Exploit for CVE-2024-54761

BigAnt Office Messenger 5.6.06 RCE via SQL Injection SQL injec...

CVE-2024-50588

An unauthenticated attacker with access to the local network of the medical office can use known default credentials to gain remote DBA access to the Elefant Firebird database. The data in the database includes patient data and login credentials among other sensitive data. In addition, this enabl...

CVE-2024-50588 Unprotected Exposed Firebird Database with default credentials

An unauthenticated attacker with access to the local network of the medical office can use known default credentials to gain remote DBA access to the Elefant Firebird database. The data in the database includes patient data and login credentials among other sensitive data. In addition, this enabl...

CVE-2024-50588

CVE-2024-50588 involves an unauthenticated attacker on the local network who can exploit known default credentials to gain remote DBA access to the Elefant Firebird database. The database stores sensitive data including patient information and login credentials. This access enables the attacker t...

CVE-2024-50588 Unprotected Exposed Firebird Database with default credentials

An unauthenticated attacker with access to the local network of the medical office can use known default credentials to gain remote DBA access to the Elefant Firebird database. The data in the database includes patient data and login credentials among other sensitive data. In addition, this enabl...

PT-2024-34342 · Unknown · Elefant Firebird

Name of the Vulnerable Software and Affected Versions: Elefant Firebird database versions prior to 24.03.03 Description: An unauthenticated attacker with access to the local network of a medical office can use known default credentials to gain remote DBA access to the Elefant Firebird database...

SUSE CVE-2024-9486

A security issue was discovered in the Kubernetes Image Builder versions = v0.1.37 where default credentials are enabled during the image build process. Virtual machine images built using the Proxmox provider do not disable these default credentials, and nodes using the resulting images may be...

PT-2024-7891 · Futurenet · Futurenet Nxr Series Routers

Name of the Vulnerable Software and Affected Versions: FutureNet NXR series routers affected versions not specified Description: The issue concerns the unexpected enabling of REST-APIs in the initial configuration of FutureNet NXR series routers, provided that either http-server GUI or Web...

CVE-2024-48271

D-Link DSL6740C v6.TR069.20211230 was discovered to use insecure default credentials for Administrator access, possibly allowing attackers to bypass authentication and escalate privileges on the device via a bruteforce attack...

CVE-2024-48271

D-Link DSL6740C v6.TR069.20211230 was discovered to use insecure default credentials for Administrator access, possibly allowing attackers to bypass authentication and escalate privileges on the device via a bruteforce attack...

D-Link DSL6740C 安全漏洞

The D-Link DSL6740C is a wireless VDSL router from China AUO D-Link. A security vulnerability exists in the D-Link DSL6740C version v6.TR069.20211230, which originates from administrator access using insecure default credentials. An attacker exploiting this vulnerability could bypass authenticati...

CVE-2024-48271

Summary: CVE-2024-48271 affects the D-Link DSL-6740C family (v6.TR069.20211230). The issue stems from insecure default credentials used for the Administrator account, which could let an attacker bypass authentication and achieve privilege escalation by brute-forcing. This is supported by multiple...

CVE-2024-6245

Use of Default Credentials vulnerability in Maruti Suzuki SmartPlay on Linux Infotainment Hub modules allows attacker to try common or default usernames and passwords.The issue was detected on a 2022 Maruti Suzuki Brezza in India Market. This issue affects SmartPlay: 66T0.05.50...

CVE-2024-6245 Default Credentials in ssh service for SmartPlay in Maruti Suzuki

Use of Default Credentials vulnerability in Maruti Suzuki SmartPlay on Linux Infotainment Hub modules allows attacker to try common or default usernames and passwords.The issue was detected on a 2022 Maruti Suzuki Brezza in India Market. This issue affects SmartPlay: 66T0.05.50...

CVE-2024-6245 Default Credentials in ssh service for SmartPlay in Maruti Suzuki

Use of Default Credentials vulnerability in Maruti Suzuki SmartPlay on Linux Infotainment Hub modules allows attacker to try common or default usernames and passwords.The issue was detected on a 2022 Maruti Suzuki Brezza in India Market. This issue affects SmartPlay: 66T0.05.50...

CVE-2024-6245

CVE-2024-6245 applies to Maruti Suzuki SmartPlay (Linux Infotainment Hub) with firmware 66T0.05.50. The issue is use of default credentials that lets an attacker try common or default usernames and passwords, detected on a 2022 Brezza in India. CVSSv3.1 score is 7.4 (HIGH) with Adjacent attack ve...

Maruti Suzuki SmartPlay 安全漏洞

Maruti Suzuki SmartPlay is an infotainment system from Maruti Suzuki. A security vulnerability exists in Maruti Suzuki SmartPlay version 66T0.05.50. An attacker could exploit the vulnerability to try commonly used or default usernames and passwords...

PT-2024-37477 · Maruti Suzuki · Maruti Suzuki Smartplay

Name of the Vulnerable Software and Affected Versions: Maruti Suzuki SmartPlay version 66T0.05.50 Description: The issue is related to the use of default credentials in Maruti Suzuki SmartPlay on Linux, specifically in Infotainment Hub modules. This allows an attacker to attempt common or default...

Ununauthorized Root Access

github.com/kubernetes-sigs/image-builder is vulnerable to Unauthorized Root Access. The vulnerability is due to default credentials being enabled during the image build process with the Nutanix, OVA, QEMU, or raw providers, which could allow attackers to gain root access if they reach the VM wher...

Unauthorized Root Access

github.com/kubernetes-sigs/image-builder is vulnerable to Unauthorized Root Access. The vulnerability is due to default credentials being enabled during the image build process with the Nutanix, OVA, QEMU, or raw providers, which allows an attacker to gain root access if they reach the VM where t...