Hydra 8.5 - Network Logon Cracker

A very fast network logon cracker which support many different services. See feature sets and services coverage page - incl. a speed comparison against ncrack and medusa.Number one of the biggest security holes are passwords, as every password security study shows. This tool is a proof of concept...

EulerOS 2.0 SP1 : quagga (EulerOS-SA-2017-1058)

According to the version of the quagga package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - A denial of service flaw affecting various daemons in Quagga was found. A remote attacker could use this flaw to cause the various Quagga daemons,...

Zyxel WRE6505 DNS Hijacking Vulnerability

The Zyxel WRE6505 is a wireless AC750 range extender. The Zyxel WRE6505 device's root and admin accounts use the default TELNET password of 1234, resulting in easier DNS hijacking attacks by remote attackers by reconfiguring the built-in dnshijacker process...

CVE-2017-8224

Wireless IP Camera P2P WIFICAM devices have a backdoor root account that can be accessed with TELNET...

Code injection

Wireless IP Camera P2P WIFICAM devices have a backdoor root account that can be accessed with TELNET...

CVE-2017-8224

CVE-2017-8224 involves Wireless IP Camera (P2P) WIFICAM devices with multiple GoAhead-based vulnerabilities. Public disclosures detail a backdoor root account accessible via TELNET, enabling unauthenticated root access on affected devices, and a pre-auth information-leak in the GoAhead HTTP serve...

CVE-2017-8224

Wireless IP Camera P2P WIFICAM devices have a backdoor root account that can be accessed with TELNET...

Weblate: Open port leads to information disclosure

Open port 10022 leads to disclosure of open-ssh version and current Debian version being used. POC- 1. I performed an nmap scan nmap -A -T4 -p- weblate.org 2. I saw the port 10022 was open and I did a telnet connect to the port. 3. As soon as I did the telnet connect it returned me the openssh...

Moxa AWK-3131A Hard-coded Administrator Credentials Vulnerability

Talos Vulnerability Report TALOS-2017-0231 Moxa AWK-3131A Hard-coded Administrator Credentials Vulnerability April 21, 2017 Report ID CVE-2016-8717 Summary An exploitable Use of Hard-coded Credentials vulnerability exists in the Moxa AWK-3131A Wireless Access Point running firmware 1.1. The devic...

Default credentials

Zyxel WRE6505 devices have a default TELNET password of 1234 for the root and admin accounts, which makes it easier for remote attackers to conduct DNS hijacking attacks by reconfiguring the built-in dnshijacker process...

CVE-2017-7964

Zyxel WRE6505 devices have a default TELNET password of 1234 for the root and admin accounts, which makes it easier for remote attackers to conduct DNS hijacking attacks by reconfiguring the built-in dnshijacker process...

CVE-2017-7964

Zyxel WRE6505 devices have a default TELNET password of 1234 for the root and admin accounts, which makes it easier for remote attackers to conduct DNS hijacking attacks by reconfiguring the built-in dnshijacker process...

CVE-2017-7964

Zyxel WRE6505 devices have a default TELNET password of 1234 for the root and admin accounts, which makes it easier for remote attackers to conduct DNS hijacking attacks by reconfiguring the built-in dnshijacker process...

CVE-2017-7964

CVE-2017-7964 applies to Zyxel WRE6505 devices and is caused by a default TELNET password (1234) on root and admin accounts. The vulnerability enables remote attackers to hijack DNS by reconfiguring the built‑in dnshijacker process. The available documents confirm the affected product and the roo...

Huawei HG532n - Command Injection (Metasploit)

This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' require 'base64' class MetasploitModule 'Huawei HG532n Command Injection', 'Description' = %q This module exploits a command injection vulnerability in...

Cisco Catalyst 2960 switch in CVE-2017-3881 vulnerability analysis-vulnerability warning-the black bar safety net

! 2017 3 December 17, Cisco official website announced that the Cisco IOS&IOS-XE Software Cluster Management ProtocolCluster Management Protocolthe presence of a remote code execution vulnerability, CVE-2017-3881-in. The vulnerability is Cisco in the study of the CIA leak of the document“Vault 7”...

Huawei HG532n Command Injection Exploit

This Metasploit module exploits a command injection vulnerability in the Huawei HG532n routers provided by TE-Data Egypt, leading to a root shell. The router's web interface has two kinds of logins, a "limited" user:user login given to all customers and an admin mode. The limited mode is used her...

Huawei HG532n Command Injection

This module exploits a command injection vulnerability in the Huawei HG532n routers provided by TE-Data Egypt, leading to a root shell. The router's web interface has two kinds of logins, a "limited" user:user login given to all customers and an admin mode. The limited mode is used here to expose...

Cisco NX-OS Failed Authentication Handling Remote DoS (cisco-sa-20170315-nss1)

According to its version and configuration, the Cisco NX-OS software running on the remote device is affected by a denial of service vulnerability in the remote login functionality due to improper handling of failed authentication during login. An unauthenticated, remote attacker can exploit this...

Cisco NX-OS Telnet Packet Header Handling Remote DoS (cisco-sa-20170315-nss)

According to its version and configuration, the Cisco NX-OS software running on the remote device is affected by a denial of service vulnerability in the Telnet remote login functionality due to improper validation of Telnet packet headers. An unauthenticated, remote attacker can exploit this, vi...