CVE-2022-1039

CVE-2022-1039 is referenced across multiple sources as a weakness in the Red Lion DA50N gateway related to weak password requirements. The primary concrete details indicate that: the web UI password is weak and can be exploited over HTTP/HTTPS, enabling attackers to change other passwords; Linux ...

CVE-2021-39076

IBM Security Guardium 10.5 and 11.3 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt sensitive information. IBM X-Force ID: 215585...

Code injection

IBM Security Guardium 10.5 and 11.3 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt sensitive information. IBM X-Force ID: 215585...

TOTOLink A7000R has a weak password vulnerability

The TOTOLINK A7000R is a wireless router. A weak password vulnerability exists in TOTOLink A7000R, which can be exploited by attackers to obtain sensitive information...

Verizon 4G LTE Network Extender - Weak Credentials Algorithm

Exploit Title: Verizon 4G LTE Network Extender - Weak Credentials Algorithm Exploit Author: LiquidWorm Vendor: Verizon Communications Inc. Product web page: https://www.verizon.com Affected version: GA4.38 - V0.4.038.2131 Summary: An LTE Network Extender enhances your indoor and 4G LTE data and...

IBM Security Guardium 加密问题漏洞

IBM Security Guardium is a suite of platforms from IBM that provide data protection capabilities. The platform includes features such as custom UI, report management and streamlined audit process building.IBM Security Guardium has a weak encryption algorithm vulnerability that stems from the fact...

CVE-2022-27157

pearweb 1.32 is suffers from a Weak Password Recovery Mechanism via include/users/passwordmanage.php...

Default credentials

pearweb 1.32 is suffers from a Weak Password Recovery Mechanism via include/users/passwordmanage.php...

CVE-2022-27157

pearweb 1.32 is suffers from a Weak Password Recovery Mechanism via include/users/passwordmanage.php...

CVE-2022-27157

Pearweb

CVE-2022-27157

pearweb 1.32 is suffers from a Weak Password Recovery Mechanism via include/users/passwordmanage.php...

CVE-2022-20747

A vulnerability in the History API of Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to gain access to sensitive information on an affected system. This vulnerability is due to insufficient API authorization checking on the underlying operating system. An attacker cou...

Backdoor.Win32.Psychward.03.a Weak Hardcoded Password

Discovery / credits: Malvuln - malvuln.com c 2022 Original source: https://malvuln.com/advisory/d069738f18957117367b8a79195a6a96.txt Contact: [email protected] Media: twitter.com/malvuln Threat: Backdoor.Win32.Psychward.03.a Vulnerability: Weak Hardcoded Password Description: The malware listen...

Red Lion DA50N

1. EXECUTIVE SUMMARY CVSS v3 9.6 ATTENTION: Exploitable remotely/low attack complexity Vendor: Red Lion Equipment: DA50N Vulnerabilities: Insufficient Verification of Data Authenticity, Weak Password Requirements, Use of Unmaintained Third-Party Components, Insufficiently Protected Credentials 2...

Verizon 4G LTE Network Extender 0.4.038.2131 Weak Credential Algorithm

Verizon 4G LTE Network Extender Weak Credentials Algorithm Vendor: Verizon Communications Inc. Product web page: https://www.verizon.com Affected version: GA4.38 - V0.4.038.2131 Summary: An LTE Network Extender enhances your indoor and 4G LTE data and voice coverage to provide better service for...

Verizon 4G LTE Network Extender 0.4.038.2131 Weak Credential Algorithm Exploit

Verizon's 4G LTE Network Extender is utilizing a weak default admin password generation algorithm. The password is generated using the last 4 values from device's MAC address which is disclosed on the main webUI login page to an unauthenticated attacker. The values are then concatenated with the...

Verizon 4G LTE Network Extender Weak Credentials Algorithm

Summary An LTE Network Extender enhances your indoor and 4G LTE data and voice coverage to provide better service for your 4G LTE mobile devices. It's an extension of our 4G LTE network that's placed directly in your home or office. The LTE Network Extender works with all Verizon-sold 4G LTE mobi...

The vulnerability of the microprogrammed software of the MELSEC iQ-F Series FX5U and MELSEC iQ-F Series FX5UJ programmable logic controllers lies in the use of a reversible one-way hash function. This function allows an intruder to gain unauthorized access to protected information.

The vulnerability of the microprogrammed logic controllers MELSEC iQ-F Series FX5U and MELSEC iQ-F Series FX5UJ lies in the use of a weak password hash. Exploiting this vulnerability can allow an intruder, operating remotely, to gain unauthorized access to protected information...

CVE-2022-0828

The Download Manager WordPress plugin before 3.2.34 uses the uniqid php function to generate the master key for a download, allowing an attacker to brute force the key with reasonable resources giving direct download access regardless of role based restrictions or password protections set for the...

Design/Logic Flaw

Use of a Broken or Risky Cryptographic Algorithm in GitHub repository gnuboard/gnuboard5 prior to and including 5.5.5. A vulnerability in gnuboard v5.5.5 and below uses weak encryption algorithms leading to sensitive information exposure. This allows an attacker to derive the email address of any...