ZYCH Free Planning Enterprise Website Management System Exists Universal Password Login Vulnerability

ZYCH Free Planner Enterprise Website Management System is an intelligent ASP website management program based on Free Planner Enterprise Website Management System. A universal password login vulnerability exists in the '/admin/login.asp' page of ZYCH Free Planning Enterprise Website Management...

ZvingSoft ZCMS SQL Injection Vulnerability

ZvingSoft ZCMS Zeyuan Web Content Management System is a set of enterprise-level web content management system CMS based on J2EE technology and AJAX technology from China Zeyuan Software ZvingSoft. The system provides interactive components, visualization topics, content collection, content...

mycompanyadmin.com XSS vulnerability

Open Bug Bounty ID: OBB-254688 Description| Value ---|--- Affected Website:| mycompanyadmin.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

ems.northeastprecast.com XSS vulnerability

Vulnerable URL: http://ems.northeastprecast.com/admin/Security/Login.asp?silent===/admin/main.asp=1"...

orangemenservices.com XSS vulnerability

Vulnerable URL: http://www.orangemenservices.com/admin/Security/Login.asp?silent===/admin/schedule/schedule.asp=1"...

CVE-2017-6689

A vulnerability in the ConfD CLI of Cisco Elastic Services Controllers could allow an authenticated, remote attacker to log in to an affected system as the admin user, aka an Insecure Default Administrator Credentials Vulnerability. More Information: CSCvc76661. Known Affected Releases: 2.29.76...

CVE-2017-6685

A vulnerability in Cisco Ultra Services Framework Staging Server could allow an authenticated, remote attacker with access to the management network to log in as an admin user of the affected device, aka an Insecure Default Credentials Vulnerability. More Information: CSCvc76681. Known Affected...

CVE-2017-6686

A vulnerability in Cisco Ultra Services Framework Element Manager could allow an authenticated, remote attacker with access to the management network to log in as an admin or oper user of the affected device, aka an Insecure Default Credentials Vulnerability. More Information: CSCvc76699. Known...

CVE-2017-9100

login.cgi on D-Link DIR-600M devices with firmware 3.04 allows remote attackers to bypass authentication by entering more than 20 blank spaces in the password field during an admin login attempt...

Design/Logic Flaw

/admin/loginc.php in Allen Disk 1.6 doesn't check if isset$SESSION'captcha''code' == 1, which leads to CAPTCHA bypass by emptying $POST'captcha'...

Multiple SONY network cameras information disclosure vulnerability

SONY SNC-CH115 and so on are the network camera products of Japan Sony Sony company. An information disclosure vulnerability exists in several SONY network cameras using firmware versions prior to 2.7.2. The vulnerability can be exploited by an attacker to log in to the device with administrator...

Weblate: full path disclosure at hosted.weblate.org/admin/accounts/profile/

Browsing this link https://hosted.weblate.org/admin/accounts/profile/ will ask for admin username and password as asked when browsing https://hosted.weblate.org/admin/accounts/ or https://hosted.weblate.org/admin/ hence disclosing the directory path of forbidden area. screenshot : path.png also i...

Brother Devices - Authentication Bypass / Password Change Exploit

Most of Brother devices web authorization can be bypassed through a trivial bug in the login process. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

ZYCHCMS V04 Login Authentication Bypass Vulnerability in /admin/login.asp File

ZYCHCMS is an enterprise website management system. A login authentication bypass vulnerability exists in the /admin/login.asp file in ZYCHCMS V04. The vulnerability allows attackers to bypass authentication to enter the backend and obtain sensitive information...

CVE-2016-7834

SONY SNC-CH115, SNC-CH120, SNC-CH160, SNC-CH220, SNC-CH260, SNC-DH120, SNC-DH120T, SNC-DH160, SNC-DH220, SNC-DH220T, SNC-DH260, SNC-EB520, SNC-EM520, SNC-EM521, SNC-ZB550, SNC-ZM550, SNC-ZM551, SNC-EP550, SNC-EP580, SNC-ER550, SNC-ER550C, SNC-ER580, SNC-ER585, SNC-ER585H, SNC-ZP550, SNC-ZR550,...

CVE-2017-7359

Pixie 1.0.4 allows an admin/index.php s=login&m= XSS attack...

Design/Logic Flaw

Pixie 1.0.4 allows an admin/index.php s=login&m= XSS attack...

Design/Logic Flaw

Dahua IP Camera devices 3.200.0001.6 can be exploited via these steps: 1. Use the default low-privilege credentials to list all users via a request to a certain URI. 2. Login to the IP camera with admin credentials so as to obtain full control of the target IP camera. During exploitation, the fir...

CVE-2017-7253

Dahua IP Camera devices 3.200.0001.6 can be exploited via these steps: 1. Use the default low-privilege credentials to list all users via a request to a certain URI. 2. Login to the IP camera with admin credentials so as to obtain full control of the target IP camera. During exploitation, the fir...

CVE-2017-7253

Dahua IP Camera devices 3.200.0001.6 can be exploited via these steps: 1. Use the default low-privilege credentials to list all users via a request to a certain URI. 2. Login to the IP camera with admin credentials so as to obtain full control of the target IP camera. During exploitation, the fir...