Make-and-Break

Make-and-Break Crear y explotar una Máquina Virtual vulnerable Descripción: Construí una máquina virtual personalizada, ejecutando Ubuntu 18.04.1 y Webmin 1.810. Usando CVE-2019-15107 para explotar una puerta trasera en la Interfaz de Administración del Sistema Linux PRUEBA DE CONCEPTO --- Se...

EUVD-2017-15738

Malware in sbrugna...

CVE-2019-0159

Insufficient memory protection in the Linux Administrative Tools for IntelR Network Adapters before version 24.3 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2017-6684

A vulnerability in Cisco Elastic Services Controllers could allow an authenticated, remote attacker to log in to an affected system as the Linux admin user, aka an Insecure Default Credentials Vulnerability. More Information: CSCvc76651. Known Affected Releases: 21.0.0...

Default credentials

A vulnerability in Cisco Elastic Services Controllers could allow an authenticated, remote attacker to log in to an affected system as the Linux admin user, aka an Insecure Default Credentials Vulnerability. More Information: CSCvc76651. Known Affected Releases: 21.0.0...

CVE-2017-6684

Cisco Elastic Services Controller (ESC) contains an insecure default credentials vulnerability. An authenticated attacker could log in as the Linux admin user due to a default, weak, hard-coded password. Affected release: 21.0.0. The Cisco advisory notes there are no workarounds; it does not spec...

CVE-2017-6684

A vulnerability in Cisco Elastic Services Controllers could allow an authenticated, remote attacker to log in to an affected system as the Linux admin user, aka an Insecure Default Credentials Vulnerability. More Information: CSCvc76651. Known Affected Releases: 21.0.0...

Cisco Elastic Services Controller Insecure Default Credentials Vulnerability

A vulnerability in Cisco Elastic Services Controllers could allow an authenticated, remote attacker to log in to an affected system as the Linux admin user. The vulnerability is due to the existence of a default, weak, hard-coded password for the Linux admin user of an affected system. A successf...