Dell iDRAC Default Login

This module attempts to login to a iDRAC webserver instance using default username and password. Tested against Dell Remote Access Controller 6 - Express version 1.50 and 1.85, Controller 7 - Enterprise 2.63.60.62 Controller 8 - Enterprise 2.83.05 Controller 9 - Enterprise 4.40.00.00 This module...

Twitter Makes HTTPS Default Login Option

Twitter has finally gotten on board the SSL train and made HTTPS the default login option for all of its users who sign in through the Web interface. The company had made secure login an option for users last year but hadn’t made it the default mechanism. On Monday, officials at Twitter said that...

OKI Printer Default Login Credential Scanner

This module scans for OKI printers via SNMP, then tries to connect to found devices with vendor default administrator credentials via HTTP authentication. By default, OKI network printers use the last six digits of the MAC as admin password. This module requires Metasploit:...

Chi youdao professional travel system v1. 0 injected and the column directory vulnerability-vulnerability warning-the black bar safety net

| “Chi youdao”professional travel site system is wise to have team professional development, for the current tourism platform for powerful features developers! Back office management The default background path:/admin/login. asp The default administrator: user:admin Default password: psw:1 2 3 4 ...

Hardware Vendor Offers Backdoor with Every Product

IT administrators know there’s nothing more frustrating than losing administrative access to your network equipment. But Allied Telesis, a Japan-based maker of switches, routers and other networking devices, has a fix: guaranteed backdoors for every product. That revelation comes after a support...

HP Client Automation Default Credentials

The remote install of HP Client Automation has a default password 'secret' set. An attacker may connect to it to reconfigure the application and control remote devices. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description...

RoadRunner Cablemodem Remote Root

Hello. This is the introduction to a large-scale RoadRunner Cable-Router exploit on the Ambit U10C019 CableModem. Basically, the default Cable Router that RoadRunner/TimeWarner gives to its customers by default: 1 Allows for remote login with user: admin, password: cableroot. 2 Allows remote acce...

On plesk virtual host to mention the right-vulnerability warning-the black bar safety net

This virtual machine in a foreign country relatively popular. Safety performance is also very high, where the next record to mention the right methods. 1. mysql adminthe original rootand the default passwordsetupdidn't change,by mysql to provide the right 2. Parallels Plesk Control Panel,in 8 8 8...

Impact Software AdPeeps 8.5d1 - Cross-Site Scripting HTML Injection

Impact Software AdPeeps 8.5d1 - Cross-Site Scripting HTML Injection AdPeeps Ad Rotator - XSS and HTML Injection Vulnerabilities Version Affected: 8.5d1 3-18-09 newest Info: Ad Peeps is a banner rotator and text ad rotator - all in one that allows you to track, sell and manage banner ads,...

Inquira Apache Tomcat Default Login

Bonjour, During a recent penetration test, we discovered and worked with Inquira to close numerous web-based issues. The vendor has not replied back about a formal release of these issues, so I am posting this notice here to inform customers to check for an update for their products. You can...

Siemens ADSL SL2-141 CSRF Exploit

No description provided by source. ?php / ================================================ || Siemens ADSL SL2-141 Router CSRF Exploit || ================================================ - Successful attacks will allow remote access to the router over the internet. - Will Bruteforce the random...

Siemens ADSL SL2-141 XSRF Exploit

"; // Uses the default login to auth Admin:Admin, could use a dictionary instead. // Just some stuff to keep the user busy, aka Rickroll $mystr="Unbelivable moviefunction siera var bullshit='Possibly the funniest video on the web param name="movie"...

Siemens ADSL SL2-141 - Cross-Site Request Forgery

Siemens ADSL SL2-141 - Cross-Site Request Forgery "; // Uses the default login to auth Admin:Admin, could use a dictionary instead. // Just some stuff to keep the user busy, aka Rickroll $mystr="Unbelivable moviefunction siera var bullshit='Possibly the funniest video on the web param...

Siemens ADSL SL2-141 CSRF Exploit

Exploit for hardware platform in category remote exploits ================================= Siemens ADSL SL2-141 CSRF Exploit ================================= "; // Uses the default login to auth Admin:Admin, could use a dictionary instead. // Just some stuff to keep the user busy, aka Rickroll...

Siemens ADSL SL2-141 - Cross-Site Request Forgery

"; // Uses the default login to auth Admin:Admin, could use a dictionary instead. // Just some stuff to keep the user busy, aka Rickroll $mystr="Unbelivable moviefunction siera var bullshit='Possibly the funniest video on the web param...

Osmotic pre-Flash to get shell shortcut/Ewebeditor/ASP/ASPX/PHP the version of vulnerability-vulnerability warning-the black bar safety net

Recent thinking from the new writing blog, I always take someone else's stuff posted Today in the blog on yourself to write something, nothing technical content, even if a summary. Hope the newbies some help, the cattle people to the table to laugh at me, huh? ewebeditor, believe play the Black...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in the SAP Internet Communication Framework BC-MID-ICF in the SAP Basis component 700 before SP12, and 640 before SP20, allow remote attackers to inject arbitrary web script or HTML via certain parameters associated with the default login error pa...

bugmall shopping cart 2.5 - SQL Injection / Cross-Site Scripting

--==+================================================================================+==-- --==+ BUG MALL SHOPPING CART 2.5 AND PRIOR SQL, XSS, DEFAULT LOGINS VULNERABILITYS +==-- --==+================================================================================+==-- AUTHOR: t0pP8uZz & xprog...

cPanel <= 10.9.x (fantastico) Local File Inclusion Vulnerabilities

No description provided by source. Fantastico In all Version Cpanel 10.x = local File Include to the Note : Preparations php.ini in Cpanel hypothetical and They also in all WebServer Must provide username And pass and login :2082 To break the strongest protection modsecurity & safemode:On & Disab...

vegadns-dyn0.txt

VegaDNS XSS ----------- Desc: Multiple vulns in VegaDNS Risk: Medium to High Discovered by : dyn0 codeslaghatgmail.com http://0xdeadface.co.uk Project blurb : VegaDNS is a tinydns administration tool written in PHP to allow easy administration of DNS records through a web browser. Affected Versio...