4891 matches found
Barco ClickShare Device Default Credentials
Nessus was able to login to the web administration interface on the remote Barco ClickShare device using a default set of known credentials. A remote attacker can exploit this to gain administrative control of the device. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...
Halon Security Router User Interface Default Credentials
The remote Halon Security Router user interface uses a known set of default credentials. An attacker with access to the service can gain administrative access to the device. Additionally, these credentials allow SSH if enabled access to the device with root privileges. %NASLMINLEVEL 70300 C Tenab...
Default credentials
usr/lib/cgi-bin/createpasswdfile.py in Pyplate 0.08 uses world-readable permissions for passwd.db, which allows local users to obtain the administrator password by reading this file...
F5 Networks BIG-IP Web Interface Default Credential Check
Nessus was able to login to the administrative interface on the remote F5 Networks BIG-IP device using a known set of default credentials. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid76942; scriptversion"1.4";...
Datum Systems Satellite Modem Multiple Vulnerabilities
Datum Systems Satellite Modem is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CMSimple - Default Administrator Credentials
CMSimple - Default Administrator Credentials source: https://www.securityfocus.com/bid/68961/info CMSimple is prone to multiple security vulnerabilities including: 1. Multiple arbitrary PHP code-execution vulnerabilities 2. A weak authentication security-bypass vulnerability 3. Multiple security...
WebTitan Web Interface Default Credentials
The remote WebTitan web interface uses a default set of credentials 'admin' / 'hiadmin' to control access to its management interface. A remote, unauthenticated attacker could exploit this to log in as a privileged user and gain administrative access to the application. %NASLMINLEVEL 70300 C...
WebTitan Default Credentials (ssh)
The account 'admin' is using a default password. A remote, unauthenticated attacker could exploit this to log in as a privileged user and gain access to the WebTitan configuration menu. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid76777; scriptversion"$Revision: 1....
Default credentials
Infoblox NetMRI before 6.8.5 has a default password of admin for the "root" MySQL database account, which makes it easier for local users to obtain access via unspecified vectors...
Mobotix Cameras Default Admin Credentials (HTTP)
The remote Mobotix camera web interface is using default credentials. This VT has been deprecated as a duplicate of the VT SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...
Default credentials
Apache Syncope 1.1.x before 1.1.8 uses weak random values to generate passwords, which makes it easier for remote attackers to guess the password via a brute force attack...
Hardcoded Password Flaw Plagues Some Netgear Switches
A vulnerability in Netgear-branded ethernet switches could give an attacker full access to the hardware, including the ability to log into the device and execute arbitrary code. Netgear’s GS108PE Prosafe Plus switches running version 1.2.0.5 are at risk, according to an analyst at CERT/CC’s...
SMB Brute Force Logins With Default Credentials
A number of known default credentials are tried for the login via the SMB protocol. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescripti...
Default credentials
Settings in Apple iOS before 7.1.2 allows physically proximate attackers to bypass an intended iCloud password requirement, and turn off the Find My iPhone service, by leveraging incorrect state management...
Netgear DGN1000B setup.cgi Remote Command Execution
No description provided by source. This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3...
Tandberg E, EX and C Series Endpoints Default Credentials for Root Account
No description provided by source. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Cisco Security Advisory: Default Credentials for Root Account on Tandberg E, EX and C Series Endpoints Advisory ID: cisco-sa-20110202-tandberg Revision 1.0 For Public Release 2011 February 2 1600 UTC GMT...
EFront <= 3.6.9 Community Edition Multiple Vulnerabilities
No description provided by source. Exploit Title: EFront = 3.6.9 Community Edition Multiple Vulnerabilities Google Dork: eFront version 3.6.9 inurl:index.php?ctg= Date: 5/09/2011 Public release: When 3.6.10 will be released Author: IHTeam Software Link:...
VICIdial Manager Send OS Command Injection
No description provided by source. This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 Msf::Exploit::Remote Rank = ExcellentRanking include Msf::Exploit::Remote::HttpClient def...
Huawei SmartAX MT880 - Multiple CSRF Vulnerabilities
No description provided by source. Description: Huawei MT880 is a device offered by the algerian telecom operator - FAWRI, to provide ADSL Internet connexion and it's already widely in use. Overview: Huawei MT880 firmware and its default configuration has flaws, which allows LAN users to gain...
Netgear DGN2200B pppoe.cgi Remote Command Execution
No description provided by source. This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3...