Linksys Router Debug Credentials (Gemtek / gemtekswd)

The remote Linksys device accepts hard-coded default credentials Gemtek / gemtekswd on a debug page. An attacker can run arbitrary commands on this device using this account. This flaw is known to affect two firmware versions : - Linksys WAP54Gv3 3.4.3.US - Linksys WAP54Gv3 3.5.3.Europe...

Firebird Default Credentials (Firebird Protocol)

It is possible to connect to the remote database service using default credentials. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if...

Splunk Default Administrator Credentials (Splunk Web)

The version of Splunk hosted on the remote web server uses a default set of credentials for the default administrator account. A remote attacker can exploit this to gain administrative access to the application. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'...

Splunk Default Administrator Credentials (splunkd)

The version of Splunk hosted on the remote web server uses a default set of credentials for the default administrator account. A remote attacker can exploit this to gain administrative access to the application. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'...

Linksys WAP Default Credentials Detection

Binary data 5649.prm...

Default credentials

The authenticate function in LDAPUserFolder/LDAPUserFolder.py in zope-ldapuserfolder 2.9-1 does not verify the password for the emergency account, which allows remote attackers to gain privileges...

Authentication flaw

The controller in Cisco Unified Wireless Network UWN Solution 7.x through 7.0.98.0 has 1 a default SNMP read-only community of public, 2 a default SNMP read-write community of private, and a value of "default" for the 3 SNMP v3 username, 4 SNMP v3 authentication password, and 5 SNMP v3 privacy...

Novell Teaming Default Credentials

The installed version of Novell Teaming hosted on the remote web server uses the default username and password to control access to its administrative console. Knowing these, an attacker can gain control of the affected application. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...

JBoss Administration Console Default Credentials

The JBoss Administration Console installed on the remote host uses the default username and password. Knowing these, an attacker can gain administrative control of the affected application. C Tenable Network Security, Inc. include'compat.inc'; if description scriptid47714; scriptversion"1.11";...

Default credentials

The Linear eMerge 50 and 5000 uses a default password of eMerge for the IEIeMerge account, which makes it easier for remote attackers to obtain Video Recorder data by establishing a session to the device...

Default credentials

admin/index.php in oBlog allows remote attackers to conduct brute-force password guessing attacks via HTTP requests...

Default credentials

Apple Safari before 5.0 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1 on Mac OS X 10.4, does not provide a warning about a 1 http or 2 https URL that contains a username and password, which makes it easier for remote attackers to conduct phishing attacks via a crafted URL...

Default credentials

Galileo Students Team Weborf before 0.12.1 allows remote attackers to cause a denial of service crash via a crafted Range header...

With the Database, Sometimes it's the Little Things That Matter

Most users are aware of the risks connected to the default, blank and weak username/password combinations associated with most applications. Yet it amazes the research community that many companies still don’t heed the following simple advice: 1 Don’t use easily guessed passwords. 2 Change the...

ManageEngine ADManager Plus Default Credentials

It is possible to log into the remote ADManager Plus installation by providing the default credentials. A remote attacker could exploit this to gain administrative control of the ADManager Plus installation. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc';...

ManageEngine ADAudit Plus Default Credentials

It is possible to log into the remote ADAudit Plus installation by providing the default credentials. A remote attacker could exploit this to gain administrative control of the ADAudit Plus installation. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc';...

Default credentials

Cisco Mediator Framework 1.5.1 before 1.5.1.build.14-eng, 2.2 before 2.2.1.dev.1, and 3.0 before 3.0.9.release.1 on the Cisco Network Building Mediator NBM-2400 and NBM-4800 and the Richards-Zeta Mediator 2500 has a default password for the administrative user account and unspecified other...

Apache Axis2 Default Credentials

The installation of Apache Axis2 hosted on the remote web server uses a default set of credentials to control access to its administrative console. A remote attacker can exploit this to gain administrative control. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...

Default credentials

The web interface on the Cisco Scientific Atlanta WebSTAR DPC2100R2 cable modem with firmware 2.0.2r1256-060303 has a default administrative password aka SAPassword of W2402, which makes it easier for remote attackers to obtain privileged access...

NolaPro Default Credentials

The installation of NolaPro on the remote web server uses the default username and password to control access to its administrative console. Knowing these, an attacker can gain administrative control of the affected application. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...