Netgear DGN1000B setup.cgi Remote Command Execution

Some Netgear Routers are vulnerable to authenticated OS Command injection. The vulnerability exists in the web interface, specifically in the setup.cgi component, when handling the TimeToLive parameter. Default credentials are always a good starting point, admin/admin or admin/password could be a...

Linksys E1500/E2500 apply.cgi Remote Command Injection

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3 'Linksys E1500/E2500 apply.cgi Remote...

Linksys E1500/E2500 apply.cgi Remote Command Injection Vulnerability

Some Linksys Routers are vulnerable to an authenticated OS command injection. Default credentials for the web interface are admin/admin or admin/password. Since it is a blind os command injection vulnerability, there is no output for the executed command when using the cmd generic payload. A ping...

Default credentials

The v1 API in OpenStack Glance Essex 2012.1, Folsom 2012.2, and Grizzly, when using the single-tenant Swift or S3 store, reports the location field, which allows remote authenticated users to obtain the operator's backend credentials via a request for a cached image...

Exposed Devices Used as Botnet to Scan Internet

A controversial Internet scanning project has come under fire for illegally accessing and running code on remote machines. The Internet Census 2012 project, revealed Sunday in a post to Seclists.org, discovered 420,000 embedded devices accessible using default credentials. The unnamed researcher...

Aastra OpenCom 1000 Default Credentials (HTTP)

The remote Aastra OpenCom 1000 is using known default credentials. Copyright C 2013 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free...

Attacks on SCADA, ICS Honeypots Modified Critical Operations

With antiquated gear running the country’s industrial control systems that oversee critical infrastructure, it’s no shock attackers targeting SCADA networks do their fair share of reconnaissance looking for weak spots in that equipment. A researcher decided to put that theory to a practical test...

Linksys E1500/E2500 Remote Command Execution

Some Linksys Routers are vulnerable to an authenticated OS command injection. Default credentials for the web interface are admin/admin or admin/password. Since it is a blind os command injection vulnerability, there is no output for the executed command. A ping command against a controlled syste...

Dell DRAC / iDRAC Default Credentials (HTTP)

The remote Dell Remote Access Controller DRAC / Integrated Remote Access Controller iDRAC is using known default credentials for the HTTP login. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective rig...

lanmp集成wdcp一键安装包存在默认管理员账号密码

简要描述： 安装lanmp一键安装包之后存在一个默认的管理员账号密码，用户在安装以后，没有及时的更改端口与密码导致被入侵！ 详细说明： 用户在安装lanmp一键安装包以后，没有及时的更改端口与密码！并且其平台自动生成默认首页，根据关键词“lanmpwdcp” 即可在百度找到25,700个相关数据，其中一半以上即可直接用默认的账号密码（admin wdlinux.cn）直接登陆，后台权限甚大，可直接入侵服务器! 漏洞证明：...

Schneider Electric Accutech Manager Default Credentials(SCADA)

Binary data 6732.prm...

Netgear GS110TP Default Credentials (HTTP)

The remote Netgear GS110TP has the default password SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

HP Diagnostics Server Default Credentials

Nessus was able to login to the HP Diagnostics Server web interface using default, known credentials. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid64474; scriptversion"1.6";...

Xerox Printer Default / No Credentials (HTTP)

The remote Xerox Printer is using default or no credentials for the HTTP based interface. Copyright C 2013 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later Th...

Barracuda Appliances Default Credentials

The account 'product' or 'emailswitch' is using a default password. A remote, unauthenticated attacker could exploit this to log in as an unprivileged user. After logging in, an attacker can log into the local MySQL server as root without a password. Additionally, getting access to a root shell i...

ManageEngine AssetExplorer Default Administrator Credentials

The ManageEngine AssetExplorer application running on the remote host uses a default set of credentials 'administrator' / 'administrator' to control access to its management interface. A remote attacker can exploit this to gain administrative access to the application. %NASLMINLEVEL 70300 C Tenab...

Default credentials

Pulp in Red Hat CloudForms before 1.1 uses world-readable permissions for pulp.conf, which allows local users to read the administrative password by reading this file...

YeaLink IP Phone 9.70.0.100 CSRF / Default Credentials

+--------------------------------------------------------------------------------------------------------------------------------+ Exploit Title : YeaLink IP Phone SIP-TxxP firmware 0x90.nl Software link : http://yealink.com/SupportDownloadfilesdetail.aspx?ProductsID=64&CateID=187&flag=142 Vendor...

ELBA 5 5.5.0 SQL Injection / Default Credentials

SEC Consult Vulnerability Lab Security Advisory ======================================================================= title: Multiple Vulnerabilities in ELBA5 product: ELBA 5 vulnerable version: 5.5.0 R00006 build 0796 fixed version: 5.6.0 R3 impact: Medium homepage: http://www.elba.at/ found:...

ManageEngine Security Manager Plus Default Administrator Credentials

The remote ManageEngine Security Manager Plus install uses a default set of credentials 'admin' / 'admin' to control access to its management interface. With this information, an attacker could gain administrative access to the application. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...