Weak Password Vulnerability in H3C ICG 1000

The ICG 1000 is a gateway from H3C specifically for small businesses. A weak password vulnerability exists in the H3C ICG 1000. An attacker can exploit this vulnerability to obtain sensitive information...

Security Bulletin: Vulnerability affects multiple IBM Rational products based on IBM Jazz technology (CVE-2015-7449)

Summary A Vulnerability in the IBM Jazz Foundation affects the following IBM Jazz Team Server based Applications: Collaborative Lifecycle Management CLM, Rational Requirements Composer RRC, Rational DOORS Next Generation RDNG, Rational Engineering Lifecycle Manager RELM, Rational Team Concert RTC...

TL-R600VPN has a weak password vulnerability

P&L Technologies Ltd. is a provider of network communication equipment. A weak password vulnerability exists in TL-R600VPN, which can be exploited by an attacker to log in to the system backend to obtain sensitive information...

Weak password vulnerability in H3C-ICG1800

H3C-ICG1800 is a router from Xinhua San Technology Co. The H3C-ICG1800 suffers from a weak password vulnerability that can be exploited by an attacker to obtain sensitive information...

Weak Password Vulnerability in Image Server of Hangzhou Hikvision System Technology Co.

Hangzhou Hikvision System Technology Co., Ltd. is a video-centered intelligent IOT solution provider and operation service provider. A weak password vulnerability exists in the image server of Hangzhou Hikvision System Technology Co. Ltd, which can be exploited by attackers to obtain sensitive...

Weak password vulnerability in group intercom service configuration platform of Hangzhou Hikvision System Technology Co.

Hangzhou Hikvision System Technology Co., Ltd. is a video-centered intelligent IOT solution provider and operation service provider. A weak password vulnerability exists in the Group Intercom Service Configuration Platform of Hangzhou Hikvision System Technology Company Limited, which can be...

Weak Password Vulnerability in ZTE Corporation F600W

F600W is a router from ZTE Corporation. A weak password vulnerability exists in the ZTE Corporation F600W, which can be exploited by an attacker to obtain sensitive information...

Weak Password Vulnerability in HOMS 5.0 Monitoring Center

Homs5.0 monitoring center is a monitoring system platform for high-end system applications developed on the basis of years of monitoring software system platform development accumulation launched by Beijing Shuo Ren Times Technology Co. HOMS5.0 monitoring center has a weak password vulnerability,...

glimmer_pocs

This is a proof-of-concept PoC repository for the tool "glimmer". The repository contains various PoCs for different types of vulnerabilities and information disclosure. The PoCs are implemented as Python scripts, each targeting a specific vulnerability or information disclosure. The PoCs are...

Weak Password Vulnerability in RM1800-35(V3) of Mapletree Technology Co.

RM1800-35V3 is a router product from Mapletree Technology Co. The RM1800-35V3 from MyPlanet Technologies Co., Ltd. suffers from a weak password vulnerability that can be exploited by attackers to obtain sensitive information...

Weak Password Vulnerability in D-Link DIR-600

The D-Link DIR-600 is a wireless router from AUO D-Link of Taiwan, China. The D-Link DIR-600 suffers from a weak password vulnerability that can be exploited by attackers to obtain sensitive information...

Weak password vulnerability in VRM of Bosch (China) Investment Co.

Bosch China Investment Co., Ltd. operates in the fields of machinery manufacturing, light industry, electronics and information industry. A weak password vulnerability exists in the VRM of Bosch China Investment Co. Ltd. that can be exploited by attackers to obtain sensitive information...

D-Link DIR-100 has a weak password vulnerability

The D-Link DIR-100 is a SOHO broadband router. A weak password vulnerability exists in the D-Link DIR-100, which can be exploited by an attacker to obtain sensitive information...

D-Link DIR-655 has a weak password vulnerability

The D-Link DIR-655 is a wireless router from AUO D-Link of Taiwan, China. The D-Link DIR-655 suffers from a weak password vulnerability that can be exploited by attackers to obtain sensitive information...

Weak password vulnerability in TOPSEC TOS WEB ADMINISTRATOR of Beijing Tianrongxin Technology Co.

Beijing Tianrongxin Technology Co., Ltd. is a leading provider of network security, big data and cloud services in China. A weak password vulnerability exists in TOPSEC TOS WEB ADMINISTRATOR of Beijing Tianrongxin Technology Co. Ltd, which can be exploited by attackers to obtain sensitive...

D-Link DIR-615 has a weak password vulnerability

The D-Link DIR-615 is a wireless router from AUO D-Link of Taiwan, China. The D-Link DIR-615 suffers from a weak password vulnerability that can be exploited by attackers to obtain sensitive information...

Weak password vulnerability in CPE-WiFi of Shenzhen Sidetech Co.

Ltd. is a high-tech enterprise that provides a full line of products required for mainstream access network technology. CPE-WiFi of Shenzhen Sidetech Co., Ltd. has a weak password vulnerability, which can be exploited by attackers to obtain sensitive information...

The vulnerability of the programmable logic controller Schneider Electric Modicon Quantum, related to the insufficient reliability of passwords, allows a intruder to alter the contents of configuration files.

The vulnerability of the programmable logic controller Schneider Electric Modicon Quantum is related to the insufficient security of passwords. Exploiting this vulnerability could allow an attacker to modify the contents of configuration files using the built-in FTP server passwords...

Security Bulletin: IBM® Db2® is vulnerable to weak file permissions allowing access to specific files (CVE-2020-4976)

Summary IBM Db2 for Linux, UNIX and Windows includes DB2 Connect Server could allow a local user to read and write specific files due to weak file permissions. Vulnerability Details CVEID: CVE-2020-4976 DESCRIPTION: IBM DB2 for Linux, UNIX and Windows includes DB2 Connect Server could allow a loc...

CVE-2021-31646

Gestsup before 3.2.10 allows account takeover through the password recovery functionality remote. The affected component is the file forgotpwd.php - it uses a weak algorithm for the generation of password recovery tokens the PHP uniqueid function, allowing a brute force attack...