CVE-2012-3579

Symantec Messaging Gateway (SMG) versions before 10.0 are vulnerable to CVE-2012-3579 due to a hardcoded default SSH password on the support account, enabling remote login and privileged access via SSH. The issue is documented across multiple sources (SAINT advisories and OpenVAS/Nessus reference...

Symantec Messaging Gateway 9.5/9.5.1 SSH Default Password Security Bypass Vulnerability

Exploit for windows platform in category remote exploits This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework...

Symantec Messaging Gateway 9.5 Default SSH Password Vulnerability

This module exploits a default misconfiguration flaw on Symantec Messaging Gateway. The 'support' user has a known default password, which can be used to login to the SSH service, and gain privileged access from remote. Module Options msf use exploit/linux/ssh/symantec/smgssh msf undefinedsmgssh...

CVE-2012-3020

The Siemens Synco OZW Web Server devices OZW672., OZW772., and OZW775 with firmware before 4 have an unspecified default password, which makes it easier for remote attackers to obtain administrative access via a network session...

Default credentials

The Siemens Synco OZW Web Server devices OZW672., OZW772., and OZW775 with firmware before 4 have an unspecified default password, which makes it easier for remote attackers to obtain administrative access via a network session...

CVE-2012-3020

The Siemens Synco OZW Web Server devices OZW672., OZW772., and OZW775 with firmware before 4 have an unspecified default password, which makes it easier for remote attackers to obtain administrative access via a network session...

CVE-2012-3020

The CVE-2012-3020 issue affects Siemens Synco OZW Web Server devices OZW672., OZW772. , and OZW775 with firmware prior to 4. The root cause is an unspecified default password that allows remote administrative access over a network session. Impact described in multiple sources: unauthorized admin ...

CVE-2012-3951

The MySQL component in Plixer Scrutinizer aka Dell SonicWALL Scrutinizer 9.0.1.19899 and earlier has a default password of admin for the 1 scrutinizer and 2 scrutremote accounts, which allows remote attackers to execute arbitrary SQL commands via a TCP session...

Sql injection

The MySQL component in Plixer Scrutinizer aka Dell SonicWALL Scrutinizer 9.0.1.19899 and earlier has a default password of admin for the 1 scrutinizer and 2 scrutremote accounts, which allows remote attackers to execute arbitrary SQL commands via a TCP session...

CVE-2012-3951

CVE-2012-3951 concerns the MySQL component in Plixer Scrutinizer (also Dell SonicWALL Scrutinizer) 9.0.1.19899 and earlier, which ships with a default password for two accounts ( Scrutinizer and ScrutRemote). This default credentialing flaw enables remote attackers to log into MySQL over a TCP se...

CVE-2012-3951

The MySQL component in Plixer Scrutinizer aka Dell SonicWALL Scrutinizer 9.0.1.19899 and earlier has a default password of admin for the 1 scrutinizer and 2 scrutremote accounts, which allows remote attackers to execute arbitrary SQL commands via a TCP session...

A school/government CMS default background account password-loophole warning-the black bar safety net

Author:Exp1oITs Not a Oday Today went to zone-h submitted to the Black page, find foreign a hacking the Black page all the Chinese gov site. So see, a lot of government and school station there is this problem, should not back door. However, the government so do not mind let us Heavenly good...

YourArcadeScript 2.4beta default admin Vulnerablity

Exploit for php platform in category web applications Exploit Title: YourArcadeScript 2.4beta default admin Vulnerablity author : gilang vendor : www.yourarcadescript.com risk : high type : webapps / 0day php Date: 07-11-2012 Version:2.4beta google dork : YourArcadeScript 2.4beta Contact:...

School hassle-free voting system The use of 0day-vulnerability warning-the black bar safety net

Actually, it's not a 0day. Just a thought., recently bored. Disregard on the A5 looked under and found a voting system, rough look, with people a lot, so it is down under, study, the machine is set up to see, the code basically is nothing vulnerability, is my art bad bar, and transfer station, th...

Siemens Synco OZW Default Password

Overview Siemens has reported to ICS-CERT that a default password vulnerability exists in the Siemens Synco OZW Web Server device used for building automation systems. Siemens urges their customers to set a secure password on their device’s web interface. This vulnerability could be exploited...

MoroccoTel Box Default Open Telnet Password

Exploit for windows platform in category remote exploits a "vulnerability" was identified on MoroccoTel Boxes: a telnet server is running, open to the web, with a default password of admin or 123456 This critical vulnerability can affect the entire network of a Country. Solution: change the defau...

MoroccoTel Default Password

Hi, a "vulnerability" was identified on MoroccoTel Boxes: a telnet server is running, open to the web, with a default password of admin or 123456 This critical vulnerability can affect the entire network of a Country. Solution: change the default password account or modify the default firmware NB...

JEECMS the background of any file editing vulnerability and get a shell-vulnerability warning-the black bar safety net

JEECMS is based on java technology development, inheritance of its strong, stable, secure, efficient, cross-platform, and many other advantages · use of SpringMVC3+Spring3+Hibernate3+Freemarker mainstream technical architecture security is doing very perverted, when the site after the installatio...

Sagem F@ST 2604 Cross Site Request Forgery

================================================================================ || | | || || || |/ | || |/ | | | | | | | | | | | \ | | | | \ ================================================================================ Exploit Title: Sagem F@ST 2604 CSRF Vulnerability ADSL Router Author: KinG...

Default Password (nasadmin) for 'root' Account

The account 'root' on the remote host has the password 'nasadmin'. An attacker may leverage this issue to gain total control of the affected system. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. account = "root"; password = "nasadmin"; include'deprecatednasllevel.inc'; include'compat.inc';...