NAPro has a backdoor vulnerability

NAPro is a PLC programming software developed by Nanda Aotuo Technology Jiangsu Co. NAPro has a backdoor vulnerability that can be exploited by an attacker to log into a PLC and perform illegal operations...

PT-2019-2989 · Webmin · Webmin

Name of the Vulnerable Software and Affected Versions: Webmin versions 1.882 through 1.921 Webmin versions 1.890 through 1.920 Webmin versions prior to 1.930 Description: A backdoor was discovered in Webmin, a web-based system administration interface for UNIX-like operating systems. The backdoor...

CVE-2018-18473

A hidden backdoor on PATLITE NH-FB Series devices with firmware version 1.45 or earlier, NH-FV Series devices with firmware version 1.10 or earlier, and NBM Series devices with firmware version 1.09 or earlier allow attackers to enable an SSH daemon via the "kankichi" or "kamiyo4" password to the...

CVE-2018-1150

NUUO's NVRMini2 3.8.0 and below contains a backdoor that would allow an unauthenticated remote attacker to take over user accounts if the file /tmp/moses exists...

Backdoor Vulnerability in NUUO NVRMini2

NUUO is one of the surveillance solution providers and NUUO NVRMini 2 is the NVR solution with NAS functionality. A backdoor vulnerability exists in NUUO NVRMini 2. When a specific file /tmp/moses/ exists in the file system of the target device, the backdoor will be opened, and any unauthorized...

Design/Logic Flaw

Soar Labs Soar Coin version up to and including git commit 4a2aa71ee21014e2880a3f7aad11091ed6ad434f latest release as of Sept 2017 contains an intentional backdoor vulnerability in the function zerofeetransaction that can result in theft of Soar Coins by the "onlycentralAccount" Soar Labs after...

CVE-2018-1000203

Soar Labs Soar Coin version up to and including git commit 4a2aa71ee21014e2880a3f7aad11091ed6ad434f latest release as of Sept 2017 contains an intentional backdoor vulnerability in the function zerofeetransaction that can result in theft of Soar Coins by the "onlycentralAccount" Soar Labs after...

CVE-2018-1000203

The CVE-2018-1000203 entry concerns Soar Labs Soar Coin, where versions up to git commit 4a2aa71ee21014e2880a3f7aad11091ed6ad434f (latest as of Sept 2017) contain an intentional backdoor in zero_fee_transaction() that can enable theft of Soar Coin by the account labeled "onlycentralAccount" after...

CVE-2018-1000203

Soar Labs Soar Coin version up to and including git commit 4a2aa71ee21014e2880a3f7aad11091ed6ad434f latest release as of Sept 2017 contains an intentional backdoor vulnerability in the function zerofeetransaction that can result in theft of Soar Coins by the "onlycentralAccount" Soar Labs after...

Improper access control

On D-Link DIR-550A and DIR-604M devices through v2.10KR, a malicious user can use a default TELNET account to get unauthorized access to vulnerable devices, aka a backdoor access vulnerability...

PT-2018-3911 · D Link · D-Link Di-604 +1

Name of the Vulnerable Software and Affected Versions: D-Link DIR-550A versions through v2.10KR D-Link DIR-604M versions through v2.10KR Description: The issue is related to a backdoor access vulnerability, allowing a malicious user to gain unauthorized access to vulnerable devices using a defaul...

WordPress Captcha Plugin Backdoor

A backdoor vulnerability exists in WordPress Captcha plugin. Successful exploitation of this vulnerability allows remote attackers to change the effected site's content...

CVE-2017-12084

Circle with Disney firmware 2.0.1 has a backdoor via its remote control (rclient) functionality. CVE-2017-12084 can be triggered by a specific set of network packets to remotely start an SSH server (Dropbear) on the device, creating a persistent backdoor. Exploitation path involves the Apid remot...

Dahua IoT Devices Backdoor Unauthorized Access

An Unauthorized Access Vulnerability exists in Dahua devices. Successful exploitation of this vulnerability could allow a remote attacker to gain administrator level access on the affected device...

Authentication Bypass, Potential Backdoors Plague Old WiMAX Routers

WiMAX routers manufactured by several companies, including Huawei and ZyXEL, are vulnerable to an authentication bypass that could let an attacker change the password of the admin user, gain access to the device, or the network behind it. Stefan Viehböck, a researcher with SEC Consult Vulnerabili...

ManageEngine ServiceDesk Plus 9.0 Authentication Bypass

Title: ManageEngine ServiceDesk Plus Application Compromise Date: 19 May 2017 Researcher: Steven Lackey ByteM3 Product: ServiceDesk Plus http://www.manageengine.com/ Affected Version: 9.0 Other versions could also be affected Fixed Version: Service Pack 9241 a Build 9.2 Vulnerability Impact: High...

Backdoor Vulnerability in S-CMS

S-CMS is a corporate website building system developed by Zibo Shining Network Technology Co. S-CMS there is a backdoor vulnerability, the reason for this vulnerability is /conn/function.asp file encrypted sentence can be deformed into a Trojan horse caused by the password is the 32-bit md5 value...

Backdoor vulnerability in lvyecms backend

LvyeCMS is a content management system developed based on ThinkPHP framework, using an independent grouping approach. Backdoor vulnerability exists in lvyecms background add module page at the function . Allow attackers to exploit the vulnerability can be obtained server privileges...

Backdoor Vulnerability in Wireless IP Camera (P2P) WIFICAM

Wireless IP Camera P2P WIFICAM is a wireless IP camera. Wireless IP Camera P2P WIFICAM is vulnerable to a backdoor vulnerability. It runs Telnet by default, which can be accessed by an attacker logging in with the following password: root:$1$ybdHbPDn$ii9aEIFNiolBbM9QxW9mr0:0:0::/root:/bin/sh...

WePresent WiPG-1500 Backdoor Vulnerability

WePresent WiPG-1500 is a new gateway by AWIND, WiPG-1500 connects multi-platform devices Windows / Mac / Pad / Smartphone / AirPad for interactive presentations by supporting finger touch technology and virtual whiteboard. WePresent WiPG-1500 has a backdoor vulnerability. An attacker can connect ...