CVE-2010-5306

This CVE concerns GE Healthcare Optima imaging systems (Optima 520/540/640/680) with default or hard-coded credentials, enabling remote authentication bypass. The ICS-CERT advisory (ICSMA-18-037-02) confirms multiple GE products affected; exploitation could allow an attacker to bypass authenticat...

CVE-2011-5322

GE Healthcare Centricity PACS-IW (Centricity PACS-IW) is vulnerable via default/hard-coded credentials documented for CVE-2011-5322 in Centricity Analytics Server 1.1, notably in the Webmin interface where several accounts use known passwords (e.g., V0yag3r, G3car3s, geservice). Exploitation coul...

CVE-2010-5309

GE Healthcare CADStream Server has a default password of confirma for the admin user, which has unspecified impact and attack vectors...

CVE-2003-1603

GE Healthcare Discovery VH has a default password of 1 interfile for the ftpclient user of the Interfile server or 2 "2" for the LOCAL user of the FTP server for the Codonics printer, which has unspecified impact and attack vectors...

CVE-2003-1603

CVE-2003-1603 affects GE Healthcare Discovery VH and Millenium VG (and related GE devices listed in ICS advisory) due to default/hard-coded credentials. Root cause: credentials (ftpclient: interfile; LOCAL: 2) left unchanged, enabling remote authentication bypass. Impact in sources: potential rem...

CVE-2014-7233

GE Healthcare Precision THUNIS-800+ has a default password of 1 1973 for the factory default System Utilities menu, 2 TH8740 for installation using TH8740122Setup.exe, 3 hrml for "Setup and Activation" using DSASetup, and 4 an empty string for Shutter Configuration, which has unspecified impact a...

CVE-2012-6660

GE Healthcare Precision MP/i is affected by a vulnerability (CVE-2012-6660) due to default or hard-coded credentials for multiple accounts: serviceapp uses the orion password, clinical operator uses orion, and administrator uses PlatinumOne. The ICS advisory (GE Healthcare vulnerability) confirms...

CVE-2006-7253

Ge Healthcare Infinia II is affected by CVE-2006-7253 due to the use of default credentials across five accounts (infinia, acqservice, Administrator, emergency, InfiniaAdmin). The CNVD-2015-05143 entry explicitly states that an attacker can exploit this to take control of the device, indicating a...

Researchers Hack TrackingPoint Rifle's Precision Targeting System

TrackingPoint rifles are state-of-the-art precision hunting and sniper rifles that come equipped with a networked tracking scope that’s accessible via Wi-Fi, and comes complete with USB ports and a mobile app. It’s almost foolproof shooting, albeit at a $13,000 price tag. And the security of all ...

用友多个系统通用漏洞设计缺陷(自带已保存的口令)

简要描述： 详细说明： 默认密码 其实是根本不用输入密码，账号密码自动保存，点确认就登入了、 导致 源码泄露 可调试 源码 这套 系统很多套用友系统都带着，具体请看 WooYun: 用友多个系统通用漏洞导致接口信息泄露引发多数据库信息泄露（涉及多个大型厂商） 然后从这个得来的灵感 http://gpms.foton.com.cn/uapws/ http://erp.suning.com.cn/uapws/ http://fm2.cscec.com/uapws/ http://bap.ufida.com/uapws/ http://61.178.99.236:9002/uapws/...

Cisco Unified Communications Domain Manager Default Static Privileged Account Vulnerability

Cisco Unified Communications Manager is an enterprise-class IP telephony call processing system. The Cisco Unified Communications Domain Manager Platform has a privileged account with a default static password, which can be exploited by an unauthenticated, remote attacker to log in with root user...

Cisco UCDM Platform Ships With Default, Static Password for Root Account

A week after admitting that several of its security appliances ship with static SSH keys, Cisco warned customers on Wednesday that its Unified Communications Domain Manager platform has a default, static password for an account that carries root privileges. The vulnerability affects versions of t...

Cisco Unified Communications Domain Manager Default Static Privileged Account Credentials

A vulnerability in the Cisco Unified Communications Domain Manager Platform Software could allow an unauthenticated, remote attacker to login with the privileges of the root user and take full control of the affected system. The vulnerability occurs because a privileged account has a default and...

The vulnerability of the OpenStack cloud service platform allows a hacker to execute arbitrary commands.

The vulnerability of the OpenStack cloud platform lies in the use of the default password “CHANGEME” for the pcsd daemon. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands remotely...

Hui Wen libsys library management system, several vulnerability analysis-vulnerability warning-the black bar safety net

libsys is a library management system, pretty much learn to use, for details seewebsite. /zplug/ajaxasynlink. old. php any file containing the you can view the backend admin password, v5. 0 version can getshell） /admin/login. php any user login vulnerability v5. 0 version can getshell） Default...

Redis Server Default Password (TCP)

The remote Redis server is using a default password. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:redis:redis"; ifdescription...

Default Password (password) for 'emcupdate' Account

The account 'emcupdate' on the remote EMC PowerPath virtual appliance has the default password 'password'. An attacker can leverage this issue to gain access to the affected system and launch further attacks against it. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. account = "emcupdate";...

Mail.ru: tt-mac.i.mail.ru: Quagga 0.99.23.1 (Router) : Default password and default enable password

telnet 185.5.138.229 2601 Пароль zebra Пароль на enable - zebra...

ClusterLabs Pacemaker PCS Daemon Default Password

The remote ClusterLabs Pacemaker PCS daemon uses a known default set of credentials. This allows a remote attacker to run arbitrary commands on cluster members. Note that some package deployment systems, such as Puppet, may be responsible for setting these default credentials. C Tenable Network...

openstack-puppet-modules: pacemaker configured with default password

It was discovered that the puppet manifests, as provided with the openstack-puppet-modules package, would configure the pcsd daemon with a known default password. If this password was not changed and an attacker was able to gain access to pcsd, they could potentially run shell commands as root...