Multiple Switch Vendors '__super' Account Backdoor

Nessus was able to log into the remote host as the 'super' user and a password based on the switch's MAC address. This is likely a built-in account that cannot be disabled and whose password cannot be changed. A remote attacker with knowledge of this switch's MAC address could exploit this by...

Default Password (0p3nm35h) for 'root' Account

The account 'root' on the remote host has the password '0p3nm35h'. An attacker may leverage this issue to gain total control of the affected system. Note that some network devices are known to use these credentials by default. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. account = "root";...

AdPeeps 'index.php' Multiple Vulnerabilities.

AdPeeps is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

httpdx Multiple Vulnerabilities

This host is installed with httpdx and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbhttpdxmultvuln.nasl 5306 2017-02-16 09:00:16Z teissa $ httpdx Multiple Vulnerabilities Authors: Sooraj KS Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net Th...

httpdx Multiple Vulnerabilities

httpdx is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2009-4945

AdPeeps 8.5d1 has a default password of admin for the admin account, which makes it easier for remote attackers to obtain access via requests to index.php...

CVE-2009-4945

CVE-2009-4945 affects AdPeeps 8.5d1, where a default admin password enables remote access via index.php. The vulnerability has CVSSv2 base score 7.5 (NETWORK vector, low attack complexity, no authentication). Impact described as partial confidentiality, integrity, and availability. Documents conf...

CVE-2009-4945

AdPeeps 8.5d1 has a default password of admin for the admin account, which makes it easier for remote attackers to obtain access via requests to index.php...

Default credentials

AdPeeps 8.5d1 has a default password of admin for the admin account, which makes it easier for remote attackers to obtain access via requests to index.php...

Siemens SIMATIC WinCC Default Password Authentication Bypass

Binary data scadawinccdefaultcreds.nbin...

Xampp 1.7.3 CSRF and Password disclosure Vulnerability

Exploit for php platform in category web applications ====================================================== Xampp 1.7.3 CSRF and Password disclosure Vulnerability ====================================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1...

CVE-2010-2469

The Linear eMerge 50 and 5000 uses a default password of eMerge for the IEIeMerge account, which makes it easier for remote attackers to obtain Video Recorder data by establishing a session to the device...

Default credentials

The Linear eMerge 50 and 5000 uses a default password of eMerge for the IEIeMerge account, which makes it easier for remote attackers to obtain Video Recorder data by establishing a session to the device...

CVE-2010-2469

The Linear eMerge 50 and 5000 uses a default password of eMerge for the IEIeMerge account, which makes it easier for remote attackers to obtain Video Recorder data by establishing a session to the device...

CVE-2010-2469

Affected product: Linear eMerge 50 and 5000 Video Recorder. Vulnerability: default password on the IEIeMerge account. Impact: remote attackers can obtain Video Recorder data by establishing a session to the device. Root cause: use of a default credential. Remediation: not provided in the documents.

CVE-2010-0595

Cisco Mediator Framework 1.5.1 before 1.5.1.build.14-eng, 2.2 before 2.2.1.dev.1, and 3.0 before 3.0.9.release.1 on the Cisco Network Building Mediator NBM-2400 and NBM-4800 and the Richards-Zeta Mediator 2500 has a default password for the administrative user account and unspecified other...

CVE-2010-0595

The CVE-2010-0595 case concerns Cisco Network Building Mediator (NBM) and Richards‑Zeta Mediator 2500, where default administrative credentials exist across multiple predefined accounts. According to Cisco’s advisory, vulnerable Mediator Framework releases include 1.5.x, 2.2.x, and 3.0.x prior to...

CVE-2010-2082

The web interface on the Cisco Scientific Atlanta WebSTAR DPC2100R2 cable modem with firmware 2.0.2r1256-060303 has a default administrative password aka SAPassword of W2402, which makes it easier for remote attackers to obtain privileged access...

CVE-2010-2083

CVE-2010-2083 involves Microsoft Dynamics GP where the system password has a default value of ACCESS. The connected sources confirm this as a design/configuration issue that could allow remote authenticated users to bypass access restrictions via unspecified vectors. The documents do not specify ...

CVE-2010-2082

The CVE-2010-2082 entry concerns the Cisco Scientific Atlanta WebSTAR DPC2100R2 cable modem. Affected component: the web interface on firmware 2.0.2r1256-060303. Root cause: default administrator password (SAPassword) W2402 is known, enabling easier privileged access for remote attackers. Impact ...