CVE-2025-13315

Twonky Server 8.5.2 on Linux and Windows is vulnerable to an access control flaw. An unauthenticated attacker can bypass web service API authentication controls to leak a log file and read the administrator's username and encrypted password...

EUVD-2007-5408

Malware in sbrugna...

EUVD-2006-3284

Malware in sbrugna...

EUVD-2025-32230

Malicious code in bioql PyPI...

SurgeNews User Credentials

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'SurgeNews User Credentials', 'Description' = %q This module exploits a vulnerability in the WebNews web interface of SurgeNews on TCP ports 9080...

Cyber Cafe Management System Cross-Site Scripting Vulnerabilities

Cyber Cafe Management System CCMS is a cyber cafe management system by the individual developer Anuj Kumar. A cross-site scripting vulnerability exists in version 1.0 of the Phpgurukul Cyber Cafe Management System that could allow a remote attacker to inject arbitrary web script or HTML via the...

CVE-2022-46371: Exposure of Sensitive Information to an Unauthorized Actor

Alotcer - AR7088H-A firmware version 16.10.3 Information disclosure. Unspecified error message contains the default administrator user name...

PT-2023-14920 · Alotcer · Alotcer - Ar7088H-A

Name of the Vulnerable Software and Affected Versions: Alotcer - AR7088H-A firmware version 16.10.3 Description: The issue concerns an information disclosure where an unspecified error message contains the default administrator user name. Recommendations: For Alotcer - AR7088H-A firmware version...

Alotcer AR7088H security vulnerability

The Alotcer AR7088H is an embedded edge router from Alotcer China. A security vulnerability exists in the Alotcer AR7088H firmware version 16.10.3, which stems from the presence of an information disclosure where an unspecified error message contains the default administrator username...

CVE-2021-40597

The firmware of EDIMAX IC-3140W Version 3.11 is hardcoded with Administrator username and password...

Edimax Technology IC-3140W Trust Management Vulnerability

Edimax Technology Ipcam IC-3140W is a webcam from China-based Edimax Technology. A security vulnerability exists in the Edimax Technology IC-3140W version 3.11, which originates from the use of an administrator's username and password that are hardcoded...

CVE-2022-30898

A Cross-site request forgery CSRF vulnerability in Cscms music portal system v4.2 allows remote attackers to change the administrator's username and password...

PT-2022-20366

Name of the Vulnerable Software and Affected Versions Cscms music portal system version 4.2 Description A Cross-site request forgery CSRF issue allows remote attackers to change the administrator's username and password. This can be exploited by tricking the administrator into performing unintend...

CVE-2022-26653

Zoho ManageEngine Remote Access Plus before 10.1.2137.15 allows guest users to view domain details such as the username and GUID of an administrator...

Zoho ManageEngine Remote Access Plus security vulnerabilities

Zoho ManageEngine Remote Access Plus is a remote access solution from ZOHO, Inc. A security vulnerability exists in Zoho ManageEngine Remote Access Plus, which could be exploited by an attacker to allow guest users to view domain details such as the administrator's username and GUID...

CVE-2021-44554

Thinfinity VirtualUI before 3.0 allows a malicious actor to enumerate users registered in the OS Windows through the /changePassword URI. By accessing the vector, an attacker can determine if a username exists thanks to the message returned; it can be presented in different languages according to...

CVE-2020-5143

SonicOS SSLVPN login page allows a remote unauthenticated attacker to perform firewall management administrator username enumeration based on the server responses. This vulnerability affected SonicOS Gen 5 version 5.9.1.7, 5.9.1.13, Gen 6 version 6.5.4.7, 6.5.1.12, 6.0.5.3, SonicOSv 6.5.4.v and G...

CVE-2020-23980

DesignMasterEvents Conference management 1.0.0 allows SQL Injection via the username field on the administrator login page...

CVE-2020-8772

The InfiniteWP Client plugin before 1.9.4.5 for WordPress has a missing authorization check in iwpmmbsetrequest in init.php. Any attacker who knows the username of an administrator can log in...

CVE-2018-19078

The CVE-2018-19078 entry concerns Foscam Opticam i5 devices (System Firmware 1.5.2.11, Application Firmware 2.21.1.128). The issue is an information disclosure: the ONVIF media GetStreamUri response contains the administrator username and password. This is documented in CNVD-2018-22818 and echoed...