Siedle Door Controller Default Credentials (HTTP)

The remote Siedle Door Controller is using known default credentials. Copyright C 2013 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free...

Net Optics Director Default Credentials

The remote Net Optics Director install uses a default set of credentials 'admin' / 'netoptics' to control access to its management interface. With this information, an attacker can gain administrative access to the application. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...

Default Password (netoptics) for 'admin' Account

The account 'admin' on the remote host has the password 'netoptics'. An attacker may leverage this issue to gain administrative access to the affected system. Note that Net Optics taps are known to use these credentials as factory defaults. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...

[LinEnum v0.2] Automating local information gathering tasks on Linux hosts

LinEnum is a shell script that automates local information gathering tasks on Linux hosts.Over 65 checks are performed, obtaining anything from kernel information to locating possible escalation points such as potentially useful SUID/GUID files and Sudo/rhost mis-configurations etc. Additionally,...

GestioIP <= 3.0 Command Injection Vulnerability - Active Check

GestioIP is prone to a remote command injection vulnerability. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PostgreSQL No Password Protection (PostgreSQL Protocol)

It was possible to login into the remote PostgreSQL as user SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:postgresql:postgresql...

Alcatel OmniSwitch Default Credentials (telnet)

It is possible to log into the remote Alcatel OmniSwitch by providing the default credentials. A remote attacker could exploit this to gain administrative control of the remote device. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid70212; scriptversion"$Revision: 1.3...

Alcatel OmniSwitch Default Credentials (ftp)

It is possible to log into the remote Alcatel OmniSwitch by providing the default credentials via FTP. A remote attacker could exploit this to gain administrative control of the remote device. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid70210;...

Alcatel OmniSwitch Default Credentials (http)

It is possible to log into the remote Alcatel Switch by providing the default credentials. A remote attacker could exploit this to gain administrative control of this installation. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if...

Default credentials

Dahua DVR appliances have a small value for the maximum password length, which makes it easier for remote attackers to obtain access via a brute-force attack...

Cisco Video Surveillance Manager Default Administrator Credentials

The remote Cisco Video Surveillance Manager install uses a default set of credentials 'root' / 'secur4u' to control access to its management interface. With this information, an attacker can gain administrative access to the application. C Tenable Network Security, Inc. include"compat.inc"; if...

Embedded Devices Vulnerable by Default from Manufacturer

Embedded device manufacturers have been warned for ages about the risks of making networking, telecom and critical infrastructure gear reachable online, worse yet, leaving default credentials in place for authenticating to those devices. Clearly, most are not listening. An Australian researcher...

SHARP Printer Default / No Credentials (HTTP)

The remote SHARP Printer is using default or no credentials for the HTTP based interface. Copyright C 2013 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later Th...

Apple iOS Default SSH Password Vulnerability

This module exploits the default credentials of Apple iOS when it has been jailbroken and the passwords for the 'root' and 'mobile' users have not been changed. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require...

[LinEnum] Scripted Local Linux Enumeration & Privilege Escalation Checks

High-level summary of the checks/tasks performed by LinEnum: Kernel and distribution release details System Information: Hostname Networking details: Current IP Default route details DNS server information User Information: Current user details Last logged on users List all users including uid/gi...

Default credentials

The reset password page in Puppet Enterprise before 3.0.1 does not force entry of the current password, which allows attackers to modify user passwords by leveraging session hijacking, an unattended workstation, or other vectors...

Fujitsu KVM Default Credentials (HTTP)

The remote Fujitsu KVM is using known default credentials. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Dell KVM Default Credentials (HTTP)

The remote Dell KVM is using known default credentials. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Avocent KVM Default Credentials (HTTP)

The remote Avocent KVM is using known default credentials. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

HP IP Console Switch KVM Default Credentials (HTTP)

The remote HP KVM is using known default credentials. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...