Schneider Electric Accutech Manager Default Credentials(SCADA)

Binary data 6732.prm...

Netgear GS110TP Default Credentials (HTTP)

The remote Netgear GS110TP has the default password SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

HP Diagnostics Server Default Credentials

Nessus was able to login to the HP Diagnostics Server web interface using default, known credentials. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid64474; scriptversion"1.6";...

Xerox Printer Default / No Credentials (HTTP)

The remote Xerox Printer is using default or no credentials for the HTTP based interface. Copyright C 2013 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later Th...

Barracuda Appliances Default Credentials

The account 'product' or 'emailswitch' is using a default password. A remote, unauthenticated attacker could exploit this to log in as an unprivileged user. After logging in, an attacker can log into the local MySQL server as root without a password. Additionally, getting access to a root shell i...

ManageEngine AssetExplorer Default Administrator Credentials

The ManageEngine AssetExplorer application running on the remote host uses a default set of credentials 'administrator' / 'administrator' to control access to its management interface. A remote attacker can exploit this to gain administrative access to the application. %NASLMINLEVEL 70300 C Tenab...

Default credentials

Pulp in Red Hat CloudForms before 1.1 uses world-readable permissions for pulp.conf, which allows local users to read the administrative password by reading this file...

YeaLink IP Phone 9.70.0.100 CSRF / Default Credentials

+--------------------------------------------------------------------------------------------------------------------------------+ Exploit Title : YeaLink IP Phone SIP-TxxP firmware 0x90.nl Software link : http://yealink.com/SupportDownloadfilesdetail.aspx?ProductsID=64&CateID=187&flag=142 Vendor...

ELBA 5 5.5.0 SQL Injection / Default Credentials

SEC Consult Vulnerability Lab Security Advisory ======================================================================= title: Multiple Vulnerabilities in ELBA5 product: ELBA 5 vulnerable version: 5.5.0 R00006 build 0796 fixed version: 5.6.0 R3 impact: Medium homepage: http://www.elba.at/ found:...

ManageEngine Security Manager Plus Default Administrator Credentials

The remote ManageEngine Security Manager Plus install uses a default set of credentials 'admin' / 'admin' to control access to its management interface. With this information, an attacker could gain administrative access to the application. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...

Default credentials

The monitor perl script in the Sybase database plug-in in SpringSource Hyperic HQ before 4.3 allows local users to obtain the database password by listing the process and its arguments...

Default credentials

DaoAuthenticationProvider in VMware SpringSource Spring Security before 2.0.8, 3.0.x before 3.0.8, and 3.1.x before 3.1.3 does not check the password if the user is not found, which makes the response delay shorter and might allow remote attackers to enumerate valid usernames via a series of logi...

ManageEngine Applications Manager Default Administrator Credentials

The ManageEngine Applications Manager running on the remote host uses a default set of credentials 'admin' / 'admin' to control access to its management interface. An attacker can exploit this to gain administrative access to the application. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...

Default credentials

Python Keyring 0.9.1 does not securely initialize the cipher when encrypting passwords for CryptedFileKeyring files, which makes it easier for local users to obtain passwords via a brute-force attack...

Symantec Messaging Gateway Default SSH Password (CVE-2012-3579)

A design weakness vulnerability has been reported in Symantec Messaging Gateway. The vulnerability is due to hardcoded default credentials usage. A remote attacker could exploit this vulnerability by logging-in to the administration console, thus gaining partial access to the configuration of the...

Splunk Web Interface Login Utility

This module simply attempts to login to a Splunk web interface. Please note the free version of Splunk actually does not require any authentication, in that case the module will abort trying. Also, some Splunk applications still have the default credential 'admin:changeme' written on the login...

Default credentials

Remote Login Service RLS 1.0.0 does not properly clear account information when switching users, which might allow physically proximate users to obtain login credentials...

NetIQ Privileged User Manager Default Admin Password

Nessus was able to login to the NetIQ Privileged User Manager install running on the remote host using default, known credentials for the 'admin' user. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid62990;...

Default credentials

The django.http.HttpRequest.gethost function in Django 1.3.x before 1.3.4 and 1.4.x before 1.4.2 allows remote attackers to generate and display arbitrary URLs via crafted username and password Host header values...

Cisco TANDBERG C Series and E/EX Series Default Credentials (SSH)

Cisco TANDBERG C Series Endpoints and E/EX Series Personal Video devices are using known default credentials. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier...