46 matches found
SUSE CVE-2005-4887
NWFTPD.nlm before 5.06.05 in the FTP server in Novell NetWare 6.5 SP5 allows attackers to have an unspecified impact via vectors related to passwords...
CVE-2021-47707 COMMAX CVD-Axx DVR Weak Default Credentials Stream Disclosure
COMMAX CVD-Axx DVR 5.1.4 contains weak default administrative credentials that allow remote password attacks and disclose RTSP stream. Attackers can exploit this by sending a POST request with the 'passkey' parameter set to '1234', allowing them to access the web control panel...
EUVD-2025-36697
Zitadel allows brute-forcing authentication factors...
EUVD-2019-8035
Malware in sbrugna...
EUVD-2006-0871
Malware in sbrugna...
Linux Distros Unpatched Vulnerability : CVE-2020-1722
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in all ipa versions 4.x.x through 4.8.0. When sending a very long password = 1,000,000 characters to the server, the password hashing process...
PT-2025-31910 · Unknown · Atjiu Pybbs
Name of the Vulnerable Software and Affected Versions: atjiu pybbs versions up to 6.0.0 Description: A critical issue exists in atjiu pybbs up to version 6.0.0 related to weak password requirements in the update function of the file...
CVE-2025-2500
A vulnerability exists in the SOAP Web services of the Asset Suite versions listed below. If successfully exploited, an attacker could gain unauthorized access to the product and the time window of a possible password attack could be expanded...
CVE-2025-2500
A vulnerability exists in the SOAP Web services of the Asset Suite versions listed below. If successfully exploited, an attacker could gain unauthorized access to the product and the time window of a possible password attack could be expanded...
CVE-2025-2500
A vulnerability exists in the SOAP Web services of the Asset Suite versions listed below. If successfully exploited, an attacker could gain unauthorized access to the product and the time window of a possible password attack could be expanded...
CVE-2025-2500
CVE-2025-2500 affects Hitachi Energy Asset Suite SOAP Web services. Public documentation indicates a vulnerability in SOAP-based interfaces that could allow an attacker to gain unauthorized access and potentially extend the window for password attacks. Reported CVSS data (3.1: High, 7.4; 4.0: Cri...
CVE-2025-2500
A vulnerability exists in the SOAP Web services of the Asset Suite versions listed below. If successfully exploited, an attacker could gain unauthorized access to the product and the time window of a possible password attack could be expanded...
PT-2025-23284 · Unknown · Asset Suite
Name of the Vulnerable Software and Affected Versions: Asset Suite versions affected versions not specified Description: A vulnerability exists in the SOAP Web services, allowing an attacker to gain unauthorized access to the product if successfully exploited. This could also expand the time wind...
CVE-2022-45276
An issue in the /index/user/useredit.html component of YJCMS v1.0.9 allows unauthenticated attackers to obtain the Administrator account password...
Splunk Enterprise Information Disclosure Vulnerability (CNVD-2024-34261)
Splunk is a suite of data collection and analysis software from Splunk, Inc. in the United States. The software is primarily used to collect, index and analyze and the data it generates, including data generated by all IT systems and infrastructures physical, virtual machines and cloud. Splunk...
WinFiHack - A Windows Wifi Brute Forcing Utility Which Is An Extremely Old Method But Still Works Without The Requirement Of External Dependencies
WinFiHack is a recreational attempt by me to rewrite my previous project Brute-Hacking-Framework's main wifi hacking script that uses netsh and native Windows scripts to create a wifi bruteforcer. This is in no way a fast script nor a superior way of doing the same hack but it needs no external...
CVE-2023-6928
EuroTel ETL3100 versions v01c01 and v01x37 does not limit the number of attempts to guess administrative credentials in remote password attacks to gain full control of the system...
CVE-2023-6928
Summary (supported by provided documents): CVE-2023-6928 affects EuroTel ETL3100 transmitter versions v01c01 and v01x37. The vulnerability is an improper restriction of excessive authentication attempts (CWE-307), enabling a remote attacker to perform brute-force-like password guessing for admini...
CVE-2023-5754
CVE-2023-5754 affects Sielco PolyEco1000 family (and related PolyEco models) with a weak set of default administrative credentials that can be guessed remotely, enabling full system control. Affected versions include PolyEco1000 CPUs 2.0.6, 1.9.4, 1.9.3; PolyEco500 1.7.0; PolyEco300 2.0.2, 2.0.0....
Sielco PolyEco1000 Security Vulnerability
The Sielco PolyEco1000 is an environmental monitoring and control system from Sielco designed to monitor and control data on water quality, meteorology, gas concentrations, energy management, and environmental parameters. A security vulnerability exists in Sielco PolyEco1000 that stems from the u...