CVE-2016-9738: Undefined Security Weakness

IBM QRadar 7.2 and 7.3 does not require that users should have strong passwords by default, which makes it easier for attackers to compromise user accounts. IBM X-Force ID: 119783...

Shaanxi Weibin District Government Service Center Approval Electronic Monitoring System has multiple loopholes

Shaanxi Weibin District Government Service Center Approval Electronic Monitoring System has multiple vulnerabilities Weak password in the background: also the initial password http://113.201.122.70:8080/Approval/System/Login.aspx...

Weak Password Vulnerability in GoodWe PV Plant Monitoring System Android APP

GoodWe PV Plant Monitoring System Android APP is a very global PV plant monitoring app. GoodWe photovoltaic power plant monitoring Android APP system has a weak password vulnerability, the attacker can use the vulnerability to directly enter the remote end of the cell phone monitoring system,...

Weak Password Vulnerability in AppEx CRE Smart Acceleration Gateway

AppEx is a full line of application delivery, WAN acceleration, and Internet acceleration hardware and software products. A weak password vulnerability exists in AppEx CRE Smart Acceleration Gateway. An attacker is allowed to log in to the system backend using the default weak password to gain...

NNTP Login Utility

This module attempts to authenticate to NNTP services which support the AUTHINFO authentication extension. This module supports AUTHINFO USER/PASS authentication, but does not support AUTHINFO GENERIC or AUTHINFO SASL authentication methods. This module requires Metasploit:...

CVE-2017-7629: Weak Password Recovery Mechanism for Forgotten Password

QNAP QTS before 4.2.6 build 20170517 has a flaw in the change password function...

CVE-2017-9543: Weak Password Recovery Mechanism for Forgotten Password

register.ghp in EFS Software Easy Chat Server versions 2.0 to 3.1 allows remote attackers to reset arbitrary passwords via a crafted POST request to registresult.htm...

IBM BigFix Compliance 1.9.70 Multiple Vulnerabilities

According to its self-reported version, the instance of IBM BigFix Compliance running on the remote web server is 1.9.70. It is, therefore, affected by multiple vulnerabilities : - A stored cross-site scripting XSS vulnerability exists in the Analytics component in the Web UI due to improper...

CVE-2016-6093

IBM Tivoli Key Lifecycle Manager does not require that users should have strong passwords by default, which makes it easier for attackers to compromise user accounts...

CVE-2016-6093

CVE-2016-6093 affects IBM Security Key Lifecycle Manager (formerly Tivoli Key Lifecycle Manager). Root cause: by default the product does not require strong passwords, enabling easier account compromise. Affected versions include IBM Security Key Lifecycle Manager v2.5–2.5.0.7, v2.6–2.6.0.2, and ...

CVE-2016-6093

IBM Tivoli Key Lifecycle Manager does not require that users should have strong passwords by default, which makes it easier for attackers to compromise user accounts...

CVE-2016-6093: Undefined Security Weakness

IBM Tivoli Key Lifecycle Manager does not require that users should have strong passwords by default, which makes it easier for attackers to compromise user accounts...

Cisco Elastic Services Controller Insecure Default Credentials Vulnerability

A vulnerability in Cisco Elastic Services Controllers could allow an authenticated, remote attacker to log in to an affected system as the Linux admin user. The vulnerability is due to the existence of a default, weak, hard-coded password for the Linux admin user of an affected system. A successf...

CVE-2017-1196: Weak Password Requirements

IBM BigFix Compliance TEMA SUAv1 SCA SCM 1.9.70 does not require that users should have strong passwords by default, which makes it easier for attackers to compromise user accounts. IBM X-Force ID: 123671...

PT-2017-12321

Name of the Vulnerable Software and Affected Versions IBM BigFix Compliance TEMA SUAv1 SCA SCM version 1.9.70 Description The issue makes it easier for attackers to compromise user accounts due to a lack of strong password requirements by default. Recommendations For IBM BigFix Compliance TEMA...

MyBB < 1.8.12 Multiple Vulnerabilities

Binary data 700128.prm...

CVE-2017-7731

A weak password recovery vulnerability in Fortinet FortiPortal versions 4.0.0 and below allows attacker to carry out information disclosure via the Forgotten Password feature...

CVE-2017-7731: Weak Password Recovery Mechanism for Forgotten Password

A weak password recovery vulnerability in Fortinet FortiPortal versions 4.0.0 and below allows attacker to carry out information disclosure via the Forgotten Password feature...

CVE-2015-3189: Weak Password Recovery Mechanism for Forgotten Password

With Cloud Foundry Runtime cf-release versions v208 or earlier, UAA Standalone versions 2.2.5 or earlier and Pivotal Cloud Foundry Runtime 1.4.5 or earlier, old Password Reset Links are not expired after the user changes their current email address to a new one. This vulnerability is applicable...

Password Breaches Fueling Booming Credential Stuffing Business

The market for credential stuffing software and services is thriving thanks in large part to an epidemic of breaches of usernames and passwords. Digital Shadows said today in a new report that credential leaks, such as this past month’s Anti Public Combo List and others, have buoyed the market fo...