Stulz GmbH Stulz WIB 8000 弱口令

该WEB接口存在3个无需用户名的默认密码且具有不同程度的控制权限。 1. ganymed -- 最高控制权限，管理员权限 2. kallisto -- 中级控制权限， 具有读写权限，仅有信息和操作级别的权限。 3. europa -- 低级别权限，只有读权限，仅有信息和操作级别的权限。 弱口令： ganymed – highest authorization, administrator kallisto – medium authorization, read and write, only levels “Info” and “Operate” europa – lowest...

Yokogawa YFGW410 gateway

No description provided by source...

B&B ELECTRONICS LR77 v2 Libratum/LR77 v2 弱口令

参考链接: http://www.induowireless.com/wp-content/uploads/2014/12/lr77-v2-libratum-manual.pdf, http://data.kommago.nl/files/pdf/conel-lr77v2-handleiding.pdf...

TAC AB TAC Xenta 500/700/911/913, TAC Xenta511, TAC Xenta527 弱口令

参考 http://www.xref.be/dpdf/tacxenta911xenta511manueluk.pdf...

Digi DC-ME-01T-S 弱口令

参考链接: http://www.digi.com/support/forum/13553/digi-connect-me-default-password...

Emerson DeltaV™ Digital Automation System 弱口令

参考链接: http://www.chem.mtu.edu/chemeng/current/newcourses/CM4120/2009/Getting%20Started.pdf...

ENTES EMG-10, EMG-02 , EMG-12 弱口令

参考链接: http://www.entes.com.tr/dosyalar/EMGSeriesEN-ver22.pdf...

Emerson ROCLINK™ 800 弱口令

参考链接: http://www.documentation.emersonprocess.com/groups/public/documents/instructionmanuals/d301159x012.pdf...

Amanda 3.3.1 - Local Privilege Escalation

Amanda 3.3.1 - Local Privilege Escalation / AMANDA, the Advanced Maryland Automatic Network Disk Archiver, is a backup solution that allows the IT administrator to set up a single master backup server to back up multiple hosts over network to tape drives/changers or disks or optical media. Amanda...

Amanda 3.3.1 Local Root Privilege Escalation

AMANDA, the Advanced Maryland Automatic Network Disk Archiver, is a backup solution that allows the IT administrator to set up a single master backup server to back up multiple hosts over network to tape drives/changers or disks or optical media. Amanda uses native utilities and formats e.g. dump...

Fortinet FortiGate 4.x 5.0.7 - SSH Backdoor Access

Fortinet FortiGate 4.x 5.0.7 - SSH Backdoor Access !/usr/bin/env python SSH Backdoor for FortiGate OS Version 4.x up to 5.0.7 Usage: ./fgtsshbackdoor.py import socket import select import sys import paramiko from paramiko.py3compat import u import base64 import hashlib import termios import tty d...

53KF XSS打客服

简要描述： RT 详细说明： http://www22.53kf.com 在截图的时候截断 修改图片地址为XSS地址 即可打客服 漏洞证明：...

PostgreSQL CREATE LANGUAGE Execution

Some installations of Postgres 8 and 9 are configured to allow loading external scripting languages. Most commonly this is Perl and Python. When enabled, command execution is possible on the host. To execute system commands, loading the "untrusted" version of the language is necessary. This...

CVE-2015-8420

creationtimestamp| type| source ---|---|--- 2015-12-18 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/39044...

华创智能加速路由器后门

No description provided by source...

Coinbase: HTML injection in apps user review

just watch this video https://www.dropbox.com/s/360cytluyiw2ym9/HTMLI.mp4?dl=0 this about full fake login exploit https://www.youtube.com/watch?v=5iRylyJTzWc...

金蝶协作办公系统 /kingdee/tree/tree/rules/get_nodes.jsp 参数 node SQL注射

No description provided by source...

通达OA系统 /interface/auth.php SQL注入漏洞

No description provided by source...

Advanced uploader - Local File Inclusion

The Advanced uploader WordPress plugin was affected by a Local File Inclusion security vulnerability. http://www.example.com/wp-content/plugins/advanced-uploader/upload.php?destinations=../../../../../../../../../wp-config.php%00...

ok.ru: Same-Origin Policy bypass on main domain - ok.ru

Hello, I've just found a way to bypass Same-Origin Policy mechanism using vulnerability in one of swf files on your cdn. Let me explain this in details: 1. First of all - your Crossdomain which defines from what domains Flash files can read content on ok.ru. Crossdomain file is located here -...