|
271001
|
9.8 |
CRITICAL
Network
|
ibaby
|
m3s_baby_monitor_firmware
|
iBaby M3S has a password of admin for the backdoor admin account.
|
CWE-798
Use of Hard-coded Credentials
|
CVE-2015-2887
|
2024-11-21 11:28 |
2017-04-10 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
271002
|
7.5 |
HIGH
Network
|
ibaby
|
m6_baby_monitor_firmware
|
iBaby M6 allows remote attackers to obtain sensitive information, related to the ibabycloud.com service.
|
CWE-200
Information Exposure
|
CVE-2015-2886
|
2024-11-21 11:28 |
2017-04-10 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
271003
|
9.8 |
CRITICAL
Network
|
lens_laboratories
|
peek-a-view_firmware
|
Lens Peek-a-View has a password of 2601hx for the backdoor admin account, a password of user for the backdoor user account, and a password of guest for the backdoor guest account.
|
CWE-798
Use of Hard-coded Credentials
|
CVE-2015-2885
|
2024-11-21 11:28 |
2017-04-10 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
271004
|
7.5 |
HIGH
Network
|
philips
|
in.sight_b120\\37
|
Philips In.Sight B120/37 allows remote attackers to obtain sensitive information via a direct request, related to yoics.net URLs, stream.m3u8 URIs, and cam_service_enable.cgi.
|
CWE-200
Information Exposure
|
CVE-2015-2884
|
2024-11-21 11:28 |
2017-04-10 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
271005
|
5.4 |
MEDIUM
Network
|
philips
|
in.sight_b120\\37
|
Philips In.Sight B120/37 has XSS, related to the Weaved cloud web service, as demonstrated by the name parameter to deviceSettings.php or shareDevice.php.
|
CWE-79
Cross-site Scripting
|
CVE-2015-2883
|
2024-11-21 11:28 |
2017-04-10 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
271006
|
9.8 |
CRITICAL
Network
|
philips
|
in.sight_b120\\37
|
Philips In.Sight B120/37 has a password of b120root for the backdoor root account, a password of /ADMIN/ for the backdoor admin account, a password of merlin for the backdoor mg3500 account, a passwo…
|
CWE-798
Use of Hard-coded Credentials
|
CVE-2015-2882
|
2024-11-21 11:28 |
2017-04-10 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
271007
|
9.8 |
CRITICAL
Network
|
gynoii
|
gcw-1010 gpw-1025 gcw-1020
|
Gynoii has a password of guest for the backdoor guest account and a password of 12345 for the backdoor admin account.
|
CWE-798
Use of Hard-coded Credentials
|
CVE-2015-2881
|
2024-11-21 11:28 |
2017-04-10 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
271008
|
8.8 |
HIGH
Network
|
trendnet
|
tv-ip743sic
|
TRENDnet WiFi Baby Cam TV-IP743SIC has a password of admin for the backdoor root account.
|
CWE-287
Improper Authentication
|
CVE-2015-2880
|
2024-11-21 11:28 |
2017-04-10 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
271009
|
3.3 |
LOW
Local
|
linux redhat
|
linux_kernel enterprise_linux
|
Kernel Samepage Merging (KSM) in the Linux kernel 2.6.32 through 4.x does not prevent use of a write-timing side channel, which allows guest OS users to defeat the ASLR protection mechanism on other …
|
CWE-200
Information Exposure
|
CVE-2015-2877
|
2024-11-21 11:28 |
2017-03-3 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
271010
|
9.8 |
CRITICAL
Network
|
apache
|
storm
|
The UI daemon in Apache Storm 0.10.0 before 0.10.0-beta1 allows remote attackers to execute arbitrary code via unspecified vectors.
|
CWE-264
Permissions, Privileges, and Access Controls
|
CVE-2015-3188
|
2024-11-21 11:28 |
2017-01-14 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|