Quest DR Series Appliance Web Default Administrator Credentials

The web interface for the Quest DR Series disk backup appliance, formerly Dell DR Series, uses a default set of credentials (administrator / St0r@ge!) to control access to its management interface. A ...

Continue Reading
IOVLabs: JSON RPC methods for debugging enabled by default allow DoS

**Summary:** Upon sending the JSON-RPC the `evm_reset` command, the RPC server hung, has gone slow, and is now on block 0. **Description:** While testing the bounty RPC node, I was sending a variety o ...

Continue Reading
Quest DR Series Appliance Detection (HTTP)

HTTP based detection of Quest DR Series pppliances.Read More ...

Continue Reading
CVE-2018-1000093

CryptoNote version version 0.8.9 and possibly later contain a local RPC server which does not require authentication, as a result the walletd and the simplewallet RPC daemons will process any commands ...

Continue Reading

CVSS3 - HIGH

CVSS2 - MEDIUM

Dell EMC Avamar and Integrated Data Protection Appliance Installation Manager – Invalid Access Control

Post ContentRead More ...

Continue Reading

CVSS3 - CRITICAL

CVSS2 - MEDIUM

Quest NetVault Backup NVBUBackup Count Method SQL Injection (CVE-2017-17652)

An SQL injection vulnerability exists in the Server Process Manager Service of Quest NetVault Backup. The vulnerability is due to improper validation of user-supplied input on JSON-RPC requests invoki ...

Continue Reading

CVSS3 - CRITICAL

CVSS2 - HIGH

Quest NetVault Backup NVBUEventHistory Get Method SQL Injection (CVE-2017-17412)

An SQL injection vulnerability exists in the Server Process Manager Service of Quest NetVault Backup. The vulnerability is due to improper validation of user-supplied input on JSON-RPC requests invoki ...

Continue Reading

CVSS3 - CRITICAL

CVSS2 - HIGH

Palo Alto Networks – 'readSessionVarsFromFile()' Session Corruption (Metasploit)

Post ContentRead More ...

Continue Reading

Back to Main

Subscribe for the latest news: