Apache Tomcat Manager Authenticated Upload Code Execution

This module can be used to execute a payload on Apache Tomcat servers that have an exposed "manager" application. The payload is uploaded as a WAR archive containing a jsp application using a POST request against the /manager/html/upload component. NOTE: The compatible payload sets vary based on...

100,000 Refrigerators and other home appliances hacked to perform cyber attack

Have you given shed to Zombies in your house? No???? May be you have no idea about it. After Computers, Servers, Routers, Mobiles, Tablets…. Now its turn of your home appliances to be a weapon or a victim of cyber war. Recently Security Researchers from Proofpoint found more than 100,000 Smart TV...

HD Moore, Project Sonar Crowdsources Vulnerability Analysis

The state of embedded device security is poor, and there hasn’t been much in the way of discussion to the contrary. It’s well established that vendors skimp on security, selling for example, routers and other networking gear protected only by default passwords, or other critical devices engineere...

ASUS Home Routers Vulnerable to Remote Attacks

Asus home routers are open to a number of potential remote attacks because of vulnerabilities in the AiCloud service bundled with the hardware. Security researcher Kyle Lovett posted on Sunday to the Full Disclosure mailing list today a follow up to a June disclosure of a directory traversal bug ...

IPMI Vulnerabilities on BMCs expose servers to attack

Baseboard management controllers, embedded computers present in most servers, are vulnerable to a half dozen critical vulnerabilities that could enable an attacker to gain remote control over the host machine. The vulnerabilities are in the Intelligent Platform Management Interface IPMI protocol...

ICS, SCADA Attacks Targeted and Disruptive

Honeypots and honeynets have long been used as enticements to lure hackers into a false network in order to study attacks. While long a favorite of many high-end enterprises and security researchers studying attacks against traditional IT infrastructures, a number of industrial control system...

Cracking iPhone Hotspot password in 50 Seconds

The ability to turn your iPhone into a Wi-Fi hotspot is a fantastically useful little tool in and of itself. When setting up a personal hotspot on their iPad or iPhone, users have the option of allowing iOS to automatically generate a password. According to a new study by Researchers at the...

CVE-2012-4879

The Linux Console on the WAGO I/O System 758 model 758-870, 758-874, 758-875, and 758-876 Industrial PC IPC devices has a default password of wago for the 1 root and 2 admin accounts, 3 a default password of user for the user account, and 4 a default password of guest for the guest account, which...

CVE-2012-3013

CVE-2012-3013 affects WAGO I/O System 758 family Industrial PCs (models 758-870, 758-874, 758-875, 758-876). The issue is caused by default passwords for unspecified Web-Based Management accounts, enabling remote attackers to obtain administrative access over TCP. Connected Red Hat records refere...

CVE-2012-4879

The Linux Console on the WAGO I/O System 758 model 758-870, 758-874, 758-875, and 758-876 Industrial PC IPC devices has a default password of wago for the 1 root and 2 admin accounts, 3 a default password of user for the user account, and 4 a default password of guest for the guest account, which...

正方教务管理系统web端补考成绩录入漏洞

简要描述： web端成绩录入可绕过密码验证录入补考成绩。 详细说明： 此漏洞与 WooYun: 正方教务管理系统web端成绩录入漏洞 类似。 web端在进行成绩录入时可以通过直接将动态页面从jscjmm.aspx修改为xfjsbkcjlr.aspx进行绕过，只要具有教师的登录权限，不需要验证成绩录入密码即可直接进入成绩的录入和提交页面。 我写了一个脚本用于测试我所在学校的教师账户，发现有几百个教师账户仍旧使用默认账户密码，如果通过此漏洞将造成巨大影响，我也准备将所收集的资料上报校方处理。 漏洞证明： 此漏洞与 WooYun: 正方教务管理系统web端成绩录入漏洞 类似，就不再截图证明了。...

CVE-2012-1844

The Quantum Scalar i500 tape library with firmware before i7.0.3 604G.GS00100, also distributed as the Dell ML6000 tape library with firmware before A20-00 590G.GS00100 and the IBM TS3310 tape library with firmware before R6C 606G.GS001, uses default passwords for unspecified user accounts, which...

Default credentials

The Quantum Scalar i500 tape library with firmware before i7.0.3 604G.GS00100, also distributed as the Dell ML6000 tape library with firmware before A20-00 590G.GS00100 and the IBM TS3310 tape library with firmware before R6C 606G.GS001, uses default passwords for unspecified user accounts, which...

CVE-2012-1844

The Quantum Scalar i500 tape library with firmware before i7.0.3 604G.GS00100, also distributed as the Dell ML6000 tape library with firmware before A20-00 590G.GS00100 and the IBM TS3310 tape library with firmware before R6C 606G.GS001, uses default passwords for unspecified user accounts, which...

CVE-2012-1844

CVE-2012-1844 affects Quantum Scalar i500, Dell ML6000, and IBM TS3310 tape libraries. Firmware before i7.0.3 (604G.GS00100) for i500, before A20-00 (590G.GS00100) for ML6000, and before R6C (606G.GS001) for TS3310 contains pre-configured default accounts with fixed passwords, enabling remote acc...

KLA10394 Multiple vulnerabilities in Siemens

Multiple critical vulnerabilities have been found in Siemens products. Malicious users can exploit these vulnerabilities to read & modify arbitrary files, cause denial of service, execute arbitrary code, bypass authentication, obtain access and inject arbitrary HTTP headers. Below is a complete...

Update: Hacking Group TeaMp0isoN Claims Breach of T-Mobile

The hacking group TeaMp0isoN claims to have compromised Web servers used by T-Mobile, and absconded with account information for company employees, including members of T-Mobile’s media team. The group used a post on its official Twitter account taking responsibility for the attack, which targete...

Siemens Simatic HMI Authentication Vulnerabilities

Overview ICS-CERT is aware of a public report by independent security researchers Billy Rios and Terry McCorkle concerning authentication bypass vulnerabilities affecting Siemens SIMATIC HMI products which are supervisory control and data acquisition/human-machine interface SCADA/HMI products...

SSH Brute Force Logins With Default Credentials

A number of known default credentials are tried for the login via the SSH protocol. As this VT might run into a timeout the actual reporting of this vulnerability takes place in the VT SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, a...

Attackers Find Point-of-Sale Software an Easy Target

While most consumers worry about their credit card or debit card numbers or other valuable data being stolen from their home computers or leaked via a data breach at their banks, a new report shows that the vast majority of attacks that harvest this sensitive data actually target weak software on...