Weak Password Vulnerability in Rico's NetShare VPN Security Gateway

Ruike NetShare Virtual Private Network Security Gateway is a product of Ruike Electronic Technology Co., Ltd. that establishes a private network on a public network. A weak password vulnerability exists in the Rico NetShare VPN Security Gateway. It allows an attacker to log in to the system and...

Hikvision telnet 弱口令

No description provided by source...

Weak Password Vulnerability in Government Website Management System of E-Tron Networks

E-Tron web government website management system is a system for government Internet access system, government website system customization services. A weak password vulnerability exists in part of the back-end of the NetGov ad management system. An attacker can utilize the vulnerability to log in...

Weak Password Vulnerability in Hangzhou Pinming Tower Crane Online Safety Management System

Hangzhou Pinming Technology Co., Ltd. is a provider of information technology for the focal point of engineering and construction. Tower Crane Online Safety Management System is the company's safety management system. A weak password vulnerability exists in Hangzhou Pinming's tower crane online...

Vulnerability in VirtueMart for Joomla

Hello 3APA3A! This is Brute Force vulnerability in VirtueMart for Joomla. Which is at order details page. ------------------------- Affected products: ------------------------- Vulnerable are VirtueMart 3.0.9 for Joomla and previous versions. ---------- Details: ---------- Brute Force WASC-11:...

ShopEx多名员工安全意识不足泄露内部业务信息

简要描述： ShopEx 详细说明： 以下多名员工邮箱存在弱口令，包括hr。 hr Shopex123 chenminrui Shopex123 huhao Shopex123 lihuatian Shopex123 lixunlong Shopex1234 可进一步登陆 mail.shopex.cn 漏洞证明： 随机抽两个看一下 还有vpn说明 点到为止 就这样吧...

Schneider Electric Modicon M340 PLC Station P34 Module HMI Vulnerabilities

Update Vulnerabilities in Schneider Electric SCADA gear remain unpatched close to two weeks after they were disclosed during DEF CON. The Industrial Control System Cyber Emergency Response Team ICS-CERT released an alert late last week and patches are currently being validated according to ICS-CE...

用友某管理系统后台弱口令

简要描述： 用友某管理系统后台弱口令 详细说明： http://nczx.ufida.com.cn admin asq66a3s 漏洞证明：...

用友某管理系统后台弱口令已GetShell

简要描述： 用友某管理系统弱口令已GetShell 详细说明： http://vip.ufida.com.cn/nccsm/Admin.aspx admin sqbbagdp 进入后台发现有个编辑器 然后getshell 里面的数据太多了 漏洞证明： admin sqbbagdp 进入后台发现有个编辑器 然后getshell 里面的数据太多了...

CVE-2012-6694: Undefined Security Weakness

GE Healthcare Centricity PACS Workstation 4.0 and 4.0.1, and Server 4.0, has a password of 2charGE for the geservice account, which has unspecified impact and attack vectors related to TimbuktuPro. NOTE: it is not clear whether this password is default, hardcoded, or dependent on another system o...

金蝶shop商城后台弱口令泄露大量商家/会员信息/订单/网站信息

简要描述： 之前报的洞走了大厂商竟然就给了1rank，桑心啊，深夜挖洞挺不容易的，求给良心rank。。。 详细说明： 直接上图证明吧，出现问题的域名。 http://k3shop.k3cloud.kingdee.com/ 大致的扫了下网站目录，找到后台可直接登录admin用户！ 泄露的网站信息 http://k3shop.k3cloud.kingdee.com/sitemap.xml 漏洞证明： 订单信息 商家信息 会员信息...

CollabNet Subversion Edge weak password storage mechanism

Vuln Title: The CollabNet Subversion Edge stores passwords as unsalted MD5 hashes Date: 28.06.2015 Author: otr Software Link: https://www.open.collab.net/downloads/svnedge Vendor: CollabNet Version: 4.0.11 Tested on: Fedora Linux Type: Insecure password storage Risk: Medium Status: public/fixed...

CollabNet Subversion Edge weak password policy

Vuln Title: The CollabNet Subversion Edge Management Frontend does not implement a strong password policy Date: 28.06.2015 Author: otr Software Link: https://www.open.collab.net/downloads/svnedge Vendor: CollabNet Version: 4.0.11 Tested on: Fedora Linux Type: Lack of defensive measures Risk: Medi...

Janitza UMG Power Quality Measuring Products Vulnerabilities

OVERVIEW This advisory was originally posted to the US-CERT secure Portal library on September 22, 2015, and is being released to the NCCIC/ICS-CERT web site. Mattijs van Ommeren of Applied Risk has identified several vulnerabilities in the Janitza UMG power quality measuring products. Janitza ha...

Cupp - Common User Passwords Profiler

The most common form of authentication is the combination of a username and a password or passphrase. If both match values stored within a locally stored table, the user is authenticated for a connection. Password strength is a measure of the difficulty involved in guessing or breaking the passwo...

PT-2016-08: Weak Password Hashing in ABB PCM600

The specialists of the Positive Research center have detected a Weak password hashing vulnerability in ABB PCM600. A Main Application Password in the "ACTConfig" configuration file hashed by the weak function with the hardcoded key and the initialization vector. It is easy to decrypt the password...

Inductive Automation Ignition Multiple Vulnerabilities

Binary data scadainductiveautomationignitionICSA-15-090-01.nbin...

Empire backup Wang(Empirebak) \class\functions.php and\class\combakfun.php GETSHELL vul-vulnerability warning-the black bar safety net

catalog 1. Vulnerability Description 2. Vulnerability trigger conditions 3. Vulnerability the range of 4. Vulnerability code analysis 5. Defense method 6. Offensive and defensive thinking 1. Vulnerability description EmpireBak is a completely free, dedicated to Mysql for big data backup with the...

EMC RSA Identity Management and Governance password reset

Weak password reset procedure...

Multiple vulnerabilities in multiple Lenovo ThinkServer product servers

Lenovo ThinkServer RD350, RD450, RD550, RD650 and TD350 are rackmount server products from Lenovo, China. A weak encryption storage user and administrator BIOS password vulnerability exists in multiple Lenovo ThinkServer product servers. An attacker could exploit this vulnerability to crack the...