Default credentials

The configuration page in ToutVirtual VirtualIQ Pro 3.2 build 7882 contains cleartext SSH credentials, which allows remote attackers to obtain sensitive information by reading the username and password fields...

TaskFreak! Default Credentials

The installation of TaskFreak! hosted on the remote web server uses the default username and password to control access to its administrative console. Knowing these, an attacker can gain control of the affected application. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...

Ektron CMS400.NET Default Credentials

It is possible to log into the Ektron CMS400.NET install on the remote host using a default set of credentials. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid46198; scriptversion"1.12";...

Default credentials

IBM WebSphere Application Server WAS 6.0 before 6.0.2.41, 6.1 before 6.1.0.31, and 7.0 before 7.0.0.9 does not properly define wsadmin scripting J2CConnectionFactory objects, which allows local users to discover a KeyRingPassword password by reading a cleartext field in the resources.xml file...

SAP Netweaver XRFC — Stack Overflow

Application: SAP BASIS Versions Affected: SAP XRFC 6.40/7.00 may be others Vendor URL: Bugs: Stack Overflow Exploits: YES DoS PoC Reported: 29.03.2010 Vendor response: 29.03.2010 Date of Public Advisory: 09.11.2010 Author: Alexey Sintsov Description It is possible to call stack overflow via RFC...

Hyperic HQ Web GUI Default Credentials

It is possible to log into the remote Hyperic HQ installation using its default credentials. A remote attacker could exploit this to gain administrative control of the application. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if...

Remote Help Default Credentials

It was possible to log in to the Remote Help server on the remote host using a default set of credentials. An attacker could exploit this flaw in order to gain complete control of the affected system. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc';...

Default credentials

Cisco Digital Media Manager DMM 5.0.x and 5.1.x has a default password for the Tomcat administration account, which makes it easier for remote attackers to execute arbitrary code via a crafted web application, aka Bug ID CSCta03378...

Cisco Security Advisory: Multiple Vulnerabilities in Cisco Digital Media Manager

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: Multiple Vulnerabilities in Cisco Digital Media Manager Advisory ID: cisco-sa-20100303-dmm http://www.cisco.com/warp/public/707/cisco-sa-20100303-dmm.shtml Revision 1.0 For Public Release 2010 March 03 1600 UTC GMT...

Cisco Digital Media Manager multiple security vulnerabilities

default credentials, privilege escalation, information leak...

Cisco Releases Multiple Security Advisories

Cisco has released three security advisories to address vulnerabilities. Security advisory cisco-sa-20100303-cucm, addresses multiple vulnerabilities in the Cisco Unified Communications Manager which affect the Session Initiation Protocol SIP, Skinny Client Control Protocol SCCP, and the Computer...

Cisco Network Building Mediator

Overview Cisco has identified multiple security vulnerabilitiesCisco, http://www.cisco.com/en/US/products/productssecurityadvisory09186a0080b2c518.shtml, website last visited May 27, 2010. in the Cisco Network Building Mediator NBM products. These vulnerabilities also affect the legacy...

FreePBX / PBXconfig Default Credentials

The remote web server hosts FreePBX or PBXconfig, both of which are web-based interfaces used to control and manage Asterisk. The remote installation of the interface has at least one account configured using default credentials. With this information, an attacker can gain administrative access t...

Default credentials

HP Operations Agent 8.51, 8.52, 8.53, and 8.60 on Solaris 10 uses a blank password for the opcop account, which allows remote attackers to execute arbitrary code via unspecified vectors...

TYPO3 Default Credentials

It is possible to log into the remote TYPO3 installation by providing the default credentials. A remote attacker can exploit this to gain administrative control of the TYPO3 installation. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; i...

Default credentials

nm-connection-editor in NetworkManager NM 0.7.x exports connection objects over D-Bus upon actions in the connection editor GUI, which allows local users to obtain sensitive information by reading D-Bus signals, as demonstrated by using dbus-monitor to discover the password for the WiFi network...

Oracle WebLogic Default Credentials

It is possible to log into the remote WebLogic installation by providing the default credentials. A remote attacker could exploit this to gain administrative control of this installation. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; i...

Default credentials

Moodle 1.8 before 1.8.11 and 1.9 before 1.9.7 does not use a random password salt in config.php, which makes it easier for attackers to conduct brute-force password guessing attacks...

phpShop Default Credentials

It is possible to log into the remote phpShop installation by providing default credentials. Several accounts are included in the default phpShop installation. A remote attacker could exploit this to gain unauthorized, potentially administrative control of the phpShop installation. %NASLMINLEVEL...

Request Tracker Default Credentials

It is possible to log into the Best Practical Solutions Request Tracker RT application by providing default credentials. A remote attacker can exploit this to gain administrative control. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; i...