4870 matches found
Default credentials
Frontend themes are defined by user-controllable jslob settings and could point to a malicious resource which gets processed during login. Malicious script code can be executed within the victims context. This can lead to session hijacking or triggering unwanted actions via the web interface and...
Moxa AWK-3121 Cleartext Transmission of Sensitive Information (CVE-2018-10698)
An issue was discovered on Moxa AWK-3121 1.14 devices. The device enables an unencrypted TELNET service by default. This allows an attacker who has been able to gain an MITM position to easily sniff the traffic between the device and the user. Also an attacker can easily connect to the TELNET...
Default credentials
In PHP Jabbers Time Slots Booking Calendar 3.3 , lack of verification when changing an email address and/or password on the Profile Page allows remote attackers to take over accounts...
COMpose-IT CMS 2.0 Insecure Settings
==================================================================================================================================== | Title : COMpose-IT CMS v2.0 Insecure Settings Vulnerability | | Author : indoushka | | Tested on : windows 10 Français V.Pro / browser : Mozilla firefox 68.032-bi...
Buzzy News Viral Lists Polls And Videos 2.5.2 Insecure Settings
====================================================================================================================================== | Title : Buzzy - News Viral Lists Polls and Videos V 2.5.2 Insecure Settings Vulnerability | | Author : indoushka | | Tested on : windows 10 Français V.Pro /...
Buzzy News Viral Lists Polls And Videos 2.5.1 Insecure Settings
====================================================================================================================================== | Title : Buzzy - News Viral Lists Polls and Videos V 2.5.1 Insecure Settings Vulnerability | | Author : indoushka | | Tested on : windows 10 Français V.Pro /...
NiceCMS 2.0.8 Insecure Settings
==================================================================================================================================== | Title : NiceCMS V 2.0.8 Insecure Settings Vulnerability | | Author : indoushka | | Tested on : windows 10 Français V.Pro / browser : Mozilla firefox 66.0.264-bit ...
CMS Nexin Adminisztracios Kozpont 1.2 Insecure Settings
==================================================================================================================================== | Title : CMS Nexin Adminisztrációs Központ v1.2 Insecure Settings Vulnerability | | Author : indoushka | | Tested on : windows 10 Français V.Pro / browser : Mozill...
Default credentials
Weintek Weincloud v0.13.6 could allow an attacker to reset a password with the corresponding account’s JWT token only...
Buzzy News Viral Lists Polls And Videos 1.4 Insecure Settings
====================================================================================================================================== | Title : Buzzy - News Viral Lists Polls and Videos V 1.4 Insecure Settings Vulnerability | | Author : indoushka | | Tested on : windows 10 Français V.Pro / brows...
Buzzy News Viral Lists Polls And Videos 1.3.2 Insecure Settings
====================================================================================================================================== | Title : Buzzy - News Viral Lists Polls and Videos V 1.3.2 Insecure Settings Vulnerability | | Author : indoushka | | Tested on : windows 10 Français V.Pro /...
Default credentials
Mattermost fails to invalidate previously generated password reset tokens when a new reset token was created...
Default credentials
Mattermost WelcomeBot plugin fails to to validate the membership status when inviting or adding users to channels allowing guest accounts to be added or invited to channels by default...
Default credentials
The web interface on the RIGOL MSO5000 digital oscilloscope with firmware 00.01.03.00.03 allows remote attackers to change the admin password via a zero-length pass0 to the webcontrol changepwd.cgi application, i.e., the entered password only needs to match the first zero characters of the saved...
Buzzy News Viral Lists Polls And Videos 1.3.1 Insecure Settings
====================================================================================================================================== | Title : Buzzy - News Viral Lists Polls and Videos V 1.3.1 Insecure Settings Vulnerability | | Author : indoushka | | Tested on : windows 10 Français V.Pro /...
PenTales: Old Vulns, New Tricks
At Rapid7 we love a good pentest story. So often they show the cleverness, skill, resilience, and dedication to our customer’s security that can only come from actively trying to break it! In this series, we’re going to share some of our favorite tales from the pen test desk and hopefully highlig...
Default credentials
In JetBrains TeamCity before 2023.05.1 build chain parameters of the "password" type could be written to the agent log...
Default credentials
In JetBrains TeamCity before 2023.05.1 build parameters of the "password" type could be written to the agent log...
Default credentials
CC: Tweaked is a mod for Minecraft which adds programmable computers, turtles, and more to the game. Prior to versions 1.20.1-1.106.0, 1.19.4-1.106.0, 1.19.2-1.101.3, 1.18.2-1.101.3, and 1.16.5-1.101.3, if the cc-tweaked plugin is running on a Minecraft server hosted on a popular cloud hosting...
