RemotePasswordWiFi

RemotePasswordWiFi Obtén la contraseña en routers remotos gracias a las contraseñas por defecto. Routers compatibles: Thomson Thechnicolor en los próximos días: bee cisco...

Genzai

Genzai IoT 安全工具包 描述 • 特性 • 安装与使用 • 致谢 • 联系我 描述 Genzai 帮助您识别单个或一组输入目标上的物联网（IoT）相关仪表板，并进一步扫描它们以发现默认密码问题以及基于路径和版本的潜在漏洞。 例如，一个可通过互联网访问的家居自动化设备管理面板。该工具首先根据 signatures.json 中的一组签名对 IoT 产品进行指纹识别，然后根据识别出的产品及其数据库（vendor-logins.json 和 vendor-vulns.json）中的相关模板，扫描是否存在类似 admin:admin 的厂商特定默认密码，并检查潜在的漏洞。 Genzai...

phishlulz

PhishLulz PhishLulz is a Ruby toolset aimed at automating Phishing activities. When you start a phishing campaign, a dedicated Amazon EC2 Debian 7 instance is spawned. The VM comes with various open source tools that have been glued together. The two main components are: PhishingFrenzy...

TP-Link-defaults

TP-Link-defaults 用于尝试一些 TP-Link 热点默认密码的 Python 脚本 灵感来源于 用法 usage: scan.py -h -p -t TIMEOUT Python script for trying default passwords for some TP-Link Hotspots optional arguments: -h, --help show this help message and exit -p, --print-all print all found ssid's -t TIMEOUT, --timeout TIMEOUT FOR...

siemframework

SIEMS FRAMEWORK MultiSIEM 模块化 Python3 攻击框架 ElevenPaths https://www.elevenpaths.com/ 用法: python3 ./siemsframework.py 简介 SIEM 是网络安全领域日益常用的防御性工具，尤其是大型企业和那些需要监控高度关键系统与网络的公司。然而，从攻击者的角度来看，SIEM 在企业网络中对系统和账户所拥有的权限是极高的。此外，对 SIEM 的管理员访问权限可能被用来在安装该 SIEM 的服务器上执行代码，有时也会影响客户端机器，因为 SIEM 会收集来自 Active Directory...

TeamFiltration Campaign Compromises Seven Microsoft 365 Accounts Using Default Passwords

Cybersecurity researchers have disclosed details of an active TeamFiltration campaign codenamed UNKCondorFiltration that has targeted over 5,700 accounts across 28 Microsoft 365 tenants. According to Proofpoint, the activity has primarily focused on Chilean retail and financial institutions. It...

CVE-2026-75896

Use of Hard-coded Credentials vulnerability in TÜBİTAK BİLGEM Software Technologies Research Institute Liderahenk allows Try Common or Default Usernames and Passwords. This issue affects Liderahenk: before 3.5.5...

CVE-2026-75896 Use of Hard-coded LDAP Credentials in TÜBİTAK BİLGEM's Liderahenk

Use of Hard-coded Credentials vulnerability in TÜBİTAK BİLGEM Software Technologies Research Institute Liderahenk allows Try Common or Default Usernames and Passwords. This issue affects Liderahenk: before 3.5.5...

Security Bulletin: IBM Storage Protect for Space Management is affected by weaker than expected security in IBM WebSphere Application Server Liberty (CVE-2025-14917)

Summary IBM Storage Protect for Space Management uses IBM WebSphere Application Server Liberty as part of its web application runtime. A vulnerability in IBM WebSphere Application Server Liberty could provide weaker than expected security when administering security settings. IBM Storage Protect...

VPS.org one-click deployment templates contain multiple vulnerabilities

Overview VPS.org's one-click deployment templates provision services with default passwords and predefined network bindings instead of generating randomized secrets or applying per-deployment hardening measures. Description VPS.org is a cloud and virtual private server hosting provider that offer...

EUVD-2026-44574

In Ciena's Navigator Network Control Suite NCS and Manage Control Plan MCP, there are hidden system accounts used for internal software operations. Some of these accounts have default passwords that may be predictable. While these accounts have very limited permissions on their own, an attacker...

CVE-2026-5269

In Ciena's Navigator Network Control Suite NCS and Manage Control Plan MCP, there are hidden system accounts used for internal software operations. Some of these accounts have default passwords that may be predictable. While these accounts have very limited permissions on their own, an attacker...

CVE-2026-5269

Ciena's Navigator Network Control Suite (NCS) and Manage Control Plan (MCP) contain hidden system accounts used for internal software operations. These accounts may utilize predictable default passwords . Although these accounts possess limited permissions independently, an attacker could exploit...

CVE-2026-5269 Navigator NCS and MCP System Accounts with Default Passwords

In Ciena's Navigator Network Control Suite NCS and Manage Control Plan MCP, there are hidden system accounts used for internal software operations. Some of these accounts have default passwords that may be predictable. While these accounts have very limited permissions on their own, an attacker...

CVE-2026-5269 Navigator NCS and MCP System Accounts with Default Passwords

In Ciena's Navigator Network Control Suite NCS and Manage Control Plan MCP, there are hidden system accounts used for internal software operations. Some of these accounts have default passwords that may be predictable. While these accounts have very limited permissions on their own, an attacker...

CVE-2026-5269

In Ciena's Navigator Network Control Suite NCS and Manage Control Plan MCP, there are hidden system accounts used for internal software operations. Some of these accounts have default passwords that may be predictable. While these accounts have very limited permissions on their own, an attacker...

PT-2026-58864

In Ciena's Navigator Network Control Suite NCS and Manage Control Plan MCP, there are hidden system accounts used for internal software operations. Some of these accounts have default passwords that may be predictable. While these accounts have very limited permissions on their own, an attacker...

RustDuck Botnet Rebuilds in Rust to Hijack Routers and Servers for DDoS

A new two-stage malware family called RustDuck is hijacking home routers, IP cameras, Android boxes, and poorly secured servers, then stitching them into a network built to knock websites and online services offline. Researchers at QiAnXin's XLab have tracked it since February 2026, and say the...

CVE-2025-36221

IBM Cloud Pak for Data System - Cyclops 11.3.0.2 through Interim Fix 002 IBM Cloud Pak for Data System uses default passwords default passwords from the manufacturing process for use during the installation process, which could allow an attacker to bypass authentication...

CVE-2026-7365

IBM Operations Analytics - Log Analysis and IBM SmartCloud Analytics - Log Analysis uses default passwords default passwords from the manufacturing process for use during the installation process, which could allow an attacker to bypass authentication...