NOVUS AUTOMATION Superview 弱口令

No description provided by source...

Wago WAGO-I/O-IPC 758-870/000-xxx 弱口令

No description provided by source...

Tridium NiagaraAX 弱口令

No description provided by source...

Emerson Control Link Refrigeration System Controller 弱口令

参考链接: http://foodservice.structuralconcepts.com/media/comsccmanager/temp-controller-info/emerson-control-link-cpc-controller.pdf...

siemens Ruggedcom RMC30 弱口令

No description provided by source...

佳能MF8040Cn打印机弱口令

佳能MF8040Cn打印机弱口令 1.dork app:"Canon i-SENSYS MF8040Cn printer http admin" 2.漏洞详情 佳能MF8040Cn打印机存在默认账号密码 1）系統管理員模式 admin admin 2）終端使用者模式 admin 3.漏洞证明 用zoomeye搜索 ： app:"Canon i-SENSYS MF8040Cn printer http admin" 可见有大量设备暴露在公网上面 http://223.197.235.193 http://219.142.195.251 用admin admin 登陆 成功登陆 可查看打印信...

Pacom RTU/1000 CCU/EMCS Encryption Weak Password Vulnerability

The Pacom 1000 CCU and RTU are both products of the Swedish company Pacom. The former is a set of network security panels for controlling, monitoring and maintaining remote sites and the latter is a set of security panels for controlling access control alarm systems. A security vulnerability exis...

正方教务管理各个版本无条件注入导致敏感信息泄露

简要描述： 正方各个版本无条件注入导致大量学生的敏感信息泄露 详细说明： 漏洞证明： 刚刚忘了把站贴上来了，下面几个只是冰山一角 http://.../fn55wdyilcrlce55nybn5fis/default2.aspx Heron1990@ng http://.../...

用友某系统涉及多个用户弱口令漏洞

简要描述： 用友某系统SQL注入 ,涉及多个用户弱口令漏洞 详细说明： 问题在这里 http://zhichi.ufida.com.cn/jinrong/ 猜了半天 用户jinrong 密码jinrong http://zhichi.ufida.com.cn/jinrong/ErrorPage.aspx?aspxerrorpath=/jinrong/WebManage/UserLogon.aspx 进去爆错 单独访问：http://zhichi.ufida.com.cn/jinrong/ 然后发现，多个用户名 随便贴一些 jingrong jingrong shlhf shlhf...

OpenLDAP 弱密码

No description provided by source...

Weak Password Vulnerability in Intelligent Upgrading System of Zhengzhou Wecom Technology Co.

WKM Technology is is a broadband network multimedia application system solutions and equipment providers, system integrators and information service providers, is the Beidou timing application system solutions and equipment providers, the main business of education informatization, party members ...

Lenovo System Update found two mention of the right to exploit the principle of analysis-vulnerability warning-the black bar safety net

Lenovo released the latest System Update announcement in two mention the right vulnerability is me in a few weeks to submitCVE-2 0 1 5-8 1 0 9, CVE-2 0 1 5-8 1 1 0IOActive as well as Lenovo in this report issued a warning! Details of the bedding In the detoxification of the details before we star...

MySQL 弱口令 PoC

常见的用户名： root, admin, user, test 常用密码： 123456, admin, password, root, test...

Socks5 弱口令 PoC

No description provided by source...

Telnet 弱口令 PoC

常见的用户名： admin, root, administrator, user, test 常用密码： 123456, admin, password, root, test...

Rsync >=3.0 弱口令 PoC

No description provided by source...

SSH 弱口令 PoC

SSH 默认没有限制连接次数，可以加载字典文件进行密码猜解。 常用的用户名： root, admin, test, user 常用的密码： '', 'test', '123456', 'password', 'root', 'admin'...

Revive Adserver: Login page password-guessing attack

Vulnerability description not provided...

用友某系统从弱口令到sql注射到getshell

简要描述： 弱口令、sql注射、getshell 详细说明： 系统地址： http://vip.ufida.com.cn/Frame/Index.aspx 弱口令帐号：adminnc 密码：adminnc 在自助查询处，发现注入（需要登录，注意cookie有时效） GET http://vip.ufida.com.cn/RepositorySearchInfo/DoctInfo.aspx?ReposID=38d4a08e-8b79-4de7-8566-30aecfb1d56f HTTP/1.1 Accept: text/html, application/xhtml+xml, /...

CVE-2015-2864

Retrospect and Retrospect Client before 10.0.2.119 on Windows, before 12.0.2.116 on OS X, and before 10.0.2.104 on Linux improperly generate password hashes, which makes it easier for remote attackers to bypass authentication and obtain access to backup files by leveraging a collision...