1261 matches found
Cisco Network Services NetFlow Collection Engine default account
Account with hardcoded password is used for NetFlow information gathering...
Barracuda Networks Spam Firewall存在多个漏洞
Barracuda Networks Spam Firewall是一款用于保护邮件服务器的集成硬件和软件垃圾邮件解决方案。 Barracuda Networks Spam Firewall存在多个安全问题，远程攻击者可以利用漏洞获得密码和文件信息。 Barracuda Networks Spam Firewall 3.3.01.001到3.3.02.053版本存在内置"guest"帐户密码"bnadmin99"，利用这个帐户可登录WEB接口。...
barracudaExec.txt
Severity: High - Full system compromise possible Date: 04 August 2006 Discovered by: Matthew Hall [email protected] Credits for original discovery to Greg Sinclair Discovered on: 03 Aug 2006 Summary: Lack of input sanitisation in the Linux based Barracuda spam firewall web interface allows executio...
barracudeHardcode.txt
Title: Barracuda Hardcoded Password Vulnerability Severity: High Sensitive Information Disclosure Date: 01 August 2006 Version Affected: Barracuda Spam Firewall version 3.3.01.001 to 3.3.03.053 Discovered by: Greg Sinclair [email protected] Discovered on: 28 May 2006 Overview: Barracuda Sp...
barracudeArbitrary.txt
Title: Barracuda Arbitrary File Disclosure Severity: High Sensitive Information Disclosure Date: 01 August 2006 Version Affected: Barracuda Spam Firewall version 3.3.01.001 to 3.3.03.053 Discovered by: Greg Sinclair [email protected] Discovered on: 29 May 2006 Overview: Barracuda Spam...
CVE-2006-4082
Barracuda Spam Firewall BSF, possibly 3.3.03.053, contains a hardcoded password for the admin account for logins from 127.0.0.1 localhost, which allows local users to gain privileges...
CVE-2006-4082
Barracuda Spam Firewall BSF, possibly 3.3.03.053, contains a hardcoded password for the admin account for logins from 127.0.0.1 localhost, which allows local users to gain privileges...
CVE-2006-4082
Barracuda Spam Firewall (BSF) is affected by CVE-2006-4082. Concrete details from connected sources indicate default credentials in affected BSF firmware: versions 3.3.01.001 to 3.3.02.053 expose a guest account and a fixed admin password that cannot be modified by an administrator, enabling a re...
Barracuda Spam Firewall <= 3.3.03.053 Remote Code Execution
Exploit for hardware platform in category remote exploits =========================================================== Barracuda Spam Firewall = 3.3.03.053 Remote Code Execution =========================================================== Title: Barracuda Arbitrary File Disclosure + Command Executi...
[Full-disclosure] Barracuda Spam Firewall: Administrator Level Remote Command Execution [ID-20060804-01]
Severity: High - Full system compromise possible Date: 04 August 2006 Discovered by: Matthew Hall [email protected] Credits for original discovery to Greg Sinclair Discovered on: 03 Aug 2006 Summary: Lack of input sanitisation in the Linux based Barracuda spam firewall web interface allows executio...
Barracuda Vulnerability: Hardcoded Password [NNL-20060801-01]
Title: Barracuda Hardcoded Password Vulnerability Severity: High Sensitive Information Disclosure Date: 01 August 2006 Version Affected: Barracuda Spam Firewall version 3.3.01.001 to 3.3.03.053 Discovered by: Greg Sinclair [email protected] Discovered on: 28 May 2006 Overview: Barracuda Sp...
CVE-2005-1837
Affected product: Fortinet FortiOS 2.x Fortinet firewall. Vulnerability: Hardcoded username with the password set to the device serial number, enabling local users with console access to gain privileges. Impact: Privilege escalation to higher privileges for local attackers. Root cause: Credential...
CVE-2004-2050
eSeSIX Thintune thin clients running firmware 2.4.38 and earlier allow local users to gain privileges by pressing CTRL-SHIFT-ALT-DEL and entering the "maertsJ" password, which is hard-coded into lshell...
[PoC] Nasty bug(s) found in Axis Network Camera/Video Servers
/ Public disclosure due lack of responce from Axis Communications / I have found a couple of bugs in Axis Network Camera/Video Servers. I have all Axis stuff in one e-mail, instead of multiple, lazy me.. ; Vulnerable: Axis 2100/2110/2120/2420/2130 Network Camera, 2400/2401 Video Server. There may...
eSeSIX.txt
eSeSIX Thintune thin client multiple vulnerabilities IT-Consult, 2004-07-24 Background - -------- Thintune is a series of thin client appliances sold by eSeSIX GmbH, Germany. They offer ICA, RDP, X11 and SSH support based on a customized Linux platform. See http://www.thintune.com for details...
Cisco WLSE/HSE backdoor account
There hardcoded username/password to access device...
Огромная дыра в Interbase
В базу вкомпилян универсальный пароль доступа, дающий удаленный доступ с административными привелегиями. Всвязи с тем что Inprise Borland открыл сорсы пароль теперь известе всем желающим в текстовом виде...
BorlandInprise Interbase 4.05.06.0 - Backdoor Password
BorlandInprise Interbase 4.05.06.0 - Backdoor Password source: https://www.securityfocus.com/bid/2192/info Interbase is an open source relational database offered by Borland Inprise Corporation. Interbase contains a backdoor user account and password called "LOCKSMITH". When accessed this account...
jdedwards.app.passwd.txt
Date: Mon, 3 May 1999 15:09:11 -0400 From: "Stout, Bill" To: [email protected] Subject: JDEdwards application passwords Anyone have experience with JDEdwards applicationsWorldVision/OneWorld? The user JDE password JDE is written into multiple places in config files, and is typically installed...
