D-Link DSL-6850U Router Remote Command Execution Vulnerability

The D-Link DSL-6850U is a wireless router product from AUO D-Link. The D-Link DSL-6850U router is vulnerable to remote command execution. As the router has a remote web management service enabled by default, a default credential support:support exists for this service and cannot be disabled. An...

Default credentials

pysaml2 version 4.4.0 and older accept any password when run with python optimizations enabled. This allows attackers to log in as any user without knowing their password...

Default credentials

Passbolt API version 1.6.4 and older are vulnerable to a XSS in the url field on the password workspace...

D-Link DSL-6850U Multiple Vulnerabilities

Vulnerabilities Summary The following advisory describes two 2 vulnerabilities found in D-Link DSL-6850U versions BZ1.00.01 – BZ1.00.09. D-Link DSL-6850U is a router “manufactured by D-Link for Bezeq in Israel” The vulnerabilities found are: Default Credentials Remote Command Execution Credit An...

Default credentials

PHP Scripts Mall Muslim Matrimonial Script allows arbitrary file upload via admin/mydetailsedit.php...

Default credentials

Readymade Job Site Script has XSS via the keyword parameter to the /job URI...

Xbox 360 Aurora 0.6b Default Credentials / FTP BruteForce Exploit

Exploit for linux platform in category remote exploits Exploit Title: XBOX 360 Aurora 0.6b Default Credentials / FTP BruteForce Date: 20/12/2017 Exploit Author: Daniel Godoy Vendor Homepage: http://phoenix.xboxunity.net//news Tested on: XBOX 360 GREETZ: Iker Legorreta, RemoteExecution Team...

CVE-2017-3184

ACTi cameras including the D, B, I, and E series using firmware version A1D-500-V6.11.31-AC fail to properly restrict access to the factory reset page. An unauthenticated, remote attacker can exploit this vulnerability by directly accessing the...

CVE-2017-3184

ACTi cameras including the D, B, I, and E series using firmware version A1D-500-V6.11.31-AC fail to properly restrict access to the factory reset page. An unauthenticated, remote attacker can exploit this vulnerability by directly accessing the...

CVE-2017-3186

ACTi cameras including the D, B, I, and E series using firmware version A1D-500-V6.11.31-AC use non-random default credentials across all devices. A remote attacker can take complete control of a device using default admin credentials...

Default credentials

ACTi cameras including the D, B, I, and E series using firmware version A1D-500-V6.11.31-AC fail to properly restrict access to the factory reset page. An unauthenticated, remote attacker can exploit this vulnerability by directly accessing the...

Default credentials

ACTi cameras including the D, B, I, and E series using firmware version A1D-500-V6.11.31-AC use non-random default credentials across all devices. A remote attacker can take complete control of a device using default admin credentials...

CVE-2017-3186

ACTi cameras including the D, B, I, and E series using firmware version A1D-500-V6.11.31-AC use non-random default credentials across all devices. A remote attacker can take complete control of a device using default admin credentials...

CVE-2017-3186

CVE-2017-3186 affects ACTi cameras (D, B, I, E series) with firmware A1D-500-V6.11.31-AC, which uses non-random default admin credentials across all devices, enabling a remote attacker to take complete control of the device. Related issues include CVE-2017-3184 (factory-reset access) and CVE-2017...

CVE-2017-3184

ACTi cameras including the D, B, I, and E series using firmware version A1D-500-V6.11.31-AC fail to properly restrict access to the factory reset page. An unauthenticated, remote attacker can exploit this vulnerability by directly accessing the...

CVE-2017-3184

ACTi D/B/I/E series cameras with firmware A1D-500-V6.11.31-AC expose a factory-reset page via http://x.x.x.x/setup/setup_maintain_firmware-default.html, allowing unauthenticated, remote trigger of a factory reset and potential use of default credentials. This is linked to CVE-2017-3186, which sta...

CERIO 11nbg 2.4Ghz High Power Wireless Router (pekcmd) Rootshell Backdoors

Summary CERIO's DT-300N A4 eXtreme Power 11n 2.4Ghz 2x2 High Power Wireless Access Point with built-in 10dBi patch antennas and also supports broadband wireless routing. DT-300N A4's wireless High Power design enhances the range and stability of the device's wireless signal in office and home...

Polycom HDX Default Credentials (Telnet)

The Polycom device has default telnet credentials or passwordless login. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Default credentials

An issue was discovered in the default FilterScheduler in OpenStack Nova 16.0.3. By repeatedly rebuilding an instance with new images, an authenticated user may consume untracked resources on a hypervisor host leading to a denial of service, aka doubled resource allocations. This regression was...

NETGEAR ProSAFE GS108T Default Credentials (HTTP)

The remote NETGEAR ProSAFE GS108E device has the default password SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPEPREFIX = "cpe:/o:netgear:"...