Vantage6: Set admin user and password from environment or configuration

ImpactVantage6 currently provides an initial user with username root and password root. This is not ideal for the following reasons:- Attackers know that almost all vantage6 servers have a user with username root that probably has admin rights- The initial password is very weak and it is possible...

EUVD-2018-1781

Malware in sbrugna...

EUVD-2021-20575

Malware in sbrugna...

EUVD-2023-53255

Malicious code in bioql PyPI...

CVE-2020-11916: Use of a Broken or Risky Cryptographic Algorithm

An issue was discovered in Siime Eye 14.1.00000001.3.330.0.0.3.14. The password for the root user is hashed using an old and deprecated hashing technique. Because of this deprecated hashing, the success probability of an attacker in an offline cracking attack is greatly increased...

Hardcoded credentials

Root user password is hardcoded into the device and cannot be changed in the user interface...

CVE-2023-49253

CVE-2023-49253: The entry is supported by connected records (RH CVE) confirming a hardcoded root password that cannot be changed via the user interface. The vulnerability affects a device where the password is embedded in the firmware/UI and is not configurable by users. Impact is rated as Critic...

CVE-2023-49253: Use of Hard-coded Credentials

Root user password is hardcoded into the device and cannot be changed in the user interface...

Sensitive Information Leakage

The sos package has a sensitive information leakage vulnerability. During archival of debugging information, the package does not remove the root user password information stored in the Kickstart configuration file /root/anaconda-ks.cfg it leaves the root user password information from the...

Rooting a Logitech Harmony Hub: Improving Security in Today's IoT World

Introduction FireEye’s Mandiant Red Team recently discovered vulnerabilities present on the Logitech Harmony Hub Internet of Things IoT device that could potentially be exploited, resulting in root access to the device via SSH. The Harmony Hub is a home control system designed to connect to and...

CVE-2018-1000018

An information disclosure in ovirt-hosted-engine-setup prior to 2.2.7 reveals the root user's password in the log file...

CVE-2018-1000018: Insertion of Sensitive Information into Log File

An information disclosure in ovirt-hosted-engine-setup prior to 2.2.7 reveals the root user's password in the log file...

PT-2018-9209

Name of the Vulnerable Software and Affected Versions: ovirt-hosted-engine-setup versions prior to 2.2.7 Description: An information disclosure issue reveals the root user's password in the log file. Recommendations: For versions prior to 2.2.7, update to version 2.2.7 or later to resolve the...

linux/x86-64 - Add root user with password - 390 bytes

Exploit for linux/x86-64 platform in category shellcode ====================================================== linux/x86-64 - Add root user with password - 390 bytes ====================================================== / Title: Linux/x86-64 - Add root user with password - 390 bytes Date:...