CVE-2016-5801

An issue was discovered in OmniMetrix OmniView, Version 1.2. Insufficient password requirements for the OmniView web application may allow an attacker to gain access by brute forcing account passwords...

Code injection

An issue was discovered in Mitsubishi Electric Automation MELSEC-Q series Ethernet interface modules QJ71E71-100, all versions, QJ71E71-B5, all versions, and QJ71E71-B2, all versions. Weakly encrypted passwords are transmitted to a MELSEC-Q PLC...

CVE-2017-2766: Weak Password Recovery Mechanism for Forgotten Password

EMC Documentum eRoom version 7.4.4, EMC Documentum eRoom version 7.4.4 SP1, EMC Documentum eRoom version prior to 7.4.5 P04, EMC Documentum eRoom version prior to 7.5.0 P01 includes an unverified password change vulnerability that could potentially be exploited by malicious users to compromise th...

Netman 204 Backdoor / Password Reset

Exploit Title: Netman 204 Backdoor and weak password recovery function Google Dork: intitle:"Netman 204 login" Date: 31st Jan 2017 Exploit Author: Simon Gurney Vendor Homepage: blog.synack.co.uk Software Link: http://www.riello-ups.co.uk/uploads/file/319/1319/FW058-0105FWB0225NetMan204.zip Versio...

Netman 204 - Backdoor Account Password Reset

Netman 204 - Backdoor Account Password Reset Exploit Title: Netman 204 Backdoor and weak password recovery function Google Dork: intitle:"Netman 204 login" Date: 31st Jan 2017 Exploit Author: Simon Gurney Vendor Homepage: blog.synack.co.uk Software Link:...

CVE-2016-6602

ZOHO WebNMS Framework 5.2 and 5.2 SP1 use a weak obfuscation algorithm to store passwords, which allows context-dependent attackers to obtain cleartext passwords by leveraging access to WEB-INF/conf/securitydbData.xml. NOTE: this issue can be combined with CVE-2016-6601 for a remote exploit...

CVE-2016-6602

ZOHO WebNMS Framework 5.2 and 5.2 SP1 use a weak obfuscation algorithm to store passwords, which allows context-dependent attackers to obtain cleartext passwords by leveraging access to WEB-INF/conf/securitydbData.xml. NOTE: this issue can be combined with CVE-2016-6601 for a remote exploit...

CVE-2016-7038: Weak Password Recovery Mechanism for Forgotten Password

In Moodle 2.x and 3.x, web service tokens are not invalidated when the user password is changed or forced to be changed...

Same-Source Weak Password Scan Over HTTP

Many HTTP servers, especially on routers and other network device, have well-known default user credentials. In many cases, these default credentials are not changed by the administrator. An attacker might scan the network in order to discover such devices, and use these default credentials to lo...

CVE-2016-2349: Weak Password Recovery Mechanism for Forgotten Password

Remedy AR System Server in BMC Remedy 8.1 SP 2, 9.0, 9.0 SP 1, and 9.1 allows attackers to reset arbitrary passwords via a blank previous password...

Weak Password Vulnerability in Sichuan Green Blue e-Government System Website

Sichuan green blue e-government system is an e-government building system. Weak password vulnerability exists in some websites of Sichuan Green Blue e-government system. Allow attackers to use the account password admin/scjg888 to log in to the system background, to obtain sensitive information...

IBM BigFix Remote Control < 9.1.3 Multiple Vulnerabilities

IBM BigFix Remote Control is prone to multiple vulnerabilities. Copyright C 2016 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free softwar...

CVE-2016-2929

IBM BigFix Remote Control before 9.1.3 does not properly restrict password choices, which makes it easier for remote attackers to obtain access via a brute-force approach...

Geovision IP Camera device weak password vulnerability

No description provided by source. !/usr/bin/env python coding: utf-8 from pocsuite.api.request import req from pocsuite.api.poc import register from pocsuite.api.poc import Output, POCBase class TestPOCPOCBase: vulID = '' ssvid version = '1.0' author = 'Hcamael' vulDate = '2016-11-11' createDate...

Grandstream HT701 IP analog telephone adapter background of the weak password vulnerability

No description provided by source. !/usr/bin/env python coding: utf-8 from pocsuite.api.request import req from pocsuite.api.poc import register from pocsuite.api.poc import Output, POCBase import re class TestPOCPOCBase: vulID = '' ssvid version = '1.0' author = 'Hcamael' vulDate = '2016-11-11'...

Weak Password Vulnerability in NetSense Information Security Audit System

NetShen Security Audit System is a hardened computer that can defend against attacks with strong security protection. A weak password vulnerability exists in the NetShen Information Security Audit System, which allows an attacker to exploit the vulnerability to log in to the system's backend and...

Weak Password Vulnerability in Some Interfaces of China Mobile's Mobile Client

China Mobile Mobile Client is a mobile application launched by China Mobile. A weak password vulnerability exists in some interfaces of the China Mobile mobile client. Since the post data is obtained by reversing the apk using "Eastern=! @$%^&=World" as the password, using 3 des encryption, no...

Weak password vulnerability in MPSec-VPN3005S-AC model device

The MPSec-VPN3005S-AC model device is a security gateway developed by Maipu. A weak password vulnerability exists in the MPSec-VPN3005S-AC device. A weak password vulnerability exists in port 23 of the MPSec-VPN3005S-AC device, which can be exploited by an attacker to log in to the system and gai...

Weak Password Vulnerability in NetDrive Unified Communications Platform (Active-UC)

NetDynamic Unified Communications platform Active-UC provides office communication services for enterprises, integrating various communication devices, media and applications. A weak password vulnerability exists in NetDrive Unified Communications Platform Active-UC. Account password: admin /...

Jinan Zhongwei Century Technology Co., Ltd. cloud view remote monitoring system weak password vulnerability

CloudVision Remote Monitoring System is a remote monitoring software. A weak password vulnerability exists in CloudVision Remote Monitoring System, which can be exploited by attackers to log in to the system and obtain sensitive information or perform unauthorized operations...