4741 matches found
Default credentials
When BIG-IP AFM Device DoS or DoS profile is configured with NXDOMAIN attack vector and bad actor detection, undisclosed queries can cause the Traffic Management Microkernel TMM to terminate. NOTE: Software versions which have reached End of Technical Support EoTS are not evaluated...
Default credentials
A vulnerability was found in Global Scape CuteFTP 9.3.0.3 and classified as problematic. Affected by this issue is some unknown functionality. The manipulation of the argument Host/Username/Password leads to denial of service. The attack needs to be approached locally. The exploit has been...
CVE-2024-22902
Vinchin Backup & Recovery v7.2 was discovered to be configured with default root credentials...
CVE-2024-22901
Vinchin Backup & Recovery v7.2 was discovered to use default MYSQL credentials...
Default credentials
Vinchin Backup & Recovery v7.2 was discovered to use default MYSQL credentials...
Default credentials
Vinchin Backup & Recovery v7.2 was discovered to be configured with default root credentials...
Vinchin Backup and Recovery Security Vulnerabilities
Vinchin Backup and Recovery is an easy-to-use, safe and reliable virtual machine data protection software from China Yunqi Technology Vinchin. It is used for backup and recovery. A security vulnerability exists in Vinchin Backup and Recovery version v7.2, which originates from configuring the...
CVE-2024-22902
CVE-2024-22902 : Vinchin Backup & Recovery v7.2 is reported to be configured with default root credentials, enabling potential unauthorized root access. The issue is described as a high-severity configuration flaw with a CVSS v3.1 base score of 9.8 (Network, low attack complexity, no user interac...
CVE-2024-22901
Vinchin Backup & Recovery v7.2 was discovered to use default MYSQL credentials...
CVE-2024-22902
Vinchin Backup & Recovery v7.2 was discovered to be configured with default root credentials...
CVE-2024-22901: Undefined Security Weakness
Vinchin Backup & Recovery v7.2 was discovered to use default MYSQL credentials...
Hitron Systems Security Camera DVR
View CSAF 1. EXECUTIVE SUMMARY CVSS v3 8.1 ATTENTION : Exploitable remotely/low attack complexity/public exploits are available/known public exploitation Vendor : Hitron Systems Equipment : DVR Vulnerability : Improper Input Validation 2. RISK EVALUATION Successful exploitation of these...
VulnCheck KEV: CVE-2024-22769
Improper Input Validation in Hitron Systems DVR HVR-8781 1.034.02 allows an attacker to cause network attack in case of using defalut admin ID/PW...
VulnCheck KEV: CVE-2024-23842
Improper Input Validation in Hitron Systems DVR LGUVR-16H 1.024.02 allows an attacker to cause network attack in case of using defalut admin ID/PW...
Vinchin Backup And Recovery 7.2 Default Root Credentials Vulnerability
Vinchin Backup and Recovery version 7.2 has been identified as being configured with default root credentials, posing a significant security vulnerability. CVE ID: CVE-2024-22902 Title: Default Root Credentials Vulnerability in Vinchin Backup & Recovery v7.2 Suggested Description: Vinchin Backup ...
Vinchin Backup and Recovery Operating System Command Injection Vulnerability
Vinchin Backup and Recovery is an easy-to-use, safe and reliable virtual machine data protection software from China Yunqi Technology Vinchin. It is used for backup and recovery. An operating system command injection vulnerability exists in Vinchin Backup and Recovery 7.2 and earlier versions,...
PT-2024-1634
Name of the Vulnerable Software and Affected Versions Vinchin Backup & Recovery version 7.2 Description The issue is related to the use of default credentials in Vinchin Backup & Recovery. This could allow a remote attacker to elevate their privileges. Recommendations For Vinchin Backup & Recover...
Default credentials
Pimcore's Admin Classic Bundle provides a backend user interface for Pimcore. The password reset functionality sends to the the user requesting a password change an email containing an URL to reset its password. The URL sent contains a unique token, valid during 24 hours, allowing the user to res...
Default credentials
An issue was discovered in SolaX Pocket WiFi 3 through 3.001.02. Authentication for web interface is completed via an unauthenticated WiFi AP. The administrative password for the web interface has a default password, equal to the registration ID of the device. This same registration ID is used as...