F-Scrack - A Single File Bruteforcer Supports Multi-Protocol

F-Scrack is a single file bruteforcer supports multi-protocol, no extra library requires except python standard library, which is ideal for a quick test. Currently support protocol: FTP, MySQL, MSSQL，MongoDB，Redis，Telnet，Elasticsearch，PostgreSQL. Compatible with OSX, Linux, Windows, Python 2.6+...

Crestron AM-100 - Multiple Vulnerabilities

Crestron AM-100 - Multiple Vulnerabilities ================================================================= Crestron AM-100 Multiple Vulnerabilities ================================================================= Date: 2016-08-01 Exploit Author: Zach Lanier Vendor Homepage:...

[SECURITY] Fedora 25 Update: curl-7.51.0-1.fc25

curl is a command line tool for transferring data with URL syntax, supporti ng FTP, FTPS, HTTP, HTTPS, SCP, SFTP, TFTP, TELNET, DICT, LDAP, LDAPS, FILE, I MAP, SMTP, POP3 and RTSP. curl supports SSL certificates, HTTP POST, HTTP PUT, FTP uploading, HTTP form based upload, proxies, cookies,...

SAP NetWeaver AS JAVA 7.5 Directory Traversal Vulnerability

SAP NetWeaver AS JAVA versions 7.1 through 7.5 suffer from a directory traversal vulnerability. Application: SAP NetWeaver AS JAVA Versions Affected: SAP NetWeaver AS JAVA 7.1 to 7.5 Vendor URL: http://SAP.com Bugs: Directory traversal Sent: 04.12.2015 Reported: 05.12.2015 Vendor response:...

Default Password 'P@ssw0rd' for 'admin' Account

The account 'admin' on the remote host has the default password 'P@ssw0rd'. A remote attacker can exploit this issue to gain administrative access to the affected system. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. account = "admin"; password = "P@ssw0rd"; include'deprecatednasllevel.inc...

New IoT Botnet Malware Borrows From Mirai

Researchers have thrown back the covers on more malware infecting IoT devices for the purposes of building a botnet that carries out DDoS attacks. This sample has its roots in other IoT botnets such as Aidra, Bashlite and Mirai in that it attacks weak telnet credentials guarding devices and it’s...

New IoT Botnet Malware Discovered; Infecting More Devices Worldwide

The whole world is still dealing with the Mirai IoT Botnet that caused vast internet outage last Friday by launching massive distributed denial of service DDoS attacks against the DNS provider Dyn, and researchers have found another nasty IoT botnet. Security researchers at MalwareMustDie have...

InfraPower PPS-02-S Q213V1 - Hard-Coded Credentials Vulnerability

Exploit for hardware platform in category remote exploits InfraPower PPS-02-S Q213V1 Hard-coded Credentials Remote Root Access Vendor: Austin Hughes Electronics Ltd. Product web page: http://www.austin-hughes.com Affected version: Q213V1 Firmware: V2395S Fixed version: Q216V3 Firmware:...

Default Password 'service' for 'service' Account

The account 'service' on the remote host has the default password 'service'. A remote attacker can exploit this issue to gain administrative access to the affected system. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. account = "service"; password = "service";...

Default Password 'realtek' for 'root' Account

The account 'root' on the remote host has the default password 'realtek'. A remote attacker can exploit this issue to gain administrative access to the affected system. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. account = "root"; password = "realtek"; include'deprecatednasllevel.inc';...

Default Password 'dreambox' for 'root' Account

The account 'root' on the remote host has the default password 'anko'. A remote attacker can exploit this issue to gain administrative access to the affected system. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. account = "root"; password = "dreambox"; include'deprecatednasllevel.inc';...

Default Password '7ujMko0admin' for 'admin' Account

The account 'admin' on the remote host has the default password '7ujMko0admin'. A remote attacker can exploit this issue to gain administrative access to the affected system. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. account = "admin"; password = "7ujMko0admin";...

Default Password 'tech' for 'tech' Account

The account 'tech' on the remote host has the default password 'tech'. A remote attacker can exploit this issue to gain administrative access to the affected system. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. account = "tech"; password = "tech"; include'deprecatednasllevel.inc';...

InfraPower PPS-02-S Q213V1 - Hard-Coded Credentials

InfraPower PPS-02-S Q213V1 - Hard-Coded Credentials InfraPower PPS-02-S Q213V1 Hard-coded Credentials Remote Root Access Vendor: Austin Hughes Electronics Ltd. Product web page: http://www.austin-hughes.com Affected version: Q213V1 Firmware: V2395S Fixed version: Q216V3 Firmware: IPD-02-FW-v03...

Default Password 'meinsm' for 'admin' Account

The account 'admin' on the remote host has the default password 'meinsm'. A remote attacker can exploit this issue to gain administrative access to the affected system.. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. account = "admin"; password = "meinsm"; include'deprecatednasllevel.inc';...

Default Password '666666' for 'root' Account

The account 'root' on the remote host has the default password '666666'. A remote attacker can exploit this issue to gain administrative access to the affected system. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. account = "root"; password = "666666"; include'deprecatednasllevel.inc';...

Default Password '1111' for 'admin' Account

The account 'admin' on the remote host has the default password '1111'. A remote attacker can exploit this issue to gain administrative access to the affected system. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. account = "admin"; password = "1111"; include'deprecatednasllevel.inc';...

Default Password '7ujMko0admin' for 'root' Account

The account 'root' on the remote host has the default password '7ujMko0admin'. A remote attacker can exploit this issue to gain administrative access to the affected system.. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. account = "root"; password = "7ujMko0admin";...

Default Password 'ikwb' for 'root' Account

The account 'root' on the remote host has the default password 'ikwb'. A remote attacker can exploit this issue to gain administrative access to the affected system. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. account = "root"; password = "ikwb"; include'deprecatednasllevel.inc';...

Default Password '123456' for 'root' Account

The account 'root' on the remote host has the default password '123456'. A remote attacker can exploit this issue to gain administrative access to the affected system. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. account = "root"; password = "123456"; include'deprecatednasllevel.inc';...