Lucene search
+L

1353 matches found

Exploit DB
Exploit DB
•added 2024/03/18 12:00 a.m.•317 views

TELSAT marKoni FM Transmitter 1.9.5 - Backdoor Account Information Disclosure

TELSAT marKoni FM Transmitter 1.9.5 Backdoor Account Vendor: TELSAT Srl Product web page: https://www.markoni.it Affected version: Markoni-D Compact FM Transmitters Markoni-DH Exciter+Amplifiers FM Transmitters Markoni-A Analogue Modulator FM Transmitters Firmware: 1.9.5 1.9.3 1.5.9 1.4.6 1.3.9...

5.3AI score
SaveExploits0
OSV
OSV
•added 2024/03/06 11:16 a.m.•44 views

BIT-GITLAB-2022-1162

A hardcoded password was set for accounts registered using an OmniAuth provider e.g. OAuth, LDAP, SAML in GitLab CE/EE versions 14.7 prior to 14.7.7, 14.8 prior to 14.8.5, and 14.9 prior to 14.9.2 allowing attackers to potentially take over accounts...

9.8CVSS9.3AI score0.75637EPSS
SaveExploits3References4
Cvelist
Cvelist
•added 2024/02/15 8:32 a.m.•43 views

CVE-2023-4539 Hardcoded password in Comarch ERP XL

Use of a hard-coded password for a special database account created during Comarch ERP XL installation allows an attacker to retrieve embedded sensitive data stored in the database. The password is same among all Comarch ERP XL installations. This issue affects ERP XL: from 2020.2.2 through 2023....

7.5CVSS7.8AI score0.00515EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2024/02/15 8:32 a.m.•20 views

CVE-2023-4539 Hardcoded password in Comarch ERP XL

Use of a hard-coded password for a special database account created during Comarch ERP XL installation allows an attacker to retrieve embedded sensitive data stored in the database. The password is same among all Comarch ERP XL installations. This issue affects ERP XL: from 2020.2.2 through 2023....

7.5CVSS6.8AI score0.00515EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2024/02/09 12:00 a.m.•15 views

PT-2024-14214 · Allegra · Allegra

Name of the Vulnerable Software and Affected Versions: Allegra affected versions not specified Description: This issue allows remote attackers to bypass authentication on affected installations of Allegra. The specific flaw exists within the configuration of a database, resulting from the use of ...

9.8CVSS7AI score0.01372EPSS
SaveExploits0References4
Zero Day Initiative
Zero Day Initiative
•added 2024/02/09 12:00 a.m.•30 views

Allegra Hard-coded Credentials Authentication Bypass Vulnerability

This vulnerability allows remote attackers to bypass authentication on affected installations of Allegra. Authentication is not required to exploit this vulnerability. The specific flaw exists within the configuration of a database. The issue results from the use of a hardcoded password. An...

9.8CVSS7.2AI score0.01372EPSS
SaveExploits0References1
OSV
OSV
•added 2024/02/06 2:15 a.m.•14 views

CVE-2024-22853

D-LINK Go-RT-AC750 GORTAC750A1FWv101b03 has a hardcoded password for the Alphanetworks account, which allows remote attackers to obtain root access via a telnet session...

9.8CVSS5.8AI score0.04834EPSS
SaveExploits1References2
NVD
NVD
•added 2024/02/06 2:15 a.m.•58 views

CVE-2024-22853

D-LINK Go-RT-AC750 GORTAC750A1FWv101b03 has a hardcoded password for the Alphanetworks account, which allows remote attackers to obtain root access via a telnet session...

9.8CVSS9.4AI score0.04834EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
•added 2024/02/06 12:00 a.m.•6 views

CVE-2024-22853

D-LINK Go-RT-AC750 GORTAC750A1FWv101b03 has a hardcoded password for the Alphanetworks account, which allows remote attackers to obtain root access via a telnet session...

9.5AI score0.04834EPSS
SaveExploits1References2
Cvelist
Cvelist
•added 2024/02/06 12:00 a.m.•56 views

CVE-2024-22853

D-LINK Go-RT-AC750 GORTAC750A1FWv101b03 has a hardcoded password for the Alphanetworks account, which allows remote attackers to obtain root access via a telnet session...

9.6AI score0.04834EPSS
SaveExploits1References2
CVE
CVE
•added 2024/02/06 12:00 a.m.•235 views

CVE-2024-22853

CVE-2024-22853 affects the D-LINK Go-RT-AC750 device with firmware GORTAC750_A1_FW_v101b03, where a hardcoded Alphanetworks password allows remote attackers to obtain root access via a telnet session. Public details in the connected documents confirm the vulnerability type (hardcoded credentials)...

9.8CVSS9.3AI score0.04834EPSS
SaveExploits1References2Affected Software1
Positive Technologies
Positive Technologies
•added 2024/02/05 12:00 a.m.•30 views

PT-2024-1692 · D Link · D-Link Go-Rt-Ac750

Name of the Vulnerable Software and Affected Versions: D-LINK Go-RT-AC750 version GORTAC750 A1 FW v101b03 Description: The issue is related to a hardcoded password for the Alphanetworks account in the D-LINK Go-RT-AC750 router, allowing remote attackers to obtain root access via a telnet session...

9.8CVSS9.2AI score0.04834EPSS
SaveExploits1References11
zdt
zdt
•added 2024/01/31 12:00 a.m.•248 views

TELSAT marKoni FM Transmitter 1.9.5 Backdoor Account Vulnerability

TELSAT marKoni FM Transmitter version 1.9.5 has a hidden super administrative account factory that has the hardcoded password inokram25 that allows full access to the web management interface configuration. TELSAT marKoni FM Transmitter 1.9.5 Backdoor Account Vendor: TELSAT Srl Product web page:...

7.5AI score
SaveExploits0
Packet Storm
Packet Storm
•added 2024/01/31 12:00 a.m.•246 views

TELSAT marKoni FM Transmitter 1.9.5 Backdoor Account

TELSAT marKoni FM Transmitter 1.9.5 Backdoor Account Vendor: TELSAT Srl Product web page: https://www.markoni.it Affected version: Markoni-D Compact FM Transmitters Markoni-DH Exciter+Amplifiers FM Transmitters Markoni-A Analogue Modulator FM Transmitters Firmware: 1.9.5 1.9.3 1.5.9 1.4.6 1.3.9...

7.4AI score
SaveExploits0
Zero Science Lab
Zero Science Lab
•added 2024/01/31 12:00 a.m.•336 views

TELSAT marKoni FM Transmitter 1.9.5 Backdoor Account

Summary Professional FM transmitters. Description The transmitter has a hidden super administrative account 'factory' that has the hardcoded password 'inokram25' that allows full access to the web management interface configuration. The factory account is not visible in the users page of the...

9.8CVSS5.8AI score0.00524EPSS
SaveExploits1
OSV
OSV
•added 2024/01/30 3:15 p.m.•20 views

CVE-2024-24324

TOTOLINK A8000RU v7.1cu.643B20200521 was discovered to contain a hardcoded password for root stored in /etc/shadow...

9.8CVSS5.8AI score0.00659EPSS
SaveExploits1References1
NVD
NVD
•added 2024/01/30 3:15 p.m.•29 views

CVE-2024-24324

TOTOLINK A8000RU v7.1cu.643B20200521 was discovered to contain a hardcoded password for root stored in /etc/shadow...

9.8CVSS9.6AI score0.00659EPSS
SaveExploits1References1
Prion
Prion
•added 2024/01/30 3:15 p.m.•25 views

Hardcoded credentials

TOTOLINK A8000RU v7.1cu.643B20200521 was discovered to contain a hardcoded password for root stored in /etc/shadow...

7.5CVSS7.6AI score0.00659EPSS
SaveExploits1References1Affected Software1
Positive Technologies
Positive Technologies
•added 2024/01/30 12:00 a.m.•15 views

PT-2024-20359 · Totolink · Totolink A8000Ru

Name of the Vulnerable Software and Affected Versions: TOTOLINK A8000RU version 7.1cu.643 B20200521 Description: The issue is related to a hardcoded password for the root user stored in the /etc/shadow file. This could potentially allow unauthorized access to the system. Recommendations: For...

9.8CVSS9.2AI score0.00659EPSS
SaveExploits1References5
Cvelist
Cvelist
•added 2024/01/30 12:00 a.m.•39 views

CVE-2024-24324

TOTOLINK A8000RU v7.1cu.643B20200521 was discovered to contain a hardcoded password for root stored in /etc/shadow...

9.8AI score0.00659EPSS
SaveExploits1References1
Rows per page
Query Builder