CVE-2016-6551: Undefined Security Weakness

Intellian Satellite TV antennas t-Series and v-Series, firmware version 1.07, uses non-random default credentials of: ftp/ftp or intellian:12345678. A remote network attacker can gain elevated access to a vulnerable device...

PT-2018-4952

Name of the Vulnerable Software and Affected Versions Green Packet DX-350 Description The issue concerns the use of non-random default credentials, specifically root:wimax, which can be exploited by a remote network attacker to gain privileged access to a vulnerable device. Recommendations For...

PT-2018-4954

Name of the Vulnerable Software and Affected Versions Synology NAS servers DS107 version 3.1-1639 and prior Synology NAS servers DS116 versions prior to 5.2-5644-1 Synology NAS servers DS213 versions prior to 5.2-5644-1 Description The issue concerns the use of non-random default credentials in...

PT-2018-4953

Name of the Vulnerable Software and Affected Versions Nuuo NT-4040 Titan firmware NT-4040 01.07.0000.0015 1120 Description The issue concerns the use of non-random default credentials, specifically admin:admin and localdisplay:111111, which can be exploited by a remote network attacker to gain...

CVE-2016-6554: Undefined Security Weakness

Synology NAS servers DS107, firmware version 3.1-1639 and prior, and DS116, DS213, firmware versions prior to 5.2-5644-1, use non-random default credentials of: guest:blank and admin:blank . A remote network attacker can gain privileged access to a vulnerable device...

CVE-2018-10898

When deployed using Director using default configuration, Opendaylight in RHOSP13 is configured with easily guessable default credentials...

Lantronix Devices Default Credentials (Telnet)

Lantronix devices have a default useraccount SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Hacker Sold Stolen U.S. Military Drone Documents On Dark Web For Just $200

You never know what you will find on the hidden Internet 'Dark Web.' Just about an hour ago we reported about someone selling remote access linked to security systems at a major International airport for $10. It has been reported that a hacker was found selling sensitive US Air Force documents on...

Default credentials

PHP Scripts Mall Auditor Website 2.0.1 has XSS via the lastname or firstname parameter...

HP VAN SDN Controller Root Command Injection Exploit

This Metasploit module exploits a hardcoded service token or default credentials in HPE VAN SDN Controller versions 2.7.18.0503 and below to execute a payload as root. A root command injection was discovered in the uninstall action's name parameter, obviating the need to use sudo for privilege...

Sollae Systems Devices Default Credentials / Unrestricted Access (Telnet)

Sollae Systems Serial-Ethernet-Module and Remote-I/O-Device-Server devices have a default telnet password set or no password at all. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Default credentials

Plaintext Storage of Passwords within Cookies in /var/www/xms/application/controllers/verifyLogin.php in the administrative console in Dialogic PowerMedia XMS before 3.5 SU2 allows remote attackers to access a user's password in cleartext...

ASUSTOR ADM <= 3.1.2.RHG1 Multiple Vulnerabilities - Active Check

ASUSTOR ADM is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:asustor:adm"; if description...

Default credentials

Baseon Lantronix MSS devices do not require a password for TELNET access...

PRTG Command Injection

Bugtraq, I Josh Berry discovered an authenticated command injection vulnerability in the Demo PowerShell notification script provided by versions of PRTG Network Monitor prior to 18.2.39. The PowerShell notifications demo script on versions of the application prior to 18.2.39 do not properly...

Default credentials

Dell EMC iDRAC Service Module for all supported Linux and XenServer versions v3.0.1, v3.0.2, v3.1.0, v3.2.0, when started, changes the default file permission of the hosts file of the host operating system /etc/hosts to world writable. A malicious low privileged operating system user or process...

Hacking Serial Networks on Ships

Three different ways to intercept and modify serial data on ship networks. The serial data that controls steering, engine control and so much more on board ship… How-to Vessels typically have two distinct networks on board; one IP/ethernet network for business systems, crew mail & web browsing an...

HP VAN SDN Controller Root Command Injection

This module exploits a hardcoded service token or default credentials in HPE VAN SDN Controller use exploit/linux/http/hp/vansdncmdinject msf undefinedvansdncmdinject show actions ...actions... msf undefinedvansdncmdinject set ACTION msf undefinedvansdncmdinject show options ...show and set...

Default credentials

Reliable Controls MACH-ProWebCom 7.80 devices allow remote attackers to obtain sensitive information via a direct request for the data/fileinfo.xml or job/job.json file, as demonstrated the Master Password field...

Default credentials

An issue was discovered on Momentum Axel 720P 5.1.8 devices. The root password can be obtained in cleartext by issuing the command 'showKey' from the root CLI. This password may be the same on all devices...