DLINK DPH-400SE - Exposure of Sensitive Information

Exploit Title : DLINK DPH-400SE - Exposure of Sensitive Information Date : 25-08-2023 Exploit Author : tahaafarooq Vendor Homepage : https://dlink.com/ Version : FRU2.2.15.8 Tested on: DLINK DPH-400SE VoIP Phone Description: With default credential for the guest user "guest:guest" to login on the...

Default credentials

Incorrect certificate validation in InvokeHTTP on Apache NiFi MiNiFi C++ versions 0.13 to 0.14 allows an intermediary to present a forged certificate during TLS handshake negotation. The Disable Peer Verification property of InvokeHTTP was effectively flipped, disabling verification by default,...

CVE-2023-3703

Proscend Advice ICR Series routers FW version 1.76 - CWE-1392: Use of Default Credentials...

CVE-2023-3703

Proscend Advice ICR Series routers FW version 1.76 - CWE-1392: Use of Default Credentials...

Default credentials

Proscend Advice ICR Series routers FW version 1.76 - CWE-1392: Use of Default Credentials...

CVE-2023-3703 Proscend Advice ICR Series routers fw version 1.76

Proscend Advice ICR Series routers FW version 1.76 - CWE-1392: Use of Default Credentials...

CVE-2023-3703

CVE-2023-3703 affects Proscend Advice ICR Series routers, specifically firmware version 1.76. The vulnerability arises from the use of default credentials, enabling unauthenticated network access with high impact (confidentiality, integrity, availability). Public metrics indicate critical severit...

CVE-2023-3703 Proscend Advice ICR Series routers fw version 1.76

Proscend Advice ICR Series routers FW version 1.76 - CWE-1392: Use of Default Credentials...

CVE-2023-3703: Use of Default Credentials

Proscend Advice ICR Series routers FW version 1.76 - CWE-1392: Use of Default Credentials...

PT-2023-25769 · Proscend · Proscend Advice Icr Series

Name of the Vulnerable Software and Affected Versions: Proscend Advice ICR Series routers version 1.76 Description: The issue is related to the use of default credentials, which can be exploited. The estimated number of potentially affected devices worldwide is not specified. There is no...

Proscend Advice ICR Series routers security vulnerability

Proscend Advice ICR Series routers are a series of routers from Proscend China. A security vulnerability exists in Proscend Advice ICR Series routers that stems from the use of default credentials...

Gusto Recipes Management 1.5.1 Insecure Settings

==================================================================================================================================== | Title : Gusto - Recipes Management v1.5.1 System Insecure Settings Vulnerability | | Author : indoushka | | Tested on : windows 10 Français V.Pro / browser :...

ADM DR Node Only Accessible by Default Username/Password

The nsroot password that is configured on our Primary/Secondary ADM hosts did not appear to be replicated to the DR node. When accessing the DR node over the VSphere console we can only log into it with the default nsrecover/nsroot username/password. If I update the password for the nsroot and...

E-mailer Newsletter And Mailing System with Analytics + GEO location 1.16 Information Disclosure

================================================================================================================================== | Title : E-mailer Newsletter & Mailing System with Analytics + GEO location v1.16 information Disclosure vulnerability | | Author : indoushka | | Tested on : windows...

EuroTel ETL3100 - Transmitter Default Credentials Vulnerability

Exploit Title: EuroTel ETL3100 Transmitter Default Credentials Exploit Author: LiquidWorm Vendor: EuroTel S.p.A. | SIEL, Sistemi Elettronici S.R.L Product web page: https://www.eurotel.it | https://www.siel.fm Affected version: v01c01 Microprocessor: socs0t10/ats01s01, Model: ETL3100 Exciter v01x...

EuroTel ETL3100 - Transmitter Default Credentials

Exploit Title: EuroTel ETL3100 Transmitter Default Credentials Exploit Author: LiquidWorm Vendor: EuroTel S.p.A. | SIEL, Sistemi Elettronici S.R.L Product web page: https://www.eurotel.it | https://www.siel.fm Affected version: v01c01 Microprocessor: socs0t10/ats01s01, Model: ETL3100 Exciter v01x...

Default credentials

DOM-based XSS in src/muya/lib/contentState/pasteCtrl.js in MarkText 0.17.1 and before on Windows, Linux and macOS allows arbitrary JavaScript code to run in the context of MarkText main window. This vulnerability can be exploited if a user copies text from a malicious webpage and paste it into...

Default credentials

Unverified Password Change in GitHub repository instantsoft/icms2 prior to 2.16.1-git...

CSC-CMS 1.0.0 Insecure Settings

==================================================================================================================================== | Title : CSC-CMS v1.0.0 Insecure Settings Vulnerability | | Author : indoushka | | Tested on : windows 10 Français V.Pro / browser : Mozilla firefox 68.032-bit | |...

Default credentials

The issue was addressed with improved bounds checks. This issue is fixed in tvOS 15.6, watchOS 8.7, iOS 15.6 and iPadOS 15.6, macOS Monterey 12.5, Safari 15.6. Processing web content may lead to arbitrary code execution...