Weak Password Vulnerability in Riptide Networks MCP Marketing Cloud Platform

MCP Cloud Marketing Platform is a wireless advertisement push platform system developed by Ruijie Networks for commercial places such as trade chains, hotels, shopping centers, wireless cities, transportation stations, tourist attractions and other commercial places with advertisement marketing...

Security Bulletin: Multiple security vulnerabilities may affect IBM DB2 shipped with Predictive Maintenance and Quality and Predictive Maintenance Insights On-Premises

Summary IBM DB2 is shipped with IBM Predictive Maintenance and Quality and Predictive Maintenance Insights On-Premises. Information about security vulnerabilities affecting DB2 has been published in multiple security bulletins as below. Vulnerability Details Refer to the security bulletins listed...

ICSA-21-138-01_Emerson Rosemount X-STREAM

1. EXECUTIVE SUMMARY CVSS v3 7.5 ATTENTION: Exploitable remotely/low attack complexity Vendor: Emerson Equipment: Rosemount X-STREAM Gas Analyzer Vulnerabilities: Inadequate Encryption Strength, Unrestricted Upload of File with Dangerous Type, Path Traversal, Use of Persistent Cookies Containing...

Shanghai Atech Technology Co., Ltd. enterprising 518G suffers from weak password vulnerability

Aggressive 518G is a router device from Shanghai Atech Technology Co. Aggressive 518G of Shanghai Atech Technology Co. Ltd. suffers from a weak password vulnerability that can be exploited by attackers to obtain sensitive information...

Weak password vulnerability in PatrolFlow-AM-2530Pro management platform of Beijing Byzoro Network Technology Co.

PatrolFlow-AM-2530Pro management platform is a multi-service security gateway intelligent management platform of Beijing Byzoro Network Technology Co. A weak password vulnerability exists in the PatrolFlow-AM-2530Pro management platform of Beijing Byzoro Networks Technology Co. Ltd, which can be...

Weak password vulnerability in ER742G

ER742G is a router device from Shanghai Atech Technology Co. The ER742G suffers from a weak password vulnerability that can be exploited by an attacker to obtain sensitive information...

Emerson Rosemount X-STREAM Gas Analyzer 加密问题漏洞

The Emerson Rosemount X-STREAM Gas Analyzer is an Emerson gas analyzer for industrial environments. The device supports up to five component gas analyzers and features NDIR/UV/VIS photometry, paramagnetic and electrochemical O2, thermal conductivity, and humidity sensors. Emerson Rosemount X-STRE...

MINTHCM Weak Password Requirement Vulnerability

MINTHCM is a MINTHCM open source application. A human resource management software. A weak password requirement vulnerability exists in the Create New User function in MintHCM RELEASE version 3.0.8, which can be exploited by an attacker to brute-force password cracking...

Weak password vulnerability in a number of AiTech router products

Atech is a small and medium-sized network solution provider and service provider in China. A weak password vulnerability exists in a number of Atech's router products, which can be exploited to obtain sensitive information...

Weak Password Vulnerability in ZoneDirector ZD1200 Wireless Controller

ZoneDirector ZD1200 is a wireless controller product from RUCKUS. A weak password vulnerability exists in the ZoneDirector ZD1200 wireless controller, which can be exploited by attackers to obtain sensitive information...

Weak Password Vulnerability in Meridian 4220G of Shanghai Atech Technology Co.

The 4220G is a router device from Shanghai Atech Technology Co. A weak password vulnerability exists in the Shangrui 4220G, which can be exploited by attackers to obtain sensitive information...

CVE-2021-29023

InvoicePlane 1.5.11 doesn't have any rate-limiting for password reset and the reset token is generated using a weak mechanism that is predictable...

CVE-2021-29023

InvoicePlane 1.5.11 doesn't have any rate-limiting for password reset and the reset token is generated using a weak mechanism that is predictable...

Design/Logic Flaw

InvoicePlane 1.5.11 doesn't have any rate-limiting for password reset and the reset token is generated using a weak mechanism that is predictable...

Backdoor.Win32.Danton.43 Man-In-The-Middle

Discovery / credits: Malvuln - malvuln.com c 2021 Original source: https://malvuln.com/advisory/85f7ef2b6b8da9adb7723a13b91ac1c7B.txt Contact: [email protected] Media: twitter.com/malvuln Threat: Backdoor.Win32.Danton.43 Vulnerability: MITM Port Bounce Scan Description: The backdoor FTP server...

Backdoor.Win32.Danton.43 Code Execution / Hardcoded Credentials

Discovery / credits: Malvuln - malvuln.com c 2021 Original source: https://malvuln.com/advisory/85f7ef2b6b8da9adb7723a13b91ac1c7.txt Contact: [email protected] Media: twitter.com/malvuln Threat: Backdoor.Win32.Danton.43 Vulnerability: Weak Hardcoded Credentials RCE Description: The malware...

InvoicePlane 安全漏洞

InvoicePlane is a software application. Provides a self-hosted open source application for managing your quotes, invoices, customers and payments. InvoicePlane version 1.5.11 suffers from a security vulnerability that stems from the absence of any rate limitation on password resets, where reset...

Backdoor.Win32.Agent.cy Hardcoded Credentials

Discovery / credits: Malvuln - malvuln.com c 2021 Original source: https://malvuln.com/advisory/e85a1028a52fcc723353a236ada54fee.txt Contact: [email protected] Media: twitter.com/malvuln Threat: Backdoor.Win32.Agent.cy Vulnerability: Weak Hardcoded Credentials Description: The malware listens o...

Weak password vulnerability in Lim-SW5PV24 of Shandong Bit Intelligent Technology Co.

Shandong Bit Intelligent Technology Co., Ltd. is a high-tech enterprise integrating design, R&D, production and sales. Ltd Lim-SW5PV24 has a weak password vulnerability that can be exploited by attackers to obtain sensitive information...

Weak Password Vulnerability in S5100 and P5100 of SZTech Co.

The S5100 and P5100 are hardware gateway products from DeepService Technology Co. A weak password vulnerability exists in the S5100 and P5100 of the DeepSign Technology Corporation, which can be exploited by an attacker to obtain sensitive information...