Alvarion Multiple Products Default Telnet Credentials

Nessus was able to log in to the remote Alvarion device using default credentials. These credentials are publicly known and can allow an attacker to gain privileged access to the device. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid72236; scriptversion"1.5";...

Audemat FMB80 RDS Encoder 'root' Default Credentials (Telnet)

The remote Audemat FMB80 RDS Encoder has no or default credentials set. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Pandora FMS 5.0RC1 Code Execution

----------- Author: ----------- xistence ------------------------- Affected products: ------------------------- Pandora FMS 5.0RC1 and below ------------------------- Affected vendors: ------------------------- Pandora FMS http://pandorafms.com/ ------------------------- Product description:...

Security Advisory-DoS Vulnerability in Eudemon8000E

Huawei Eudemon8000E firewall allows users to log in to the device using Telnet or SSH. When an attacker sends to the device a mass of TCP packets with special structure, the logging process become slowly and users may be unable to log in to the device HWPSIRT-2014-0101. This Vulnerability has bee...

Netgear DGN2000 telnet远程访问漏洞

Netgear DGN2000是一款路由器设备。 Netgear DGN2000默认存在监听TCP 32764端口的telnet服务，允许远程攻击者利用漏洞提交特制的请求执行任意OS命令。 0 Netgear DGN2000 目前没有详细解决方案提供： http://www.downloads.netgear.com/files/GDC/DGN2000/dgn2000ds18july08.pdf...

Stem Innovation IZON Hardcoded Password Vulnerability

Stem Innovation's IZON IP camera has hard-coded passwords that can be leveraged via both telnetd and httpd. Stem Innovation ‘IZON’ Hard-coded Credentials CVE-2013-6236 Mark Stanislav - email protected I. DESCRIPTION --------------------------------------- Stem Innovation's IP camera called ‘IZON’...

[Weevely v1.1] Stealth tiny PHP web shell

Weevely is a stealth PHP web shell that provides a telnet-like console. It is an essential tool for web application post exploitation , and can be used as stealth backdoor or as a web shell to manage legit web accounts, even free hosted ones. Weevely is currently included in Backtrack and Backbox...

[THC-Hydra v7.6] Fast Parallel Network Logon Cracker

Hydra is a parallelized network logon cracker which supports numerous protocols to attack, new modules are easy to add, beside that, it is flexible and very fast. Features IPv6 Support Graphic User Interface Internationalized support RFC 4013 HTTP proxy support SOCKS proxy support The tool suppor...

Cisco IOS XE Software Telnet Authentication Bypass Vulnerability

A vulnerability in the vty authentication of Cisco IOS XE Software 03.02.xxSE and 03.03.xxSE only could allow an unauthenticated, remote attacker to access an affected device without authentication and perform actions on the device with the privileges configured for the vty line interface. The...

IPmux-2L TDM Pseudowire Access Gateway Default Credentials (Telnet)

The remote IPmux-2L TDM Pseudowire Access Gateway is using known default credentials. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if...

[THC-Hydra 7.5] Fast Parallel Network Logon Cracker

Hydra is a parallelized network logon cracker which supports numerous protocols to attack, new modules are easy to add, beside that, it is flexible and very fast. Features IPv6 Support Graphic User Interface Internationalized support RFC 4013 HTTP proxy support SOCKS proxy support The tool suppor...

D-Link DAP-1522未文档化telnet账户漏洞

D-Link DAP-1522是一款路由器设备。 D-Link DAP-1522中的telnet服务使用一个内置的账户，允许远程攻击者可以利用该账户控制设备，如重置出厂设置。 0 D-Link DAP-1522 目前厂商暂无提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://www.dlink.com...

D-Link DIR-XXX remote root access exploit.

General info: ============= A lot have been already said about SOHO routers. Thus, without further ado another nail in the coffin. knock knock =========== -- cut !/bin/sh if -z "$1" ; then echo "d-link DIR-300 all, DIR-600 all, DIR-615 fw 4.0"; echo "exploited by AKAT-1,...

CVE-2013-6920

Siemens SINAMICS S/G controllers with firmware before 4.6.11 do not require authentication for FTP and TELNET sessions, which allows remote attackers to bypass intended access restrictions via TCP traffic to port 1 21 or 2 23...

Authentication flaw

Siemens SINAMICS S/G controllers with firmware before 4.6.11 do not require authentication for FTP and TELNET sessions, which allows remote attackers to bypass intended access restrictions via TCP traffic to port 1 21 or 2 23...

CVE-2013-6920

Siemens SINAMICS S/G controllers with firmware before 4.6.11 do not require authentication for FTP and TELNET sessions, which allows remote attackers to bypass intended access restrictions via TCP traffic to port 1 21 or 2 23...

CVE-2013-6920

CVE-2013-6920 affects Siemens SINAMICS S/G controllers with firmware prior to 4.6.11. The vulnerability is an authentication bypass for FTP (port 21) and Telnet (port 23) sessions, enabling remote attackers to perform administrative actions without authentication. The issue arises from services t...

MikroTik MAC Telnet Protocol Detection

Binary data mikrotikmactelnetdetect.nbin...

Blackboard LC3000 Laundry Reader Default Credentials (Telnet)

The remote Blackboard LC3000 Laundry Reader is using known default credentials. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

D-Link DIR-Series Routers - '/model/__show_info.php' Local File Disclosure

source: https://www.securityfocus.com/bid/64043/info Multiple D-Link DIR series routers are prone to a local file-disclosure vulnerability because it fails to adequately validate user-supplied input. Exploiting this vulnerability would allow an attacker to obtain potentially sensitive information...