datapower-redis-rce-exploit

datapower-redis-rce-exploit CVE-2020-5014 Ein POC für den IBM DataPower authentifizierten Redis-RCE-Exploit unter Ausnutzung der Funktion „Test Message“. Vollständige Erklärung und Demo auf YouTube Blogbeitrag auf tomcope.com Erklärung Mithilfe der DataPower-Funktion „Send a Test Message“, die üb...

Poc-CVE-2024-57040

Poc-CVE-2024-57040 CVE-2024-57040 ist eine Sicherheitslücke, die in bestimmten TP-Link TL-WR845N Router-Modellen gefunden wurde. Im Besonderen betrifft es ein "hartcodiertes" Passwort für das Root-Konto des Routers. Dies bedeutet, dass ein standardmäßiges, unveränderliches Passwort in die...

Viessmann Vitogate 300 - Hardcoded Password

A critical vulnerability in Viessmann Vitogate 300 up to 2.1.3.0 allows attackers to authenticate using hardcoded credentials in the Web Management Interface. id: CVE-2023-5222 info: name: Viessmann Vitogate 300 - Hardcoded Password author: ritikchaddha severity: critical description: | A critica...

unknownpwn.github.io

Vulnerabilidades e Exploits em Video Walls LED da Tecnovision. Do SQLi ao acesso total de root. Introdução: A Tecnovision é uma fabricante de Video Walls LED utilizados em arenas por exemplo, o Estádio de Twickenham, salas de concerto, shopping centers, como sinalização rodoviária e muito, muito...

CVE-2022-1162

CVE-2022-1162 GitLab CE/EE 14.714.7.7 이전, 14.814.8.5 이전, 14.914.9.2 이전 버전에서 OmniAuth 공급자예: OAuth, LDAP, SAML를 사용하여 등록된 계정에 하드코딩된 비밀번호가 설정되어 있어, 공격자가 계정을 탈취할 수 있었습니다. 익스플로잇: 새 GitLab 계정첫 번째 영향을 받는 버전 이후에 생성되었고, GitLab이 패치된 버전보다 이전인 경우은 다음 비밀번호로 로그인할 수 있습니다: 123qweQWE!@000000000 참조:...

open-sammy

SAMMY Open Source v2 Questo repository ospita la versione open source di SAMMY - lo strumento OWASP SAMM. https://owasp.org/www-project-open-sammy/ Licenza Questo progetto è concesso in licenza secondo i termini della Creative Commons Attribution-ShareAlike 4.0 International License. Consulta il...

CVE-2022-26138

CVE-2022-26138 1. परिचय Confluence हार्डकोडेड पासवर्ड POC 2. उपयोग root@kitploit: poc -f host.txt // बल्क स्कैन poc -h 192.168.1.1 // एकल स्कैन 3. अस्वीकरण यह उपकरण केवल सीखने, अनुसंधान और स्व-जांच के लिए है। इसका उपयोग अवैध उद्देश्यों के लिए नहीं किया जाना चाहिए। कृपया संबंधित कानूनों और...

CVE-2026-55579

CVE-2026-55579 — Pheditor : Mot de passe par défaut codé en dur menant à une exécution de code à distance RCE -critical TL;DR : Pheditor toutes les versions embarque un mot de passe administrateur par défaut codé en dur admin dans son code source. Il n'y a aucun changement forcé de mot de passe...

CVE-2024-56429

CVE-2024-56429 Accesso al database locale di iLabClient Estrarre la password del database iLabClient utilizza un database Apache Derby per archiviare i dati richiesti localmente. Per garantire la crittografia, per la creazione viene utilizzata una bootPassword, che può essere estratta dal codice...

CVE-2020-25078

CVE-2020-25078 Istruzioni instructions Metti l'URL di attacco nella stessa directory di ip.txt The attack IP is placed in the same directory as ip.txt Terminal log root@localhost:/CVE-2020-25078ls CVE-2020-25078.py ip.txt root@localhost:/CVE-2020-25078cat ./ip.txt https://xxx.xxx.xxx.xxx:3128...

mcafee_atd_CVE-2019-3663

McAfee ATD CVE-2019-3663 McAfee Advanced Threat Defense ATD 4.6.x und früher - Hartcodiertes Root-Passwort Sicherheitsbulletin: https://kc.mcafee.com/corporate/index?page=content&id=SB10304 Interessante Shadow-Einträge root@kitploit:...

Lockbit-Black-3.0

Lockbit-Black-3.0 Passwort ist: 1234...

CVE-2024-22853

CVE-2024-22853 D-LINK Go-RT-AC750 GORTAC750A1FWv101b03 dispone di una password hardcoded per l'account Alphanetworks, che consente a un attaccante remoto di ottenere accesso root tramite una sessione telnet. PoC...

PT-2026-71873

A flaw has been found in Tenda CH, CP and TX3 V21.x/V22.x/V25.x/V26.x/V27.x. Affected by this issue is some unknown functionality of the component SSH. Executing a manipulation can lead to use of hard-coded password. It is possible to launch the attack remotely. The attack requires a high level o...

Malicious code in log-min (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5dc78815e8c40947273929a7224aa04230de911771e62580045fb8bb213468c9 The package publishes as 'log-min' with a description claiming it is a JavaScript library for the Theta Blockchain, while its README identifies the...

MAL-2026-11146 Malicious code in sigchain-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 034ba6bdd11139e40b062606dfa180a60727249035899eded96d34797b63a026 The published dist bundles dist/sigchain-js.cjs.js, dist/sigchain-js.esm.js, dist/sigchain-js.umd.js contain top-level code that reads an encrypted...

Malicious code in chain-analyze (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb22a3b9c64598bc202456844105c3e3e7f7e7185abe335b2694d85deb1b6c9d The published tarball's dist bundles dist/sigchain-js.cjs.js, dist/sigchain-js.esm.js, dist/sigchain-js.umd.js execute at module load: they read an...

MAL-2026-11133 Malicious code in chain-analyze (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb22a3b9c64598bc202456844105c3e3e7f7e7185abe335b2694d85deb1b6c9d The published tarball's dist bundles dist/sigchain-js.cjs.js, dist/sigchain-js.esm.js, dist/sigchain-js.umd.js execute at module load: they read an...

CVE-2026-55579

CVE-2026-55579 affects the PHP single-file editor Pheditor. From 2.0.1 up to before 2.0.6, it ships with a hardcoded default password (admin) whose SHA-512 hash is in pheditor.php:11, with no mechanism to force a first-login password change. An attacker using the default credentials gains full ac...

CVE-2026-55579 Pheditor: Hardcoded default password 'admin' with no forced change enables full application compromise

Pheditor is a single-file editor and file manager written in PHP. From version 2.0.1 to before version 2.0.6, Pheditor ships with a hardcoded default password admin SHA-512 hash stored at pheditor.php:11. There is no mechanism to force a password change on first login. Any deployment using the...