CVE-2016-10928

The onelogin-saml-sso plugin before 2.2.0 for WordPress has a hardcoded @@@nopass@@@ password for just-in-time provisioned users...

CVE-2016-10928

The onelogin-saml-sso plugin before 2.2.0 for WordPress has a hardcoded @@@nopass@@@ password for just-in-time provisioned users...

CVE-2016-10928

The onelogin-saml-sso plugin before 2.2.0 for WordPress has a hardcoded @@@nopass@@@ password for just-in-time provisioned users...

CVE-2016-10928

The onelogin-saml-sso plugin before 2.2.0 for WordPress has a hardcoded @@@nopass@@@ password for just-in-time provisioned users...

PT-2019-7724

Name of the Vulnerable Software and Affected Versions onelogin-saml-sso plugin versions prior to 2.2.0 Description The issue concerns a hardcoded password @@@nopass@@@ used for just-in-time provisioned users. Recommendations For versions prior to 2.2.0, update to version 2.2.0 or later to resolve...

Fortinet FortiRecorder 2.7.3 Hardcoded Password Vulnerability

Fortinet FortiRecorder 2.7.3 Hardcoded Password Vulnerability Original posting: https://xor.cat/2019/08/05/fortinet-fortirecorder-hardcoded-password/ Text archive available here: https://xor.cat/archive/2019/08/05/fortinet-fortirecorder-hardcoded-password.txt Background In June of 2019 I discover...

PT-2019-7658

Name of the Vulnerable Software and Affected Versions Neet AirStream NAS version 1.1 Description The issue concerns a hardcoded password for the root account, which is set to ifconfig. This password cannot be changed through the configuration page, posing a security risk. Recommendations For Neet...

Fortinet FortiRecorder 2.7.3 Hardcoded Password

Original posting: https://xor.cat/2019/08/05/fortinet-fortirecorder-hardcoded-password/ Text archive available here: https://xor.cat/archive/2019/08/05/fortinet-fortirecorder-hardcoded-password.txt Background In June of 2019 I discovered a vulnerability in Fortinet's FortiRecorder1 product which...

CVE-2017-8415

An issue was discovered on D-Link DCS-1100 and DCS-1130 devices. The device has a custom telnet daemon as a part of the busybox and retrieves the password from the shadow file using the function getspnam at address 0x00053894. Then performs a crypt operation on the password retrieved from the use...

CVE-2019-12920

On Shenzhen Cylan Clever Dog Smart Camera DOG-2W and DOG-2W-V4 devices, an attacker on the network can login remotely to the camera and gain root access. The device ships with a hardcoded 12345678 password for the root account, accessible from a TELNET login prompt...

CVE-2019-12920

On Shenzhen Cylan Clever Dog Smart Camera DOG-2W and DOG-2W-V4 devices, an attacker on the network can login remotely to the camera and gain root access. The device ships with a hardcoded 12345678 password for the root account, accessible from a TELNET login prompt...

CVE-2019-12920

Summary: CVE-2019-12920 affects Shenzhen Cylan Clever Dog Smart Camera DOG-2W and DOG-2W-V4. Vulnerability: devices ship with a hardcoded root password (12345678) accessible from a TELNET prompt, enabling a network attacker to login remotely and gain root access. Root cause: hardcoded credential ...

PT-2019-13022

Name of the Vulnerable Software and Affected Versions Shenzhen Cylan Clever Dog Smart Camera versions DOG-2W and DOG-2W-V4 Description The issue allows an attacker on the network to login remotely to the camera and gain root access. This is possible because the device ships with a hardcoded...

Schneider Electric Magelis XBT HMI Hardcoded Configuration Password

Binary data 720236.prm...

Weak Password Vulnerability in Trunkey's ICP/IP Address Information Filing Management System

Trunkey ICP/IP address information filing management system is a set of ISP service provider enterprise side filing management system. A weak password vulnerability exists in the Trunkey ICP/IP address information filing management system. The vulnerability is due to the fact that the password is...

CVE-2019-6499

Teradata Viewpoint before 14.0 and 16.20.00.02-b80 contains a hardcoded password of TDv1i2e3w4 for the viewpoint database account in viewpoint-portal\conf\server.xml that could potentially be exploited by malicious users to compromise the affected system...

CVE-2019-6499

Teradata Viewpoint before 14.0 and 16.20.00.02-b80 contains a hardcoded password of TDv1i2e3w4 for the viewpoint database account in viewpoint-portal\conf\server.xml that could potentially be exploited by malicious users to compromise the affected system...

CVE-2019-6499

Teradata Viewpoint before 14.0 and 16.20.00.02-b80 contains a hardcoded password of TDv1i2e3w4 for the viewpoint database account in viewpoint-portal\conf\server.xml that could potentially be exploited by malicious users to compromise the affected system...

CVE-2019-6499

CVE-2019-6499 affects Teradata Viewpoint prior to 14.0 and 16.20.00.02-b80, where a hardcoded password (TDv1i2e3w4) was stored for the viewpoint database account in viewpoint-portal\conf\server.xml. This static credential could allow a malicious user to compromise the affected system. The provide...

PT-2019-18121

Name of the Vulnerable Software and Affected Versions Teradata Viewpoint versions prior to 14.0 Teradata Viewpoint version 16.20.00.02-b80 and earlier Description The issue concerns a hardcoded password TDv1i2e3w4 for the viewpoint database account, which could be exploited by malicious users to...