Default Password (alpine) for 'root' Account

The account 'root' on the remote host has the password 'alpine'. An attacker may leverage this issue to gain full access to the affected system. Note that iPhones are known to use these credentials by default and allow access via SSH when jailbroken. %NASLMINLEVEL 70300 C Tenable Network Security...

CVE-2009-2087

The Web Services functionality in IBM WebSphere Application Server WAS 6.1 before 6.1.0.25 and 7.0 before 7.0.0.5, in certain circumstances involving the ibm-webservicesclient-bind.xmi file and custom password encryption, uses weak password obfuscation, which allows local users to cause a denial ...

Default credentials

The Web Services functionality in IBM WebSphere Application Server WAS 6.1 before 6.1.0.25 and 7.0 before 7.0.0.5, in certain circumstances involving the ibm-webservicesclient-bind.xmi file and custom password encryption, uses weak password obfuscation, which allows local users to cause a denial ...

CVE-2009-2087

The Web Services functionality in IBM WebSphere Application Server WAS 6.1 before 6.1.0.25 and 7.0 before 7.0.0.5, in certain circumstances involving the ibm-webservicesclient-bind.xmi file and custom password encryption, uses weak password obfuscation, which allows local users to cause a denial ...

CVE-2009-2087: Undefined Security Weakness

The Web Services functionality in IBM WebSphere Application Server WAS 6.1 before 6.1.0.25 and 7.0 before 7.0.0.5, in certain circumstances involving the ibm-webservicesclient-bind.xmi file and custom password encryption, uses weak password obfuscation, which allows local users to cause a denial ...

CVE-2009-2317: Undefined Security Weakness

The Axesstel MV 410R has a certain default administrator password, and does not force a password change, which makes it easier for remote attackers to obtain access...

TorrentTrader Classic 1.09 Multiple Remote Vulnerabilities

No description provided by source. waraxe-2009-SA074 - Multiple Vulnerabilities in TorrentTrader Classic 1.09 =============================================================================== Author: Janek Vind "waraxe" Date: 15. June 2009 Location: Estonia, Tartu Web:...

[waraxe-2009-SA#074] - Multiple Vulnerabilities in TorrentTrader Classic 1.09

waraxe-2009-SA074 - Multiple Vulnerabilities in TorrentTrader Classic 1.09 =============================================================================== Author: Janek Vind "waraxe" Date: 15. June 2009 Location: Estonia, Tartu Web: http://www.waraxe.us/advisory-74.html Description of vulnerable...

TorrentTrader Classic 1.09 Multiple Remote Vulnerabilities

Exploit for unknown platform in category web applications ========================================================== TorrentTrader Classic 1.09 Multiple Remote Vulnerabilities ========================================================== waraxe-2009-SA074 - Multiple Vulnerabilities in TorrentTrader...

TorrentTrader Classic 1.09 - Multiple Vulnerabilities

TorrentTrader Classic 1.09 - Multiple Vulnerabilities waraxe-2009-SA074 - Multiple Vulnerabilities in TorrentTrader Classic 1.09 =============================================================================== Author: Janek Vind "waraxe" Date: 15. June 2009 Location: Estonia, Tartu Web:...

TorrentTrader Classic 1.09 SQL Injection

waraxe-2009-SA074 - Multiple Vulnerabilities in TorrentTrader Classic 1.09 =============================================================================== Author: Janek Vind "waraxe" Date: 15. June 2009 Location: Estonia, Tartu Web: http://www.waraxe.us/advisory-74.html Description of vulnerable...

TorrentTrader Classic 1.09 - Multiple Vulnerabilities

waraxe-2009-SA074 - Multiple Vulnerabilities in TorrentTrader Classic 1.09 =============================================================================== Author: Janek Vind "waraxe" Date: 15. June 2009 Location: Estonia, Tartu Web: http://www.waraxe.us/advisory-74.html Description of vulnerable...

Oracle Database password weakness

Added: 05/12/2009 Background Oracle Database is a relational database solution available for multiple platforms. Problem The Oracle Database service has accounts with default or easily guessed passwords, which could allow an attacker to make unauthorized SQL queries. Resolution Set a strong...

Acer notebooks weak passwords

Administrator system account has empty password and password is not reset during initial system account setup...

The MYSQL user is root password is a weak password and a mention of the right method-vulnerability warning-the black bar safety net

In General is to write an ASP or PHP back door, not only very troublesome, but also to guess the site directory, if the other party is not on IIS, that we not no way?? Later, their thinking think of a way, in my test a few sets with the vulnerability of the machines are a success, it will now be ...

VM-Builder weak password

Weak PRNG is used to generate virtual machine root password...

Linksys Router Default Account (HTTP)

The remote Linksys device has its default account no username / SPDX-FileCopyrightText: 2008 Renaud Deraison Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPEPREFIX = "cpe:/o:linksys:...

CVE-2008-3617: Undefined Security Weakness

Remote Management and Screen Sharing in Apple Mac OS X 10.5 through 10.5.4, when used to set a password for a VNC viewer, displays additional input characters beyond the maximum password length, which might make it easier for attackers to guess passwords that the user believed were longer...

Retrospect Backup Server Authentication Module Password Hash Weakness (ESA-08-009)

According to its version number, the Authentication Module in the Retrospect Backup Server installed on the remote host uses a weak hash algorithm to hash a user's password, which could allow a remote attacker to gain control of a client's machine. C Tenable Network Security, Inc...

[Full-disclosure] EMC Dantz Retrospect 7 backup Client PlainText Password Hash Disclosure Vulnerability

FGA-2008-16: EMC Dantz Retrospect 7 backup Client PlainText Password Hash Disclosure Vulnerability http://www.fortiguardcenter.com/advisory/FGA-2008-16.html July 20, 2008 -- Affected Vendors: EMC -- Affected Products: EMC Dantz Retrospect 7 backup Client 7.5.116 -- Vulnerability Details: The...