Weak Password Vulnerability in Netnifty Web Application Security Protection System (CNVD-2021-71692)

Beijing Netnifty Information Technology Co., Ltd. is engaged in the business of network border security protection, application and data security protection, network-wide security risk management, professional security solutions and professional security services. A weak password vulnerability...

Newshield NDF7000 Series suffers from weak password vulnerability

Ltd. "Newshield" was founded in 2009 in Shanghai, is a "network security" as the main axis, to "make the network more secure" for the hereinafter referred to as "Newshield Technology" was founded in 2009 in Shanghai, is a professional security company with the main axis of "network security" and...

Weak password vulnerability in SRG3260 of Huawei Technologies Co.

Huawei Technologies Co., Ltd. is a leading global information and communications technology ICT solutions provider specializing in ICT. A weak password vulnerability exists in Huawei Technologies SRG3260, which can be exploited by attackers to obtain sensitive information...

CVE-2021-20418

IBM Security Guardium 11.2 does not require that users should have strong passwords by default, which makes it easier for attackers to compromise user accounts. IBM X-Force ID: 196279...

Backdoor.Win32.IRCBot.gen Hardcoded Credential

Discovery / credits: Malvuln - malvuln.com c 2021 Original source: https://malvuln.com/advisory/bcfc89ca07bd0ad7b9396a0815c9fc39.txt Contact: [email protected] Media: twitter.com/malvuln Threat: Backdoor.Win32.IRCBot.gen Vulnerability: Hardcoded Weak Password Description: The malware listens on...

Vxscan

This is a Python script named Vxscan, which is a comprehensive scanning tool for sensitive file detection, WAF/CDN identification, port scanning, fingerprint/service identification, operating system identification, weak password detection, POC scanning, SQL injection, and other functions. The...

Weak Password Vulnerability in Black Shield Network Security Audit System

Fujian Strait Information Technology Co., Ltd. is a state-controlled high-tech enterprises, specializing in network security technology field of technical research, product sales, information security services and other businesses. A weak password vulnerability exists in the Black Shield Network...

Weak password vulnerability in SRG3250 of Huawei Technologies Co.

Huawei Technologies Co., Ltd. is a leading global information and communications technology ICT solutions provider. A weak password vulnerability exists in the Huawei Technologies SRG3250, which can be exploited by attackers to obtain sensitive information...

Weak password vulnerability in SAS security audit system

SAS Security Audit System is a fortress developed by Green Alliance Technology. SAS Security Audit System has a weak password vulnerability that can be exploited by attackers to obtain sensitive information...

Weak password vulnerability in SRG3230 of Huawei Technologies Co.

Huawei Technologies Co. Ltd. is an ICT information and communications infrastructure and smart terminal provider. A weak password vulnerability exists in Huawei Technologies Co Ltd SRG3230, which can be exploited by attackers to obtain sensitive information...

in pimcore/pimcore

1Go to https://demo.pimcore.fun/en/account/register 2Enter the username and password 3Choose the password as 'a' and the account will be created...

Several Bugs Found in 3 Open-Source Software Used by Several Businesses

Cybersecurity researchers on Tuesday disclosed nine security vulnerabilities affecting three open-source projects — EspoCRM, Pimcore, and Akaunting — that are widely used by several small to medium businesses and, if successfully exploited, could provide a pathway to more sophisticated attacks. A...

Weak password vulnerability in Huawei USG5530

Huawei's USG5530 is a next-generation firewall/UTM United Threat Management appliance designed for large and medium-sized enterprise organizations and data centers. The Huawei USG5530 suffers from a weak password vulnerability, which can be exploited by an attacker to log into the backend and...

Weak password vulnerability in Huawei USG2205BSR

Huawei USG2205BSR is a large capacity router from Huawei. The Huawei USG2205BSR suffers from a weak password vulnerability that can be exploited by an attacker to obtain sensitive information...

Weak password vulnerability in Huawei USG5120HSR

Founded in 1987, Huawei is a provider of ICT information and communications infrastructure and smart terminals. A weak password vulnerability exists in Huawei USG5120HSR, which can be exploited by an attacker to log into the backend with a weak password and obtain sensitive information...

Weak password vulnerability in Huawei USG5120BSR

Founded in 1987, Huawei is a provider of ICT information and communications infrastructure and smart terminals. A weak password vulnerability exists in Huawei USG5120BSR, which can be exploited by an attacker to log into the backend with a weak password and obtain sensitive information...

Weak Password Vulnerability in Tian Yue's O&M Security Gateway (CNVD-2021-58618)

Tian Yue O&M Security Gateway Cloud Fortress Machine is a compliance control system for controlling and auditing user O&M operations in business environment. There is a weak password vulnerability in Tian Yue Operations and Maintenance Security Gateway, which can be exploited by attackers to obta...

Huawei Technologies Eudemon 1000E-N3 has a weak password vulnerability

Eudemon1000E-N3 is a next-generation firewall. Huawei Technologies Eudemon1000E-N3 has a weak password vulnerability, which can be exploited by attackers to obtain sensitive information...

CVE-2021-35965

The Orca HCM digital learning platform uses a weak factory default administrator password, which is hard-coded in the source code of the webpage in plain text, thus remote attackers can obtain administrator’s privilege without logging in...

Hardcoded credentials

The Orca HCM digital learning platform uses a weak factory default administrator password, which is hard-coded in the source code of the webpage in plain text, thus remote attackers can obtain administrator’s privilege without logging in...