m.•23 views

CVE-2019-3918

The Alcatel Lucent I-240W-Q GPON ONT using firmware version 3FE54567BOZJ19 contains multiple hard coded credentials for the Telnet and SSH interfaces...

9.8CVSS7.3AI score0.01979EPSS
SaveExploits1References1
osv_cve
osv_cve
•added 2019/03/05 9:29 p.m.•27 views

CVE-2019-3917

The Alcatel Lucent I-240W-Q GPON ONT using firmware version 3FE54567BOZJ19 allows a remote, unauthenticated attacker to enable telnetd on the router via a crafted HTTP request...

7.5CVSS7.1AI score0.02353EPSS
SaveExploits1References1
NVD
NVD
•added 2019/03/05 9:29 p.m.•36 views

CVE-2019-3918

The Alcatel Lucent I-240W-Q GPON ONT using firmware version 3FE54567BOZJ19 contains multiple hard coded credentials for the Telnet and SSH interfaces...

10CVSS9.6AI score0.01979EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2019/03/05 9:00 p.m.•55 views

CVE-2019-3918

The Alcatel Lucent I-240W-Q GPON ONT using firmware version 3FE54567BOZJ19 contains multiple hard coded credentials for the Telnet and SSH interfaces...

9.6AI score0.01979EPSS
SaveExploits1References1
CVE
CVE
•added 2019/03/05 9:00 p.m.•90 views

CVE-2019-3918

The CVE-2019-3918 entry concerns the Alcatel Lucent I-240W-Q GPON ONT with firmware 3FE54567BOZJ19, which contains multiple hard coded credentials for Telnet and SSH interfaces. The vulnerability is supported by multiple sources: NVD details show a network-facing issue with high impact (C/H/I/A) ...

10CVSS9.4AI score0.01979EPSS
SaveExploits1References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/03/05 12:00 a.m.•13 views

CVE-2019-3918: Use of Hard-coded Credentials

The Alcatel Lucent I-240W-Q GPON ONT using firmware version 3FE54567BOZJ19 contains multiple hard coded credentials for the Telnet and SSH interfaces...

10CVSS5.8AI score0.01979EPSS
SaveExploits1References3
CNVD
CNVD
•added 2019/03/04 12:00 a.m.•25 views

GPON Router Remote Unauthenticated Enable/Disable Telnet Service Vulnerability

GPON Gigabit-Capable PON technology is the latest generation of broadband passive optical integrated access standard based on the ITU-TG.984.x standard. Gigabit-Capable PON GPON technology is the latest generation of broadband passive optical integrated access standard based on ITU-TG.984.x...

7.5CVSS7.1AI score0.02353EPSS
SaveExploits1References1
Prion
Prion
•added 2019/02/20 4:29 a.m.•31 views

Design/Logic Flaw

The backdoor account dnsekakf2$$ in /bin/login on DASAN H665 devices with firmware 1.46p1-0028 allows an attacker to login to the admin account via TELNET...

10CVSS9.3AI score0.02857EPSS
SaveExploits1References2Affected Software1
NVD
NVD
•added 2019/02/20 4:29 a.m.•32 views

CVE-2019-8950

The backdoor account dnsekakf2$$ in /bin/login on DASAN H665 devices with firmware 1.46p1-0028 allows an attacker to login to the admin account via TELNET...

10CVSS9.4AI score0.02857EPSS
SaveExploits1References2
Cvelist
Cvelist
•added 2019/02/20 4:00 a.m.•52 views

CVE-2019-8950

The backdoor account dnsekakf2$$ in /bin/login on DASAN H665 devices with firmware 1.46p1-0028 allows an attacker to login to the admin account via TELNET...

9.4AI score0.02857EPSS
SaveExploits1References2
CVE
CVE
•added 2019/02/20 4:00 a.m.•74 views

CVE-2019-8950

CVE-2019-8950 affects DASAN H665 devices with firmware 1.46p1-0028, where a backdoor account dnsekakf2$$ exists in /bin/login, enabling login to the admin account via TELNET. The issue is confirmed across multiple sources in connected documents (e.g., PT-2019-19276), which describe a backdoor in ...

10CVSS9.3AI score0.02857EPSS
SaveExploits1References2Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/02/20 12:00 a.m.•10 views

CVE-2019-8950: Use of Hard-coded Credentials

The backdoor account dnsekakf2$$ in /bin/login on DASAN H665 devices with firmware 1.46p1-0028 allows an attacker to login to the admin account via TELNET...

10CVSS5.8AI score0.02857EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2019/02/20 12:00 a.m.•20 views

PT-2019-19276 · Dasan · Dasan H665

Name of the Vulnerable Software and Affected Versions: DASAN H665 version 1.46p1-0028 Description: A backdoor account exists in the /bin/login of DASAN H665 devices, allowing an attacker to login to the admin account via TELNET using the account dnsekakf2$$. This issue has seen increased interest...

10CVSS9.4AI score0.02857EPSS
SaveExploits1References4
zdt
zdt
•added 2019/02/18 12:00 a.m.•56 views

DASAN H665 Backdoor Account Vulnerability

DASAN H665 has a vendor backdoor built into BusyBox /bin/login that provides remote root access with no password. DASAN H665 has vendor backdoor built into BusyBox /bin/login. Account named "dnsekakf2$$" gives access to admin uid 0 account over telnet without any password, at least for...

0.8AI score
SaveExploits0
Packet Storm
Packet Storm
•added 2019/02/17 12:00 a.m.•92 views

DASAN H665 Backdoor Account

Hi! DASAN H665 has vendor backdoor built into BusyBox /bin/login. Account named "dnsekakf2$$" gives access to admin uid 0 account over telnet without any password, at least for administration interface documented in H665 Quick Guide subnet 192.168.55.0/24 on LAN interface. $ telnet 192.168.55.1...

0.5AI score
SaveExploits0
osv_cve
osv_cve
•added 2019/02/08 5:29 p.m.•15 views

CVE-2018-20764

A buffer overflow exists in HelpSystems tcpcrypt on Linux, used for BoKS encrypted telnet through BoKS version 6.7.1. Since tcpcrypt is setuid, exploitation leads to privilege escalation...

9.8CVSS6AI score0.01185EPSS
SaveExploits0References1
Rows per page
Query Builder