Nextcloud: Password policy changes not enforced for existing passwords

So this is two reports in one. Sort of. But they are the same issue, or at least related. 1. When you setup your nextcloud there is no password policy at all. There is the strength indicator. I get the password policy app is not yet active at that point. But a minimum length would not be that...

Weak Password Vulnerability in Zhongxin Golden Shield Information Security Management System

Zhongxin Golden Shield information security management system realizes the collection, monitoring, analysis, early warning and control of all kinds of resource information such as network traffic, IP address, domain name, information content, application and so on in the IDC server room. Weak...

Weak Password Vulnerability in RG-NBR700G of Riptide Networks Inc.

RG-NBR700G is an Internet Behavior Management router from Riptide, which is designed for office full scenarios. A weak password vulnerability exists in RG-NBR700G, which can be exploited by attackers to obtain sensitive information...

Weak Password Vulnerability in DPX8000 of Hangzhou Dipu Technology Co.

DPX8000 is a deep service routing and switching gateway designed based on the three core technologies of APP-X hardware architecture, ConPlat operating system and APP-ID application and threat feature library developed by DP Technology. Ltd. DPX8000 has a weak password vulnerability, which can be...

Weak password vulnerability in AC centralized management platform of China Construction Zhiyun Network Communications Co.

CCTC Zhiyun Network Communications Co., Ltd. is a service provider specializing in the research and development, production, sales and service of network communications equipment, and providing network security, routers, switches, firewalls, wireless AP coverage and other network products and...

Weak Password Vulnerability in ADX3000 of Hangzhou Dipu Technology Co.

Hangzhou Dipu Technology Co., Ltd. is a high-tech listed enterprise integrating R&D, production and sales. Ltd. ADX3000 has a weak password vulnerability that can be exploited by attackers to obtain sensitive information...

Weak password vulnerability in China Telecom's NB-IOT smart device management platform

China Telecom NB-IOT Smart Device Management Platform is an IoT management platform. A weak password vulnerability exists in China Telecom's NB-IOT Smart Device Management Platform, which can be exploited by attackers to obtain sensitive information...

Weak Password Vulnerability in PA-5500-U06 of Humber Technology Ltd.

English: Opzoon is a leading global provider of cloud computing data center solutions and the first high-tech enterprise in China to establish an enterprise-level applied mathematics laboratory. A weak password vulnerability exists in Humber Technology Limited PA-5500-U06, which can be exploited ...

Weak password vulnerability in AC centralized management platform of Shenzhen Jianxin Technology Company Limited (CNVD-2021-32069)

Ltd. is an emerging technology enterprise focusing on intelligent networking solution provider. Ltd. AC centralized management platform has a weak password vulnerability, which can be exploited by attackers to obtain sensitive information...

U.S. General Services Administration: Weak password policy leading to exposure of administrator account access

Hi, The login endpoint https://mysmartplans.gsa.gov/Marathon/Default.aspx is having weak password policy. During the recon, I came across a mysmartplans overview document http://www.accentimaging.com/accent/pdfs/Accent%20MySmartPlans.pdf . In this document few users are mentioned like - rick, ban...

Weak Password Vulnerability in RMP Router Management Platform of Xiamen Sihsin Communication Technology Co.

Xiamen Sihsin Communication Technology Co., Ltd. focuses on the research and development, production, promotion and service of high-end wireless communication transmission equipment in the industrial field, and is a backbone enterprise in the field of wireless communication of the Internet of...

Weak password vulnerability in Qixing Tianqing Hanma USG Firewall (CNVD-2021-32769)

Tianqing Hanma USG Firewall is developed based on Qixing ISE unified engine, there is no OEM from third-party functions, and the functions can be split in any combination, which has very little impact on system performance. Adopting multi-core hardware architecture and integrated software design,...

Weak Password Vulnerability in Fusion Router FR3008

Ltd. was founded in 2009, is to provide users with intelligent products and cloud services in the field of smart home technology innovative enterprises Smart Life is Fusion's Internet strategy segment, with intelligent network devices, smart hardware, APP and Internet communication channels as th...

Weak password vulnerability in Tianyue Network Security Audit System V6.0

Tianyue Network Security Audit System Business Network Audit, referred to as Tianyue Audit System, is a compliance management system that conducts fine-grained audits of network operation behaviors in business environments. A weak password vulnerability exists in Tianyue Network Security Audit...

Weak password vulnerability in H3C s1526 switch

H3C S1526 switch is a Layer 2 wire-speed Ethernet switching product independently developed by H3C Communication Technology Co., Ltd. and is an intelligent switch designed for network environments that require high performance and easy installation. A weak password vulnerability exists in the H3C...

Weak Password Vulnerability in RG-ISG of Ruijie Networks Co.

Ruijie Networks is a specialized network vendor with a full range of network equipment product lines and solutions, including switches, routers, software, security firewalls, wireless products, storage, and more. A weak password vulnerability exists in the RG-ISG of Ruijie Networks Corporation,...

Weak Password Vulnerability in Apache Ambari

Apache Ambari is a web-based tool that supports provisioning, management and monitoring of Apache Hadoop clusters. Apache Ambari suffers from a weak password vulnerability that can be exploited by an attacker to obtain sensitive information...

Weak Password Vulnerability in Ruiyou Yilian Remote Access System

Xingtai Zhigong Software Service Center Dingzhi Technology, is a company focusing on the Shenzhou Zhigong series of miniature specialty store management software development services. A weak password vulnerability exists in the Ruiyou Yilian remote access system, which can be exploited by attacke...

Weak Password Vulnerability in Time Refinement Management Platform of Entropy Base Technology Co. Ltd (CNVD-2021-30899)

formerly known as: China Control Intelligence Technology Co., Ltd. was founded in 2007, focusing on the research of hybrid biometrics technology and the application of technology enterprises, is a "people, vehicles, things" based on the entrance and exit time and security management system produc...

Weak password vulnerability in web manager system of Shenzhen Dingxin Tongda Co.

Shenzhen Dingxintongda Co., Ltd. was established in February 23, 2011, the registered office is located in Shenzhen City, Nanshan District, Xili Street, Xili Community, Xingke Street, Vanke Cloud City, a phase of the seven A building 1801 R & D room, 1802 R & D room, 1804 R & D room, the legal...