665 matches found
BINOM3 Electric Power Quality Meter Weak Password Vulnerability
The BINOM3 Electric Power Quality Meter is a universal multifunctional power quality monitor. The BINOM3 Electric Power Quality Meter is vulnerable to a weak password. The device is configured with four login accounts "admin / 1", "user / 1", "alg / 1", "telem / 1". To further make it easier for...
Hey, Music Lovers! Last.Fm Hack Leaks 43 Million Account Passwords
Another Day, Another Data Breach! If you love to listen to music online and have an account on Last.fm website, your account details may have compromised in a data breach that leaked more than 43 Million user personal data online. Last.fm was hacked in March of 2012 and three months after the...
MediaWiki < 1.23.12 / 1.24.5 / 1.25.4 / 1.26.1 Multiple Vulnerabilities
Binary data 9473.prm...
Best Free Password Manager Software You Can Download For 2018
When it comes to safeguarding your Internet security, installing an antivirus software or running a Secure Linux OS on your system does not mean you are safe enough from all kinds of cyber-threats. Today majority of Internet users are vulnerable to cyber attacks, not because they aren't using any...
Palm reading iReader a station Python vulnerability discovery-vulnerability warning-the black bar safety net
Python as a new generation of web development language, many of the Internet inside and outside the company network using their development site. Python web periphery there is also redis, memcached, a mongod, the supervisord is restarted, etc. services, we combine these services to a range of...
NETSurveillance monitoring equipment weak passwords
No description provided by source...
Paragon Initiative Enterprises: Airship doesn't reject weak passwords
Airship doesn't reject weak passwords for the initial account. It happily accepts the password test for a root user test. This isn't a vulnerability in the software itself, but it's still listed in vulnerabilities we prevent: Broken Authentication Airship rejects weak passwords that hackers could...
Data Breaches Feed Password Reuse Crimes: No Simple Fixes
It was June 2012 when Dale Meredith was shopping online for a BBQ grill for Father’s Day and found one at Sears.com. The only snag, he had to create a username and password to buy it. That irked him. He was annoyed because it was literally the hundredth-plus service—including his local newspaper,...
Merit Lilin IP Cameras - Multiple Vulnerabilities
Exploit for cgi platform in category web applications Adivisory Information ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ + Title: Merit Lilin IP Cameras Multiple Vulnerabilities + Vendor: Merit Lilin Enterprise Co., Ltd. + Research and Advisory: Orwelllabs + Adivisory URL:...
Merit Lilin IP Cameras - Multiple Vulnerabilities
/ \ / \ / \ / \ / \ / \ / \ / \ / \ / \ 0 | R | W | 3 | L | L | L | 4 | 8 | 5 / / / / / / / / / / www.orwelllabs.com securityadivisory @orwelllabs ;r By sitting in the alcove, and keeping well back, Winston was able to remain outside the range of the telescreen... Adivisory Information...
Merit Lilin IP Cameras - Multiple Vulnerabilities
Merit Lilin IP Cameras - Multiple Vulnerabilities / \ / \ / \ / \ / \ / \ / \ / \ / \ / \ 0 | R | W | 3 | L | L | L | 4 | 8 | 5 / / / / / / / / / / www.orwelllabs.com securityadivisory @orwelllabs ;r By sitting in the alcove, and keeping well back, Winston was able to remain outside the...
Verizon DBIR Top Targets: Credentials, Phishing and PoS
A lack of security common sense still plagues businesses with 30 percent of phishing emails opened by campaign targets. Worse, 12 percent click on the attachments inside those phishing attacks, giving crooks easy access to systems to snarf up credentials that are later used to pull off financiall...
Uber: User credentials are not strong on vault.uber.com
I was just trying to login vault.uber.com I entered email xx and password xx, I got loggedin to someones account. I entered email zz and password zz, I got loggedin to someones account. It means passowrd complexity and length of username/email is not enforced. This allowed my to access the someon...
致远某内部系统存在大量弱口令
简要描述： 详细说明： http://seeyonqd.seeyon.com/seeyon/index.jsp http://seeyonqd.seeyon.com//seeyon/getAjaxDataServlet?S=ajaxOrgManager&M=isOldPasswordCorrect&CL=true&RVT=XML&P1String=admin&P2String=wy 漏洞证明： 抓包 密码采用123456 加载字典 GET...
Password Security — Who's to Blame for Weak Passwords? Users, Really?
The majority of Internet users are vulnerable to cyber threats because of their own weaknesses in setting up a strong password. But, are end-users completely responsible for choosing weak passwords? Give a thought. Recently we wrote an article revealing the list of Worst Passwords of 2015 that...
You Wouldn't Believe that Too Many People Still Use Terrible Passwords
Some things online can never change like -- Terrible Passwords by Humans. When it's about various security measures to be taken in order to protect your Internet security, like installing a good anti-virus or running Linux on your system doesn’t mean that your work gets over here, and you are saf...
Stulz GmbH Stulz WIB 8000 弱口令
该WEB接口存在3个无需用户名的默认密码且具有不同程度的控制权限。 1. ganymed -- 最高控制权限，管理员权限 2. kallisto -- 中级控制权限， 具有读写权限，仅有信息和操作级别的权限。 3. europa -- 低级别权限，只有读权限，仅有信息和操作级别的权限。 弱口令： ganymed – highest authorization, administrator kallisto – medium authorization, read and write, only levels “Info” and “Operate” europa – lowest...
Westermo RedFox Series, Wolverine Series, Lynx Series, Falcon Series, Viper Series 弱口令
No description provided by source...