Weak password vulnerability in Huawei SVN2230

The Huawei SVN2230 is a VPN gateway. The Huawei SVN2230 suffers from a weak password vulnerability that can be exploited by an attacker to obtain sensitive information...

Backdoor.Win32.IRCBot.gen Weak Hardcoded Password

Discovery / credits: Malvuln - malvuln.com c 2021 Original source: https://malvuln.com/advisory/9b12ff6b8b025e7fb0a171abad41c79c.txt Contact: [email protected] Media: twitter.com/malvuln Threat: Backdoor.Win32.IRCBot.gen Vulnerability: Weak Hardcoded Password Description: The malware listens on...

Huawei AR1220F-S has a weak password vulnerability

Huawei AR1220F-S is a new-generation enterprise-class gigabit router. The Huawei AR1220F-S has a weak password vulnerability, which can be exploited by attackers to log into the system backend and obtain sensitive information...

Argus Surveillance DVR 4.0 Weak Password Encryption

Exploit Title: Argus Surveillance DVR 4.0 - Weak Password Encryption Exploit Author: Salman Asad @deathflash1411 Date: 12.07.2021 Version: Argus Surveillance DVR 4.0 Tested on: Windows 7 x86 Build 7601 & Windows 10 Reference:...

Argus Surveillance DVR 4.0 - Weak Password Encryption Exploit

Exploit Title: Argus Surveillance DVR 4.0 - Weak Password Encryption Exploit Author: Salman Asad @deathflash1411 Version: Argus Surveillance DVR 4.0 Tested on: Windows 7 x86 Build 7601 & Windows 10 Reference: https://deathflash1411.github.io/blog/cracking-argus-surveillance-passwords Note: Argus...

Weak password vulnerability in AR2240 of Huawei Technologies Co.

Huawei AR2240 is an enterprise router product developed by Huawei. A weak password vulnerability exists in the Huawei Technologies AR2240 series, which can be exploited by attackers to obtain sensitive information...

Weak Password Vulnerability in the FLIR-AX8 from Phillips USA

Teledyne FLIR specializes in the design, development, production, marketing and promotion of specialized technologies for enhanced situational awareness. A weak password vulnerability exists in the FLIR-AX8 from Teledyne FLIR USA. An attacker can log in to the backend using the default weak...

in emoncms/emoncms

✍️ Description weak password requirements can lead to account takeover vulnerability as attacker easily can perform Bruteforce attacks. 🕵️‍♂️ Proof of Concept if a attacker knows the username and email of the your users then attacker easily can reset the victim password and no privileges required...

Weak Password Vulnerability in Network Video Server of Shenzhen Longchamp Xintron Technology Co. Ltd (CNVD-2021-54075)

Ltd. is a leading provider of intelligent inspection robots and intelligent infrared thermal imaging products and solutions in China. Ltd. Network Video Server has a weak password vulnerability that can be exploited by attackers to obtain sensitive information...

Weak Password Vulnerability in IMWorks Instant Messaging Software

IMworks enterprise instant messaging software official version is an instant messaging tool launched by the enterprise information, can assist users to build a LAN intranet. IMWorks instant messaging software has a weak password vulnerability that can be exploited by attackers to obtain sensitive...

Weak Password Vulnerability in Guangzhou Kingston's Dynamic Loop Monitoring Backend System

Guangzhou Kingston Electronic Technology Co., Ltd. is a high-tech company integrating R&D, production and sales, and is the leading developer and manufacturer of networked computer room power environment monitoring equipment in China. A weak password vulnerability exists in the back-end system of...

Weak Password Vulnerability in Beijing Byzoro Networks Smart S200

Beijing Byzoro Networks Technology Co., Ltd Byzoro Networks is a high-tech enterprise dedicated to building the next-generation secure Internet by providing a full range of security solutions for industry users around the direction of network security business. Beijing Byzoro Networks Smart S200...

Weak Password Vulnerability in Leiko B21

The Lexmark B21 is a wireless router. A weak password vulnerability exists in Leike B21, which can be exploited by attackers to obtain sensitive information...

Weak password vulnerability in DH-SD6C82E-GN of Zhejiang Dahua Technology Co.

The DH-SD6C82E-GN is an HD network dome camera. DH-SD6C82E-GN of Zhejiang Dahua Technology Co. Ltd. suffers from a weak password vulnerability that can be exploited by attackers to obtain sensitive information...

Weak Password Vulnerability in TopGate500 of Skyrun Technology Group

Founded in 1995 as the first network security enterprise in China, Skyrun Technology Group has become a leading network security, big data and cloud service provider in China. A weak password vulnerability exists in TopGate500 of Tianrongxin Technology Group, which allows an attacker to log in to...

Weak Password Vulnerability in RG-MA1210 of Riptide Networks

The RG-MA1210 is a wireless router. A weak password vulnerability exists in the RG-MA1210, which can be exploited by an attacker to log into the backend and obtain sensitive information...

H3C Aolynk BR304+ has a weak password vulnerability

The H3C Aolynk BR304+ is a network security router. A weak password vulnerability exists in the H3C Aolynk BR304+, which can be exploited by an attacker to obtain sensitive information...

Weak password vulnerability in Westermo MRD-350

Westermo specializes in the design and manufacture of datacom products for critical systems in harsh environments. A weak password vulnerability exists in the Westermo MRD-350, which can be exploited by an attacker to log into the backend and obtain sensitive information...

Weak Password Vulnerability in Intelligent Firefighting Cloud Platform of Suzhou State Grid Electronic Technology Co.

GNT is an IoT+ management solution provider. A weak password vulnerability exists in the Intelligent Firefighting Cloud Platform of Suzhou Guonet Electronic Technology Co. Ltd. where an attacker utilizes a weak password to log into the backend and obtain sensitive information...

CVE-2021-32753 Weak password in API gateway in EdgeX Foundry Edinburgh, Fuji, Geneva, and Hanoi releases allows remote attackers to obtain authentication token via dictionary-based password attack when OAuth2 authentication method is enabled.

EdgeX Foundry is an open source project for building a common open framework for internet-of-things edge computing. A vulnerability exists in the Edinburgh, Fuji, Geneva, and Hanoi versions of the software. When the EdgeX API gateway is configured for OAuth2 authentication and a proxy user is...