18 matches found
CVE-2025-26326
A vulnerability was identified in the NVDA Remote version 2.6.4 and Tele NVDA Remote version 2025.3.3 remote connection add-ons, which allows an attacker to obtain total control of the remote system by guessing a weak password. The problem occurs because these add-ons accept any password entered ...
CVE-2025-26326
CVE-2025-26326 affects the NVDA Remote (v2.6.4) and Tele NVDA Remote (v2025.3.3) remote connection add-ons. The root cause is that the components accept any entered password without additional authentication or device verification, enabling brute-force/guess attacks. Reports indicate over 1,000 s...
Eyes Of Network (EON) <= 5.3.11 Privilege Escalation Vulnerability (GHSA-3wv8-q6g7-7frh)
Eyes Of Network EON is prone to a privilege escalation vulnerability. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
CVE-2024-29964
Summary (CVE-2024-29964) : Brocade SANnav versions prior to 2.3.0a erroneously set file permissions, including for Docker-related files. This weakness can allow an unprivileged attacker with server access to read sensitive information from these files. Public sources consistently cite the same is...
RomCom RAT Using Deceptive Web of Rogue Software Sites for Covert Attacks
The threat actors behind RomCom RAT are leveraging a network of fake websites advertising rogue versions of popular software at least since July 2022 to infiltrate targets. Cybersecurity firm Trend Micro is tracking the activity cluster under the name Void Rabisu, which is also known as Tropical...
CVE-2022-34387
Dell SupportAssist for Home PCs version 3.11.4 and prior and SupportAssist for Business PCs version 3.2.0 and prior contain a privilege escalation vulnerability. A local authenticated malicious user could potentially exploit this vulnerability to elevate privileges and gain total control of the...
CVE-2022-34387
Dell SupportAssist for Home PCs version 3.11.4 and prior and SupportAssist for Business PCs version 3.2.0 and prior contain a privilege escalation vulnerability. A local authenticated malicious user could potentially exploit this vulnerability to elevate privileges and gain total control of the...
Malicious code in klook-node-framework-experiment (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0620cf6726fbf4eed556cd2acf308841477671f166e470d3f28d0a8c437fdcaa Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Default Password (nasadmin) for 'nasadmin' Account
The account 'nasadmin' on the remote host has the password 'nasadmin'. An attacker may leverage this to gain total control of the affected system. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. account = "nasadmin"; password = "nasadmin"; include'deprecatednasllevel.inc'; include'compat.inc...
Default Password (nasadmin) for 'root' Account
The account 'root' on the remote host has the password 'nasadmin'. An attacker may leverage this issue to gain total control of the affected system. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. account = "root"; password = "nasadmin"; include'deprecatednasllevel.inc'; include'compat.inc';...
Default Password (0p3nm35h) for 'root' Account
The account 'root' on the remote host has the password '0p3nm35h'. An attacker may leverage this issue to gain total control of the affected system. Note that some network devices are known to use these credentials by default. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. account = "root";...
Default Password (infoblox) for 'admin' Account
The account 'admin' on the remote host has the password 'infoblox'. An attacker may leverage this issue to gain total control of the affected system. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. account = "admin"; password = "infoblox"; include'deprecatednasllevel.inc'; include'compat.inc...
Default Password (toor) for 'root' Account
The account 'root' on the remote host has the password 'toor'. An attacker may leverage this issue to gain total control of the affected system. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. account = "root"; password = "toor"; include'deprecatednasllevel.inc'; include'compat.inc'; if...
Default Password (gforge) for 'root' Account
The account 'root' on the remote host has the password 'gforge'. An attacker may leverage this issue to gain total control of the affected system. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. account = "root"; password = "gforge"; include'deprecatednasllevel.inc'; include'compat.inc'; if...
Default Password (rootme) for 'root' Account
The account 'root' on the remote host has the password 'rootme'. An attacker may leverage this issue to gain total control of the affected system. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. account = "root"; password = "rootme"; include'deprecatednasllevel.inc'; include'compat.inc'; if...
Default Password (root) for 'root' Account
The account 'root' on the remote host has the password 'root'. An attacker may leverage this issue to gain total control of the affected system. Note that, while SKIDATA Freemotion.Gate controllers are known to use these credentials, this plugin reports any time it finds a host using these...
3com-HiPer-arc.txt
Date: Fri, 25 Dec 1998 16:01:36 +0100 From: Olaf Selke Reply-To: Bugtraq List To: [email protected] Subject: 3Com HiPer ARC vulnerable to nestea attack We found 3Com's HiPer ARCs running system version 4.1.11 being vulnerable to the nestea DoS attack. The cards simply crash and reboot. The mul...
CVE-1999-1389
US Robotics/3Com Total Control Chassis with Frame Relay between 3.6.22 and 3.7.24 does not properly enforce access filters when the "set host prompt" setting is made for a port, which allows attackers to bypass restrictions by providing the hostname twice at the "host: " prompt...