4874 matches found
PT-2019-9496
Name of the Vulnerable Software and Affected Versions eVisitorPass affected versions not specified Description The issue concerns default administrative credentials in the application, which could be exploited by an attacker to gain full access. Recommendations At the moment, there is no...
PT-2019-9484
Name of the Vulnerable Software and Affected Versions Lobby Track Desktop affected versions not specified Description The issue concerns default administrative credentials in the application, which could be exploited by an attacker to gain full access. Recommendations At the moment, there is no...
CVE-2018-17485: Initialization of a Resource with an Insecure Default
Lobby Track Desktop contains default administrative credentials. An attacker could exploit this vulnerability to gain full access to the application...
PT-2019-9491
Name of the Vulnerable Software and Affected Versions EasyLobby Solo affected versions not specified Description The issue concerns default administrative credentials in the application, which could be exploited by an attacker to gain full access. Recommendations At the moment, there is no...
Amcrest Technologies IP Camera Default Credentials (HTTP)
The remote installation of Amcrest Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can redistribute it...
GW Security IP Camera Default Credentials (HTTP)
The remote installation of GW Security Copyright C 2019 Greenbone Networks GmbH SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either...
Default credentials
DOM-based XSS exists in 1024Tools Markdown 1.0 via vectors involving the 'EMBED SRC="data:image/svg+xml' substring...
Default credentials
jimmykuu Gopher 2.0 has DOM-based XSS via vectors involving the 'EMBED SRC="data:image/svg+xml' substring...
Aruba VAN SDN default credentials
The Aruba Virtual Application Networks VAN Software Defined Networking SDN controller running on the remote host is configured with default credentials. A default service token is configured or the 'sdn' account is using a default password. An unauthenticated, remote attacker can exploit this to...
PT-2019-17607
Name of the Vulnerable Software and Affected Versions HPE Intelligent Management Center IMC PLAT versions prior to 7.3 E0506P09 Description A remote code execution issue was identified. The vulnerability allows for remote code execution due to the use of default credentials in the MyFaces Static...
(0Day) Hewlett Packard Enterprise Intelligent Management Center MyFaces Static Key ViewState Use of Default Credentials Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Hewlett Packard Enterprise Intelligent Management Center. Authentication is not required to exploit this vulnerability. The specific flaw exists within the configuration of the product. The web...
Default credentials
Checkstyle before 8.18 loads external DTDs by default...
BSides SF 2019: Remote-Root Bug in Logitech Harmony Hub Patched and Explained
SAN FRANCISCO – Users of Logitech’s Harmony Hub have been wide open to an attack for years because of four unpatched vulnerabilities that left any IoT device connected at risk to remote takeover. The bugs were patched by Logitech in November, but for the first time the researchers that discovered...
TP-Link Megapixel Surveillance Camera Default Credentials (HTTP)
The remote installation of TP-Link Copyright C 2019 Greenbone Networks GmbH SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either...
D-Link DIR-825 Default Credentials (HTTP)
D-Link DIR-825 devices use an empty default password for the accounts SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Default credentials
An issue was discovered on D-Link DIR-825 Rev.B 2.10 devices. The "user" account has a blank password...
Default credentials
An issue was discovered on D-Link DIR-878 1.12B01 devices. At the /HNAP1 URI, an attacker can log in with a blank password...
Nuuo Central Management SQL Injection Exploit
The Nuuo Central Management Server allows an authenticated user to query the state of the alarms. This functionality can be abused to inject SQL into the query. As SQL Server 2005 Express is installed by default, xpcmdshell can be enabled and abused to achieve code execution. This module will...