PolyVision RoomWizard insecurely stores Sync Connector Active Directory credentials and uses default administrative password

Overview The PolyVision RoomWizard web based scheduling system with touch screen display contains two vulnerabilities that allow an unauthorized user to access the device console and Sync Connector Active Directory credentials. Description The PolyVision RoomWizard is a touch screen scheduling...

RoomWizard Credential Disclosure

% Advisory Name: RoomWizard Default Password and Sync Connector Credential Leak % Date: 2010-08-16 % Appliance/SW: RoomWizard Web-based room scheduling system % Versions: Tested on Firmware 3.2.3 Model RW10 % Author: Sean Lam % Vendor Status: Vendor Contacted % CVE Candidate: CVE-2010-0214 %...

HP StorageWorks MSA P2000 Hidden 'admin' User Default Credentials

The remote device appears to be a HP StorageWorks MSA P2000 series. There is a hidden, undocumented account named 'admin' secured with a default password of '!admin'. A remote attacker can exploit this to gain privileged access to the management interface. TRUSTED...

CVE-2010-4115

HP StorageWorks Modular Smart Array P2000 G3 firmware TS100R011, TS100R025, TS100P002, TS200R005, TS201R014, and TS201R015 installs an undocumented admin account with a default "!admin" password, which allows remote attackers to gain privileges...

CVE-2010-4115

HP StorageWorks Modular Smart Array P2000 G3 firmware TS100R011, TS100R025, TS100P002, TS200R005, TS201R014, and TS201R015 installs an undocumented admin account with a default "!admin" password, which allows remote attackers to gain privileges...

CVE-2010-4115

CVE-2010-4115 affects HP StorageWorks Modular Smart Array P2000 G3 firmware TS100R011/025, TS100P002, TS200R005, TS201R014/015. It installs an undocumented admin account with the default password !admin, enabling remote attackers to gain privileged access to the management interface. HP’s securit...

W78cms website management system 0day-vulnerability warning-the black bar safety net

The vulnerability is simple, appear in the editor above, the prawns should all know: Keywords: inurl:ShopMore. asp? id Visit this address http://hackqing.com/nbwebshell/admin/Editor/asp/upload.asp?action=save&type=image&style=popup&cusdir=Hack. the asp Visit this address can build a Hack. ASP...

CVE-2009-5021

Cobbler before 1.6.1 does not properly determine whether an installation has the default password, which makes it easier for attackers to obtain access by using this password...

CVE-2009-5021

Cobbler before 1.6.1 does not properly determine whether an installation has the default password, which makes it easier for attackers to obtain access by using this password...

CVE-2009-5021

CVE-2009-5021 affects Cobbler prior to 1.6.1. The advisory states that Cobbler does not properly determine whether an installation has the default password, enabling an attacker to gain access by using that password. According to the NVD entry, this can impact confidentiality, integrity, and avai...

CVE-2009-5021

Cobbler before 1.6.1 does not properly determine whether an installation has the default password, which makes it easier for attackers to obtain access by using this password...

Linksys Routers - Cross-Site Request Forgery

It seems to be fairly well known that there are multiple unpatched CSRF vulnerabilities in the administration interfaces for various Linksys routers. Since the initial reports of these are from a few years ago, and since some exploits are available, I have written additional proof of concept...

Linksys Router Cross Site Request Forgery

It seems to be fairly well known that there are multiple unpatched CSRF vulnerabilities in the administration interfaces for various Linksys routers. Since the initial reports of these are from a few years ago, and since some exploits are available, I have written additional proof of concept...

CVE-2010-3038

Cisco Unified Videoconferencing UVC System 5110 and 5115, when the Linux operating system is used, has a default password for the 1 root, 2 cs, and 3 develop accounts, which makes it easier for remote attackers to obtain access via the a FTP or b SSH daemon, aka Bug ID CSCti54008...

Default credentials

Cisco Unified Videoconferencing UVC System 5110 and 5115, when the Linux operating system is used, has a default password for the 1 root, 2 cs, and 3 develop accounts, which makes it easier for remote attackers to obtain access via the a FTP or b SSH daemon, aka Bug ID CSCti54008...

CVE-2010-3038

Cisco Unified Videoconferencing UVC System 5110 and 5115, when the Linux operating system is used, has a default password for the 1 root, 2 cs, and 3 develop accounts, which makes it easier for remote attackers to obtain access via the a FTP or b SSH daemon, aka Bug ID CSCti54008...

CVE-2010-3038

CVE-2010-3038 affects Cisco Unified Videoconferencing (UVC) Linux-based systems (5110/5115). The vulnerability arises from hard-coded credentials: root, cs, and develop accounts with login shells and passwords that cannot be changed or deleted. It enables remote attackers to obtain access via FTP...

CVE-2010-4233

The Linux installation on the Camtron CMNC-200 Full HD IP Camera and TecVoz CMNC-200 Megapixel IP Camera with firmware 1.102A-008 has a default password of m for the root account, and a default password of merlin for the mg3500 account, which makes it easier for remote attackers to obtain access...

Default credentials

The Linux installation on the Camtron CMNC-200 Full HD IP Camera and TecVoz CMNC-200 Megapixel IP Camera with firmware 1.102A-008 has a default password of m for the root account, and a default password of merlin for the mg3500 account, which makes it easier for remote attackers to obtain access...

CVE-2010-4233

The Linux installation on the Camtron CMNC-200 Full HD IP Camera and TecVoz CMNC-200 Megapixel IP Camera with firmware 1.102A-008 has a default password of m for the root account, and a default password of merlin for the mg3500 account, which makes it easier for remote attackers to obtain access...