CVE-2018-17497

eVisitorPass contains default administrative credentials. An attacker could exploit this vulnerability to gain full access to the application...

CVE-2018-17497

CVE-2018-17497 affects eVisitorPass. It reports default administrative credentials that could let a local attacker gain full access to the application. CVSSv3.0 base score 7.8 (HIGH) with LOCAL access, low attack complexity, no user interaction, and HIGH confidentiality, integrity, and availabili...

CVE-2018-17492

EasyLobby Solo contains default administrative credentials. An attacker could exploit this vulnerability to gain full access to the application...

PT-2019-9491

Name of the Vulnerable Software and Affected Versions EasyLobby Solo affected versions not specified Description The issue concerns default administrative credentials in the application, which could be exploited by an attacker to gain full access. Recommendations At the moment, there is no...

CVE-2018-17497: Initialization of a Resource with an Insecure Default

eVisitorPass contains default administrative credentials. An attacker could exploit this vulnerability to gain full access to the application...

CVE-2018-17485: Initialization of a Resource with an Insecure Default

Lobby Track Desktop contains default administrative credentials. An attacker could exploit this vulnerability to gain full access to the application...

CVE-2018-17492: Use of Hard-coded Credentials

EasyLobby Solo contains default administrative credentials. An attacker could exploit this vulnerability to gain full access to the application...

PT-2019-9496

Name of the Vulnerable Software and Affected Versions eVisitorPass affected versions not specified Description The issue concerns default administrative credentials in the application, which could be exploited by an attacker to gain full access. Recommendations At the moment, there is no...

PT-2019-9484

Name of the Vulnerable Software and Affected Versions Lobby Track Desktop affected versions not specified Description The issue concerns default administrative credentials in the application, which could be exploited by an attacker to gain full access. Recommendations At the moment, there is no...

The vulnerability of the embedded software in the CNC11 TITANIUM mini system allows a hacker to gain full access to the system.

The vulnerability of the embedded software of the CNC11 TITANIUM mini system is related to the use of a default weak password for the root account, information about which is not available in the documentation. Exploiting this vulnerability could allow an attacker, operating remotely, to gain ful...

EVLink Parking Code Injection Vulnerability

Schneider Electric EVLink Parking is a commercial electric vehicle charging solution from Schneider Electric, France. A code injection vulnerability exists in Schneider Electric EVLink Parking 3.2.0-12v1 and prior versions. A remote attacker could exploit this vulnerability to execute code and ga...

EVlink Parking SQL Injection Vulnerability

Schneider Electric EVLink Parking is a commercial electric vehicle charging solution from Schneider Electric, France. A SQL injection vulnerability exists in Schneider Electric EVLink Parking 3.2.0-12v1 and prior versions. A remote attacker could exploit this vulnerability to gain full access to...

Default credentials

ChipsBank UMPTool saves the password to the NAND with a simple substitution cipher, which allows attackers to get full access when having physical access to the device...

PT-2018-15097

Name of the Vulnerable Software and Affected Versions ChipsBank UMPTool affected versions not specified Description The issue concerns the storage of passwords in the NAND using a simple substitution cipher. This allows attackers to gain full access to the device when they have physical access to...

CVE-2018-12037: Undefined Security Weakness

An issue was discovered on Samsung 840 EVO and 850 EVO devices only in "ATA high" mode, not vulnerable in "TCG" or "ATA max" mode, Samsung T3 and T5 portable drives, and Crucial MX100, MX200 and MX300 devices. Absence of a cryptographic link between the password and the Disk Encryption Key allows...

PT-2018-2151

Name of the Vulnerable Software and Affected Versions TeNIX versions affected versions not specified Description The issue is related to the use of a weak default password for the root account in the TeNIX operating system of МФК1500 and МФК3000 programmable logic controllers. This password...

IBM DB2 power lifting vulnerability (CNVD-2018-13458)

IBM DB2 is a set of relational database management system from IBM in the United States. The main execution environments for this system are UNIX, Linux, IBM i, z/OS, and Windows server versions. An untrustworthy search path vulnerability exists in IBM DB2 including DB2 Connect Server based on...

Stored XSS in contacts via group shares (NC-SA-2018-005)

A missing sanitization of search results for an autocomplete field could lead to a stored XSS requiring user-interaction. The missing sanitization only affected group names, hence malicious search results could only be crafted by privileged users like admins or group admins...

Canon LBP7110Cw Authentication Bypass

Exploit Title: Canon LBP7110Cw - Authentication Bypass Date: 2018-06-07 Exploit Author: Huy Kha Vendor Homepage: http://global.canon.com Version: LBP7110Cw CVE: CVE-2018-12049 Severity: High Leads to full System Manager Mode account take-over Description : A remote attacker can bypass the...

Canon LBP6030w Authentication Bypass

Exploit Title: Canon LBP6030w - Authentication Bypass Date: 2018-06-07 Exploit Author: Huy Kha Vendor Homepage: http://global.canon.com Version: LBP6030w Severity: High Leads to full System Manager Mode account take-over CVE: CVE-2018-12049 Description : A remote attacker can bypass the System...