Design/Logic Flaw

InvoicePlane 1.5.11 doesn't have any rate-limiting for password reset and the reset token is generated using a weak mechanism that is predictable...

Backdoor.Win32.Danton.43 Man-In-The-Middle

Discovery / credits: Malvuln - malvuln.com c 2021 Original source: https://malvuln.com/advisory/85f7ef2b6b8da9adb7723a13b91ac1c7B.txt Contact: [email protected] Media: twitter.com/malvuln Threat: Backdoor.Win32.Danton.43 Vulnerability: MITM Port Bounce Scan Description: The backdoor FTP server...

Backdoor.Win32.Danton.43 Code Execution / Hardcoded Credentials

Discovery / credits: Malvuln - malvuln.com c 2021 Original source: https://malvuln.com/advisory/85f7ef2b6b8da9adb7723a13b91ac1c7.txt Contact: [email protected] Media: twitter.com/malvuln Threat: Backdoor.Win32.Danton.43 Vulnerability: Weak Hardcoded Credentials RCE Description: The malware...

InvoicePlane 安全漏洞

InvoicePlane is a software application. Provides a self-hosted open source application for managing your quotes, invoices, customers and payments. InvoicePlane version 1.5.11 suffers from a security vulnerability that stems from the absence of any rate limitation on password resets, where reset...

Backdoor.Win32.Agent.cy Hardcoded Credentials

Discovery / credits: Malvuln - malvuln.com c 2021 Original source: https://malvuln.com/advisory/e85a1028a52fcc723353a236ada54fee.txt Contact: [email protected] Media: twitter.com/malvuln Threat: Backdoor.Win32.Agent.cy Vulnerability: Weak Hardcoded Credentials Description: The malware listens o...

Weak password vulnerability in Lim-SW5PV24 of Shandong Bit Intelligent Technology Co.

Shandong Bit Intelligent Technology Co., Ltd. is a high-tech enterprise integrating design, R&D, production and sales. Ltd Lim-SW5PV24 has a weak password vulnerability that can be exploited by attackers to obtain sensitive information...

Weak Password Vulnerability in S5100 and P5100 of SZTech Co.

The S5100 and P5100 are hardware gateway products from DeepService Technology Co. A weak password vulnerability exists in the S5100 and P5100 of the DeepSign Technology Corporation, which can be exploited by an attacker to obtain sensitive information...

Weak Password Vulnerability in Various Products of P&T Technology Co.

TL-IPC223 and so on are webcam products of P&L Technology Co. A weak password vulnerability exists in a number of P&L Technologies Ltd. products, which can be exploited by attackers to obtain sensitive information...

Weak password vulnerability in NBG-418N of Zhongqin Telecommunication Equipment Trading (Shanghai) Co.

NBG-418N is a wireless router device launched by Zongqin Communication Equipment Trading Shanghai Co. Ltd. NBG-418N has a weak password vulnerability that can be exploited by attackers to obtain sensitive information...

Weak Password Vulnerability in NBG-416N of Zhongqin Communication Equipment Trading (Shanghai) Co.

NBG-416N is a wireless router device launched by Zongqin Communication Equipment Trading Shanghai Co. Ltd. NBG-416N has a weak password vulnerability that can be exploited by attackers to obtain sensitive information...

Weak password vulnerability in Lim-SW5PV8 of Shandong Bit Intelligent Technology Co.

Shandong Bit Intelligent Technology Co., Ltd. is a high-tech enterprise integrating design, R&D, production and sales. Ltd Lim-SW5PV8 has a weak password vulnerability that can be exploited by attackers to obtain sensitive information...

Weak Password Vulnerability in F100 Series of Xinhua San Technologies Co.

The F100 series is a firewall from Xinhua San Technologies Co. A weak password vulnerability exists in the F100 series of Xinhua San Technologies Limited, which can be exploited by attackers to obtain sensitive information...

Weak Password Vulnerability in Brickcom FB-200Np Camera

BRICS Communications Technology is a leading global provider of network video solutions. A weak password vulnerability exists in the Brickcom FB-200Np camera, which can be exploited by attackers to obtain sensitive information...

Weak password vulnerability in D-Link AC centralized management platform (CNVD-2021-39061)

Founded in 1986, D-Link is a network solutions provider. A weak password vulnerability exists in the D-Link AC centralized management platform, which can be exploited by attackers to obtain sensitive information...

Weak Password Vulnerability in Flagship IDC/ISP Access Resource Management System

Ltd. is headquartered in Pudong Lujiazui financial and trade zone, based in Shanghai, radiating across the country, the company is one of the earliest enterprises involved in the field of network information security in China. A weak password vulnerability exists in Flagship's IDC/ISP access...

Weak Password Vulnerability in Aditon AC Centralized Management Platform

Adstone Adstone is a solution provider in the field of mobile Internet, dedicated to providing enterprise users with next-generation wireless network connectivity and application solutions such as Smart Wireless, BYOD, Precise Wireless Positioning, OTO, and Wearable Technology. The products inclu...

CVE-2020-27020

Password generator feature in Kaspersky Password Manager was not completely cryptographically strong and potentially allowed an attacker to predict generated passwords in some cases. An attacker would need to know some additional information for example, time of password generation...

Weak Password Vulnerability in Internet Behavior Management and Audit System of Shanghai Boda Data Communication Co.

Shanghai Boda Data Communication Co., Ltd. is a high-tech enterprise integrating R&D, generation and sales. A weak password vulnerability exists in the Internet behavior management and auditing system of Shanghai Boda Data Communication Co. An attacker can use the weak password to log into the...

Weak Password Vulnerability in NETGEAR DGN1000

The NETGEAR DGN1000 is a wireless router. A weak password vulnerability exists in the NETGEAR DGN1000. An attacker can use the weak password to log into the backend and obtain sensitive information...

Weak password vulnerability in Howay SW-26242 of Suzhou Hanming Technology Co.

The Howay SW-26242 is a full Gigabit managed POE switch. Howay SW-26242 of Suzhou Hanming Technology Co. Ltd. suffers from a weak password vulnerability that can be exploited by attackers to obtain sensitive information...