Scantide Online
Scantide Intelligence

Default credential intelligence

Search documented factory and shared credentials for IoT devices, appliances and software, including clearly marked community suggestions. Scantide never attempts authentication, and these notices never affect the Scantide rating.

12,975 Credential records
1,740 Unique vendors
1,687 Unique passwords
686 Unique IoT models

Search credentials

Search by vendor, product, model, protocol, access level or username.

12975 credential-risk definitions are currently available.

Hewlett-Packard

Vendor:
unknown
20 campaign/advisory records
JVN / Japan campaign / regional advisory intelligence — 20
JVNDB-2011-001632
Arbitrary Data Insertion Vulnerability in Hitachi Web Server SSL/TLS Protocol
Published 2011-06-29T17:55:03+09:00
JVNDB-2022-000011
HPE Agentless Management registers unquoted service paths
Published 2022-02-09T15:49:56+09:00
JVNDB-2004-000593
LDAP server update function vulnerable to buffer overflow
Published 2008-05-21T00:00:00+09:00
JVNDB-2005-000601
OpenSSL version rollback vulnerability
Published 2008-05-21T00:00:00+09:00
JVNDB-2005-000727
mod_imap cross-site scripting vulnerability
Published 2008-05-21T00:00:00+09:00
JVNDB-2005-000798
MitakeSearch cross-site scripting vulnerability
Published 2008-05-21T00:00:00+09:00
JVNDB-2006-000326
Mozilla Firefox vulnerable to HTTP response splitting
Published 2008-05-21T00:00:00+09:00
JVNDB-2007-000176
Mozilla Firefox cross-site scripting vulnerability
Published 2008-05-21T00:00:00+09:00
JVNDB-2007-000295
APOP password recovery vulnerability
Published 2008-05-21T00:00:00+09:00
JVNDB-2007-000297
Apache Tomcat Accept-Language Header Cross-Site Scripting Vulnerability
Published 2008-05-21T00:00:00+09:00
JVNDB-2007-000420
HP System Management Homepage cross-site scripting vulnerability
Published 2008-05-21T00:00:00+09:00
JVNDB-2007-000456
Apache Tomcat sample web application cross-site scripting vulnerability
Published 2008-05-21T00:00:00+09:00
JVNDB-2007-000457
Apache Tomcat cross-site scripting vulnerability
Published 2008-05-21T00:00:00+09:00
JVNDB-2007-000598
Apache Tomcat Host Manager cross-site scripting vulnerability
Published 2008-05-21T00:00:00+09:00
JVNDB-2007-000819
Cross-site scripting vulnerability in Apache HTTP Server "mod_imap" and "mod_imagemap"
Published 2008-05-21T00:00:00+09:00
JVNDB-2007-001022
Apache UTF-7 Encoding Cross-Site Scripting Vulnerability
Published 2008-05-21T00:00:00+09:00
JVNDB-2008-001043
X.Org Foundation X server buffer overflow vulnerability
Published 2008-06-13T17:11:26+09:00
JVNDB-2009-000029
HP System Management Homepage vulnerable to cross-site scripting
Published 2009-05-20T16:01:00+09:00
JVNDB-2009-000036
Apache Tomcat information disclosure vulnerability
Published 2009-06-18T17:53:50+09:00
JVNDB-2009-000037
Apache Tomcat denial of service (DoS) vulnerability
Published 2009-06-18T17:54:03+09:00
MGR : WORD

Public sources document default credentials associated with this vendor or product. No login attempt was performed.

Source: scantide_default_credentials
References

LANTRONICS TERMINAL SERVER

Vendor:
· Model: LANTRONICS TERMINAL SERVER
tcp_7000
11 campaign/advisory records
FBI / IC3 campaign / regional advisory intelligence — 6
2d8d9bc13ebc018f2f442e1b
Top Cyber Actions for Securing Water Systems
402a4bd5a88cb97b7cc84f00
Cybersecurity Guidance: Chinese-Manufactured UAS
7552923fc476335081e148e7
Enhanced Visibility and Hardening Guidance for Communications Infrastructure
90bad38ebb1c7aa5decba7d3
Context and Recommendations to Protect Against Malicious Activity by Iranian Cyber Group Emennet Pasargad
FBI_IC3-260818.pdf
TLP:CLEAR Co-Authored by: Product ID: AA25-071A #StopRansomware: Medusa Ransomware Publication: March 12, 2025 Last Updated: August 18, 2026 Cybersecurity and Infrastructure Security Agency Federal Bureau of Investigation Department of Heal
e600ad5f025c7db5d4a76554
Emerging Hospice Fraud Targeting Medicare Recipients
CERT-EU campaign / regional advisory intelligence — 5
57290228ca09d11606e01c27
2019-013: UPDATED 07/2019: Remote Desktop Services -- Remote Code Execution Vulnerability Thursday, May 16, 2019 04:22:00 PM CEST Microsoft released fixes for a critical Remote Code Execution vulnerability (CVE-2019-0708) in Remote Desktop Services that affects some older versions of Windows. The vulnerability has been since named BlueKeep.The Remote Desktop Protocol (RDP) itself is not vulnerable. This vulnerability is pre-authentication and requires no user interaction. In other words, the vul
604daa5eb674207d00364f2c
2019-003: RunC Vulnerability Affecting Container Management Systems Wednesday, February 13, 2019 01:58:00 PM CET A container breakout security flaw was found in underlying software used by _containerization_ software (operating-system-level virtualization software). The vulnerability - CVE-2019-5736 - dubbed "runc container breakout" allows specially crafted containers to gain administrative privileges on the host. Exploits for this vulnerability are already circulating in the wild.
a213934382942b68466c7b7e
2021-051: Critical Vulnerabilities in Azure OMI Agents Wednesday, September 15, 2021 01:59:00 PM CEST On 14th of September 2021, Microsoft released information about four vulnerabilities that affects Open Management Infrastructure (OMI) agent.One vulnerability - CVE-2021-38647 - is critical with CVSSv3 Score 9.8. If the HTTP/S port listening to OMI is exposed, it could allow remote code execution by sending a specially-crafted message from remote.The other three vulnerabilities - CVE-2021-38645,
a5bff4b339cfb411cb4ac0f5
2024-076: Vulnerabilities in OpenVPN Monday, August 12, 2024 03:31:53 PM CEST On March 20, 2024, the OpenVPN community project team disclosed several vulnerabilities, CVE-2024-27459, CVE-2024-24974, CVE-2024-27903 and CVE-2024-1305 that could be chained to achieve remote code execution (RCE) and local privilege escalation (LPE). On August 8, 2024, Microsoft released a writeup for those vulnerabilities.
ea9d453462a9b74cf29d2ca1
2018-020: Speculative Execution Attack on Intel Processors Friday, August 17, 2018 10:04:00 AM CEST In January 2018, two separate teams discovered flaws in Intel processorallowing speculative execution attacks and notified Intel of their researches. On 14th of August 2018, the vulnerabilities were disclosed publicly under the name Foreshadow. Based on the provided technical details Intel investigated further and identified two other attack channel with the potential to impact additional micropro
n/a : access

Public sources document default credentials associated with this vendor or product. No login attempt was performed.

Source: scantide_default_credentials

DW600E

Vendor:
· Model: DW600E
unknown
admin : admin

Public sources document default credentials associated with this vendor or product. No login attempt was performed.

Source: scantide_default_credentials

DI-604

Vendor:
· Model: DI-604
http
Affected products and hardware

Official NVD applicability identities associated with the CVEs matched to this credential/device record.

di-604 hardware di-604 broadband router hardware
5 CVEs 5 via NVD applicability 12 campaign/advisory records
CVEs matching this vendor/product — 5
NVD applicability · hardware · 1 criteria EPSS 1.2% EUVD 1 GHSA 1
The Ping tools web interface in Dlink Di-604 router allows remote authenticated users to cause a denial of service via a large "ip textfield" size.
Published 2010-06-15T01:00:00.000Z Updated 2024-08-07T02:25:07.668Z
Affected: di-604
NVD applicability · hardware · 1 criteria EPSS 0.9% EUVD 1 GHSA 1
Cross-site scripting (XSS) vulnerability in the Ping tools web interface in Dlink Di-604 router allows remote attackers to inject arbitrary web script or HTML via the IP field.
Published 2010-06-15T01:00:00.000Z Updated 2024-08-07T02:25:07.751Z
Affected: di-604
NVD applicability · hardware · 1 criteria EPSS 1.0% EUVD 1 GHSA 1
Cross-site scripting (XSS) vulnerability in prim.htm on the D-Link DI-604 router allows remote attackers to inject arbitrary web script or HTML via the rf parameter.
Published 2008-03-10T17:00:00.000Z Updated 2024-08-07T08:17:34.544Z
Affected: di-604
NVD applicability · hardware · 1 criteria EPSS 19.5% Exploit-DB 1 EUVD 1 GHSA 1
Stack-based buffer overflow in the Universal Plug and Play (UPnP) service in D-Link DI-524, DI-604 Broadband Router, DI-624, D-Link DI-784, WBR-1310 Wireless G Router, WBR-2310 RangeBooster G Router, and EBR-2310 Ethernet Broadband Router allows remote attackers to execute arbitrary code via a long M-SEARCH request to UDP port 1900.
Published 2006-07-18T21:00:00.000Z Updated 2024-08-07T18:39:53.876Z
Affected: di-604 broadband router
NVD applicability · hardware · 1 criteria EPSS 2.3% EUVD 1 GHSA 1
Integer signedness error in D-Link AirPlus DI-614+ running firmware 2.30 and earlier allows remote attackers to cause a denial of service (IP lease depletion) via a DHCP request with the LEASETIME option set to -1, which makes the DHCP lease valid for thirteen or more years.
Published 2004-07-13T04:00:00.000Z Updated 2024-08-08T00:24:27.036Z
Affected: di-604
FBI / IC3 campaign / regional advisory intelligence — 2
FBI_IC3-260312.pdf
TLP:CLEAR 12 March 2026 FLASH Number 20260312-001 AVrecon Malware-Infected Routers Exploited as Residential Proxies by SocksEscort Summary The Federal Bureau of Investigation (FBI) is releasing this FLASH to disseminate indicators of compro
a3029583db8893671055550b
HiatusRAT Actors Targeting Web Cameras and DVRs
JVN / Japan campaign / regional advisory intelligence — 9
JVNDB-2024-000063
Multiple vulnerabilities in ID Link Manager and FUJITSU Software TIME CREATOR
Published 2024-06-18T13:43:40+09:00
JVNDB-2019-000062
Multiple OS command injection vulnerabilities in DBA-1510P
Published 2019-10-07T15:17:01+09:00
JVNDB-2011-000092
Multiple D-Link products vulnerable to buffer overflow
Published 2011-10-28T17:42:43+09:00
JVNDB-2013-000089
D-Link DWL-2100AP vulnerable to denial-of-service (DoS)
Published 2013-09-20T15:07:55+09:00
JVNDB-2013-000090
D-Link DES-3810 Series vulnerable to denial-of-service (DoS)
Published 2013-09-20T15:12:21+09:00
JVNDB-2013-000109
D-Link DES-3800 Series vulnerable to denial-of-service (DoS)
Published 2013-11-22T14:50:31+09:00
JVNDB-2013-000110
D-Link DES-3800 Series vulnerable to denial-of-service (DoS)
Published 2013-11-22T14:51:01+09:00
JVNDB-2021-001343
D-Link DAP-1880AC contains multiple vulnerabilities
Published 2021-04-12T15:32:40+09:00
JVNDB-2021-002273
Multiple vulnerabilities in D-Link router DSL-2750U
Published 2021-08-17T14:09:28+09:00
TWCERT/CC campaign / regional advisory intelligence — 1
TVN-202604010
D-Link|DWM-222W USB Wi-Fi Adapter - Brute-Force Protection Bypass
admin : admin

Public sources document default credentials associated with this vendor or product. No login attempt was performed.

Source: scantide_default_credentials
References

telnet

telnet / 23
23 campaign/advisory records
FBI / IC3 campaign / regional advisory intelligence — 13
590b43d2bf56104d53f7eb63
#StopRansomware: Ransomware Attacks on Critical Infrastructure Fund DPRK Malicious Cyber Activities
7552923fc476335081e148e7
Enhanced Visibility and Hardening Guidance for Communications Infrastructure
7b829d8a8489b953221ba12a
North Korean State-Sponsored Cyber Actors Use Maui Ransomware to Target the Healthcare and Public Health Sector
8be0e6ad8aaa95329853ed47
Chinese Government-Mandated Tax Software Contains Malware, Enabling Backdoor Access
FBI_IC3-260407.pdf
TLP:CLEAR Co-Authored by: Product ID: AA26-097A Iranian-Affiliated Cyber Actors Exploit Programmable Logic Controllers Across US Critical Infrastructure Publication: April 7, 2026 Federal Bureau of Investigation Cybersecurity and Infrastruc
FBI_IC3-260818.pdf
TLP:CLEAR Co-Authored by: Product ID: AA25-071A #StopRansomware: Medusa Ransomware Publication: March 12, 2025 Last Updated: August 18, 2026 Cybersecurity and Infrastructure Security Agency Federal Bureau of Investigation Department of Heal
a3029583db8893671055550b
HiatusRAT Actors Targeting Web Cameras and DVRs
a5c1a0b0774239b41c154d04
Threat Actors Exploit Multiple Vulnerabilities in Ivanti Connect Secure and Policy Secure Gateways
b231bb0588fb58ea25e903a9
Indictment of China-Based Cyber Actors Associated with APT 41 for Intrusion Activities
d5a9855d1d7790d4f365af8d
#StopRansomware: Daixin Team
dcc3eb16963e92b8e0c4641b
Tactics, Techniques, and Procedures Associated with Malware within Chinese Government-Mandated Tax Software
ea8bc5e2980b7954c0f0d1c0
APT28 exploits known vulnerability to carry out reconnaissance of routers and deploy malware
f5d451173ad0fcfd92324078
COVID-19 Phishing Email Indicators
CERT-EU campaign / regional advisory intelligence — 9
0463bc1aca415ae34bacd02a
2021-009: Critical Vulnerabilities in Cisco Products Thursday, February 04, 2021 09:35:00 PM CET Cisco has published an advisory about several vulnerabilities affecting various Cisco Products. These vulnerabilities could lead to remote code execution, privilege escalation, directory traversal, file overwrite or denial of service. While Cisco is not aware of any malicious exploit in the wild, it is highly recommended to patch the affected products.
07f93ac177a174d99635789b
2020-036: Critical Cisco Vulnerabilities Thursday, July 16, 2020 12:06:00 PM CEST Cisco released 31 Security Advisories for vulnerabilities affecting its products. Five of them are rated critical with CVSS Score 9.8. In particular, critical vulnerabilities affect: telnet service of firewall routers (CVE-2020-3330), web-based management interface of routers (CVE-2020-3323, CVE-2020-3144, and CVE-2020-3331), and web management interface of Cisco Prime License Manager (PLM) software (CVE-2020-3140)
10f3205f97e0128801acb4b1
2013-0100: Cisco ASA Denial of service Wednesday, December 11, 2013 04:22:00 PM CET A vulnerability in the Cisco Adaptive Security Appliance (ASA) Software could allow an unauthenticated, remote attacker to cause an affected system to become unresponsive to management session requests via SSH, Telnet, HTTP, and HTTPS.
1fcf21fda66910438380068c
2013
579a8b2540f682b380dc70a2
Cyber Brief 25-10 - September 2025 Wednesday, October 01, 2025 05:00:00 PM CEST Cyber Briefs are monthly executive reports that aim to present an overview of the most relevant developments in cyber security, based exclusively on open sources, with a view to inform political leadership and senior management in its constituency. Additional information on any item in this Brief can be provided upon request. Cyber Briefs are TLP:CLEAR.
a0018c749f30221cebfa3a3c
2020
a665dbcf3d8c512500c7c170
2021-048: Vulnerabilities in PaloAlto Software Saturday, September 11, 2021 10:21:00 AM CEST On September 8, Palo Alto published security advisories about three vulnerabilities rated as high, CVE-2020-10188, CVE-2021-3051 and CVE-2021-3052 affecting respectively PanOS telnet-based administrative management service, Cortex XSOAR and PAN-OS web interface.
b38ac92e454aed6f052a132a
2012-0008: Cisco IronPort Appliances Telnet Remote Code Execution Vulnerability Monday, January 30, 2012 08:39:00 AM CET Cisco IronPort Email Security Appliances (ESA) and Cisco IronPort Security Management Appliances (SMA) contain a vulnerability that may allow a remote, unauthenticated attacker to execute arbitrary code with elevated privileges
ed61e81dd2353009f908399f
2017-006: UPDATE Critical Cisco CMP Remote Code Execution Vulnerability Tuesday, March 21, 2017 11:44:00 AM CET Cisco security researchers found a vulnerability in the Cluster Management Protocol (CMP) code in Cisco IOS and Cisco IOS XE software that could allow an unauthenticated, remote attacker to cause a reload of an affected device or remotely execute code with elevated privileges. Cisco has now released a software fix for this vulnerability.
JVN / Japan campaign / regional advisory intelligence — 1
JVNDB-2009-000068
Implementations of IPv6 may be vulnerable to denial of service (DoS) attacks
Published 2009-10-26T15:58:16+09:00
root : admin

Known default or weak credential handling definition. Verify configuration; no login attempt was performed.

Source: changeme

EPiServer AB

Vendor:
unknown
admin : [blank]

Public sources document default credentials associated with this vendor or product. No login attempt was performed.

Source: scantide_default_credentials

MICHELANGELO

Vendor:
· Model: MICHELANGELO
multi
admin : michelangelo

Public sources document default credentials associated with this vendor or product. No login attempt was performed.

Source: scantide_default_credentials

SBG900

Vendor:
· Model: SBG900
unknown
1 campaign/advisory record
CERT-EU campaign / regional advisory intelligence — 1
f3af06ad16c56844595e0a7d
2019-020: Simjacker Vulnerability Impacting up to 1 Billion Phone Users Friday, September 13, 2019 06:07:00 PM CEST AdaptiveMobile Security have uncovered a new and previously undetected vulnerability and associated exploits, called Simjacker. This vulnerability is currently being actively exploited. The main Simjacker attack involves an SMS containing a specific type of spyware-like code being sent to a mobile phone, which then instructs the SIM Card within the phone to "take over" the mobile p
admin : motorola

Public sources document default credentials associated with this vendor or product. No login attempt was performed.

Source: scantide_default_credentials

MF93D

Vendor:
· Model: MF93D
unknown
6 campaign/advisory records
CERT-EU campaign / regional advisory intelligence — 5
07a28d190f41f960bd15cf9a
Cyber Brief - July 2022 Tuesday, August 02, 2022 10:17:00 AM CEST Cyber Briefs are monthly executive reports that aim to present an overview of the most relevant developments in cyber security, based exclusively on open sources, with a view to inform political leadership and senior management in its constituency. Additional information on any item in this Brief can be provided upon request. Cyber Briefs are TLP:WHITE.
7a8af3c6f57edf032a0f70fa
Cyber Security Brief - November 2022 Thursday, December 01, 2022 11:20:00 AM CET Cyber Security Briefs are monthly executive reports that aim to present an overview of the most relevant developments in cyber security, based exclusively on open sources, with a view to inform political leadership and senior management in its constituency. Additional information on any item in this Brief can be provided upon request. Cyber Security Briefs are TLP:WHITE.
7da83dac11426221c05890ac
Cyber Security Brief 24-08 - July 2024 Thursday, August 01, 2024 06:00:00 PM CEST Cyber Security Briefs are monthly executive reports that aim to present an overview of the most relevant developments in cyber security, based exclusively on open sources, with a view to inform political leadership and senior management in its constituency. Additional information on any item in this Brief can be provided upon request. Cyber Security Briefs are TLP:CLEAR.
cd78ff783f36db815eeb1c8c
Cyber Brief - May 2022 Wednesday, June 01, 2022 02:08:00 PM CEST Cyber Briefs are monthly executive reports that aim to present an overview of the most relevant developments in cyber security, based exclusively on open sources, with a view to inform political leadership and senior management in its constituency. Additional information on any item in this Brief can be provided upon request. Cyber Briefs are TLP:WHITE.
f3af06ad16c56844595e0a7d
2019-020: Simjacker Vulnerability Impacting up to 1 Billion Phone Users Friday, September 13, 2019 06:07:00 PM CEST AdaptiveMobile Security have uncovered a new and previously undetected vulnerability and associated exploits, called Simjacker. This vulnerability is currently being actively exploited. The main Simjacker attack involves an SMS containing a specific type of spyware-like code being sent to a mobile phone, which then instructs the SIM Card within the phone to "take over" the mobile p
JVN / Japan campaign / regional advisory intelligence — 1
JVNDB-2025-000055
ZXHN-F660T and ZXHN-F660A use a common credential for all installations
Published 2025-07-31T15:12:40+09:00
admin : admin

Public sources document default credentials associated with this vendor or product. No login attempt was performed.

Source: scantide_default_credentials

Samsung

Vendor:
unknown
11 CVEs · highest 9.9 1 upcoming vendor advisory 7 campaign/advisory records
CVEs matching this vendor/product — 11 Highest CVSS 9.9
CVSS 7.5 EPSS 0.4% EUVD 1 GHSA 1
An exploitable stack-based buffer overflow vulnerability exists in the retrieval of database fields in the video-core HTTP server of the Samsung SmartThings Hub STH-ETH-250 - Firmware version 0.20.17. The strcpy call overflows the destination buffer, which has a size of 136 bytes. An attacker can send an arbitrarily long 'directory' value in order to exploit this vulnerability. An attacker can send an HTTP request to trigger this vulnerability.
Published 2018-08-28T20:00:00.000Z Updated 2024-09-16T18:44:01.461Z
CVSS 9.1 EPSS 1.3% EUVD 1 GHSA 1
An exploitable vulnerability exists in the REST parser of video-core's HTTP server of the Samsung SmartThings Hub STH-ETH-250-Firmware version 0.20.17. The video-core process incorrectly handles pipelined HTTP requests, which allows successive requests to overwrite the previously parsed HTTP method, URL and body. With the implementation of the on_body callback, defined by sub_41734, an attacker can send an HTTP request to trigger this vulnerability.
Published 2018-08-28T19:00:00.000Z Updated 2024-09-17T01:26:10.323Z
CVSS 9.9 EPSS 1.8% EUVD 1 GHSA 1
An exploitable buffer overflow vulnerability exists in the /cameras/XXXX/clips handler of video-core's HTTP server of Samsung SmartThings Hub STH-ETH-250 Firmware version 0.20.17. The strncpy call overflows the destination buffer, which has a size of 52 bytes. An attacker can send an arbitrarily long 'endTime' value in order to exploit this vulnerability. An attacker can send an HTTP request to trigger this vulnerability.
Published 2018-08-28T19:00:00.000Z Updated 2024-09-17T03:43:08.118Z
CVSS 6.8 EPSS 1.1% EUVD 1 GHSA 1
An exploitable information disclosure vulnerability exists in the crash handler of the hubCore binary of the Samsung SmartThings Hub STH-ETH-250 - Firmware version 0.20.17. When hubCore crashes, Google Breakpad is used to record minidumps, which are sent over an insecure HTTPS connection to the backtrace.io service, leading to the exposure of sensitive data. An attacker can impersonate the remote backtrace.io server in order to trigger this vulnerability.
Published 2018-08-27T15:00:00.000Z Updated 2024-09-16T18:03:25.721Z
CVSS 6.5 EPSS 1.0% EUVD 1 GHSA 1
An exploitable vulnerability exists in the remote servers of Samsung SmartThings Hub STH-ETH-250 - Firmware version 0.20.17. The hubCore process listens on port 39500 and relays any unauthenticated messages to SmartThings' remote servers, which incorrectly handle camera IDs for the 'sync' operation, leading to arbitrary deletion of cameras. An attacker can send an HTTP request to trigger this vulnerability.
Published 2018-08-27T15:00:00.000Z Updated 2024-09-17T03:13:23.241Z
CVSS 9.9 EPSS 1.8% EUVD 1 GHSA 1
An exploitable buffer overflow vulnerability exists in the camera 'update' feature of video-core's HTTP server of Samsung SmartThings Hub STH-ETH-250 - Firmware version 0.20.17. The video-core process incorrectly extracts fields from a user-controlled JSON payload, leading to a buffer overflow on the stack. An attacker can send an HTTP request to trigger this vulnerability.
Published 2018-08-27T15:00:00.000Z Updated 2024-09-16T20:16:27.178Z
CVSS 8.6 EPSS 1.2% EUVD 1 GHSA 1
An exploitable HTTP header injection vulnerability exists in the remote servers of Samsung SmartThings Hub STH-ETH-250 - Firmware version 0.20.17. The hubCore process listens on port 39500 and relays any unauthenticated message to SmartThings' remote servers, which insecurely handle JSON messages, leading to partially controlled requests generated toward the internal video-core process. An attacker can send an HTTP request to trigger this vulnerability.
Published 2018-08-23T22:00:00.000Z Updated 2024-09-16T18:43:38.067Z
CVSS 8.2 EPSS 1.2% EUVD 1 GHSA 1
An exploitable stack-based buffer overflow vulnerability exists in the database 'find-by-cameraId' functionality of video-core's HTTP server of Samsung SmartThings Hub STH-ETH-250 - Firmware version 0.20.17. The video-core process incorrectly handles existing records inside its SQLite database, leading to a buffer overflow on the stack. An attacker can send an HTTP request to trigger this vulnerability.
Published 2018-08-23T22:00:00.000Z Updated 2024-09-17T01:00:52.006Z
CVSS 9.9 EPSS 1.8% EUVD 1 GHSA 1
An exploitable buffer overflow vulnerability exists in the credentials handler of video-core's HTTP server of Samsung SmartThings Hub STH-ETH-250 - Firmware version 0.20.17. The video-core process incorrectly extracts the videoHostUrl field from a user-controlled JSON payload, leading to a buffer overflow on the stack. An attacker can send an HTTP request to trigger this vulnerability.
Published 2018-08-23T22:00:00.000Z Updated 2024-09-16T20:47:01.793Z
CVSS 9.9 EPSS 1.5% EUVD 1 GHSA 1
An exploitable buffer overflow vulnerability exists in the samsungWifiScan handler of video-core's HTTP server of Samsung SmartThings Hub STH-ETH-250 - Firmware version 0.20.17. The video-core process incorrectly extracts fields from a user-controlled JSON payload, leading to a buffer overflow on the stack. The strcpy at [8] overflows the destination buffer, which has a size of 40 bytes. An attacker can send an arbitrarily long 'callbackUrl' value in order to exploit this vulnerability.
Published 2018-08-23T22:00:00.000Z Updated 2024-09-16T17:18:45.490Z
CVSS 9.9 EPSS 3.4% EUVD 1 GHSA 1
An exploitable vulnerability exists in the smart cameras RTSP configuration of the Samsung SmartThings Hub STH-ETH-250 - Firmware version 0.20.17. The device incorrectly handles spaces in the URL field, leading to an arbitrary operating system command injection. An attacker can send a series of HTTP requests to trigger this vulnerability.
Published 2018-08-23T22:00:00.000Z Updated 2024-09-16T17:52:57.516Z
CERT-EU campaign / regional advisory intelligence — 7
101e1f0f11d0be1353a3e8f6
Cyber Brief 25-12 - November 2025 Tuesday, December 02, 2025 04:00:00 PM CET Cyber Briefs are monthly executive reports that aim to present an overview of the most relevant developments in cyber security, based exclusively on open sources, with a view to inform political leadership and senior management in its constituency. Additional information on any item in this Brief can be provided upon request. Cyber Briefs are TLP:CLEAR.
81584383d86765a515d350e9
Cyber Security Brief 23-06 - May 2023 Thursday, June 01, 2023 04:20:00 PM CEST Cyber Security Briefs are monthly executive reports that aim to present an overview of the most relevant developments in cyber security, based exclusively on open sources, with a view to inform political leadership and senior management in its constituency. Additional information on any item in this Brief can be provided upon request. Cyber Security Briefs are TLP:CLEAR.
8372f131e98bed82bc2db0e8
Cyber Brief 25-05 - April 2025 Friday, May 02, 2025 05:00:00 PM CEST Cyber Briefs are monthly executive reports that aim to present an overview of the most relevant developments in cyber security, based exclusively on open sources, with a view to inform political leadership and senior management in its constituency. Additional information on any item in this Brief can be provided upon request. Cyber Briefs are TLP:CLEAR.
a3669f25439ea71ed1983d8c
2012-0138: Samsung and some Dell printers, Remote Disclosure of Information. Thursday, December 06, 2012 10:06:00 AM CET Samsung printers and some Dell printers manufactured for Samsung contain and snmp account that could be used to get privileged access to the devices.
c080e51ea7eda0029e795522
2017-008: Broadcom Critical Wi-Fi SoC Vulnerability in iOS and Android Friday, April 07, 2017 09:02:00 AM CEST The vulnerability resides in a widely used Wi-Fi chipset manufactured by Broadcom and used in both iOS and Android devices. An attacker within range may be able to execute arbitrary code on the Wi-Fi chip. Google Project Zero researcher Gal Beniamini, who discovered the flaw said it allowed the execution of malicious code by Wi-Fi proximity alone, requiring no user interaction [1].
decebe71a58113ba6e5f1c3b
2012
f3af06ad16c56844595e0a7d
2019-020: Simjacker Vulnerability Impacting up to 1 Billion Phone Users Friday, September 13, 2019 06:07:00 PM CEST AdaptiveMobile Security have uncovered a new and previously undetected vulnerability and associated exploits, called Simjacker. This vulnerability is currently being actively exploited. The main Simjacker attack involves an SMS containing a specific type of spyware-like code being sent to a mobile phone, which then instructs the SIM Card within the phone to "take over" the mobile p
Upcoming ZDI vendor advisories — 1

Vendor-level advance notice: ZDI has not yet disclosed which product is affected. These entries are shown because this credential record matches the vendor; they are not findings against this product or model.

ZDI-CAN-29432 CVSS 8.8
Vendor contacted: 2026-05-06 Planned disclosure: 2026-09-03 Researcher: Dvir Gozlan
Affected product: Not yet disclosed · Open ZDI Upcoming
admin : password

Public sources document default credentials associated with this vendor or product. No login attempt was performed.

Source: scantide_default_credentials
References

2804STC

Vendor:
· Model: 2804STC
unknown
unknown : unknown

Public sources document default credentials associated with this vendor or product. No login attempt was performed.

Source: scantide_default_credentials

SX2000

Vendor:
· Model: SX2000
telnet_serial
42 campaign/advisory records
FBI / IC3 campaign / regional advisory intelligence — 20
01e9abcc28c68df5c0b4e43e
Update on SVR Cyber Operations and Vulnerability Exploitation
02c564e5d11e235eccef00f3
New Sandworm malware Cyclops Blink replaces VPNFilter
0395243c18e95df7d5cb774c
In Real Life (IRL) Com: Violent Subset of The Community (Com) is a Rising Threat to Youth Online — FBI An official website of the United States government. Here's how you know Official websites use .gov A .gov website belongs to an official government organization in the United States. Secure .gov websites use HTTPS A lock ( ) or https:// means you've safely connected to the .gov website. Share se
0656fd99c93dfd5a6bca805c
Just So You Know: Ransomware Disruptions during Voting Periods Will Not Impact the Security and Resiliency of Vote Casting or Counting
0698638c72fa1363ede20ec4
2021 Trends Show Increased Globalized Threat of Ransomware
07e7eb1322d4643ea3b7b3c7
Return to top
07e8dad684aa5ddf5f71550d
Motor Vehicles Increasingly Vulnerable to Remote Exploits
0a2ed3f904e1b539478b556c
APT40 Advisory: PRC MSS tradecraft in action
0bffb47abc37b910c5409e2d
Malicious Actors Almost Certainly Will Leverage Synthetic Content for Cyber and Foreign Influence Operations
0e29017b2b1f766d58fd49be
Malicious Cyber Actors Targeting Water and Wastewater Sector Internet- Facing Programmable Logic Controllers, Causing Operational Disruptions — FBI An official website of the United States government. Here's how you know Official websites use .gov A .gov website belongs to an official government organization in the United States. Secure .gov websites use HTTPS A lock ( ) or https:// means you've s
0e3e1f8fb7fb2135c147ed42
Countering Chinese State-Sponsored Actors Compromise of Networks Worldwide to Feed Global Espionage System — FBI An official website of the United States government. Here's how you know Official websites use .gov A .gov website belongs to an official government organization in the United States. Secure .gov websites use HTTPS A lock ( ) or https:// means you've safely connected to the .gov website
0f10cb84495aa2a8ce5570f8
Public Service Announcements
11c95addfb97b7069dc5873a
Compromise of Microsoft Exchange Server
11f725160c85af3ba01849cc
People's Republic of China State-Sponsored Cyber Actor Living off the Land to Evade Detection
1222c75ac30b8499f3f6f137
Russian Government Cyber Actors Targeting Networking Devices, Critical Infrastructure
124df2a59609baa8e2142e87
FBI Seeking Tips about PRC Targeting of U.S. Telecommunications — FBI An official website of the United States government. Here's how you know Official websites use .gov A .gov website belongs to an official government organization in the United States. Secure .gov websites use HTTPS A lock ( ) or https:// means you've safely connected to the .gov website. Share sensitive information only on offic
128e2c843960ddb289e6118e
Skip to content
1293a5f384189b121e72eaea
Suspected PRC Cyber Actors Continue to Globally Exploit Barracuda ESG Zero-Day Vulnerability
1455ea26a0296c054ad5d92d
North Korean IT Worker Threats to U.S. Businesses — FBI An official website of the United States government. Here's how you know Official websites use .gov A .gov website belongs to an official government organization in the United States. Secure .gov websites use HTTPS A lock ( ) or https:// means you've safely connected to the .gov website. Share sensitive information only on official, secure we
1499297aad75b4e344422d39
#StopRansomware: Royal Ransomware
CERT-EU campaign / regional advisory intelligence — 20
021dad8bb0c4c9076a95ac7d
2017-012: UPDATE! WannaCry Ransomware Campaign Exploiting SMB Vulnerability Monday, May 22, 2017 03:46:00 PM CEST A large ransomware campaign has been observed since Friday, May 12th, 2017. The payload delivered is a variant of ransomware malware called WannaCry. It appears to infect computers through a recent SMB vulnerability in Microsoft Windows operating system (CVE-2017-0145).
03b7a54ee5ce9e82f09fe828
Cyber Security Brief 23-09 - August 2023 Monday, September 04, 2023 12:20:00 PM CEST Cyber Security Briefs are monthly executive reports that aim to present an overview of the most relevant developments in cyber security, based exclusively on open sources, with a view to inform political leadership and senior management in its constituency. Additional information on any item in this Brief can be provided upon request. Cyber Security Briefs are TLP:CLEAR.
04fc97c8f2852a360cdf4afc
2023
060783a8f0553c4295139910
Cyber Brief 25-04 - March 2025 Wednesday, April 02, 2025 04:00:00 PM CEST Cyber Briefs are monthly executive reports that aim to present an overview of the most relevant developments in cyber security, based exclusively on open sources, with a view to inform political leadership and senior management in its constituency. Additional information on any item in this Brief can be provided upon request. Cyber Briefs are TLP:CLEAR.
06398e085df7cb738a141f67
2025-035: High Vulnerability in Cisco IOS and IOS XE Software Friday, September 26, 2025 09:03:31 AM CEST On September 24, 2025, Cisco released a security advisory regarding a high severity vulnerability in the Simple Network Management Protocol (SNMP) subsystem of Cisco IOS Software and Cisco IOS XE Software. The vulnerability is being exploited in the wild. It is recommended updating as soon as possible and conduct a compromise assessment on devices that are exposing SNMP on the Internet. It i
08af8e105c397ab708b7e1a4
Cyber Brief 24-11 - October 2024 Monday, November 04, 2024 05:00:00 PM CET Cyber Briefs are monthly executive reports that aim to present an overview of the most relevant developments in cyber security, based exclusively on open sources, with a view to inform political leadership and senior management in its constituency. Additional information on any item in this Brief can be provided upon request. Cyber Security Briefs are TLP:CLEAR.
0e8356092fb79e06f765ecc9
2018-019: New attack on WPA/WPA2 using PMKID Wednesday, August 08, 2018 08:53:00 AM CEST On August 4th the researcher Jens Steube published on his website a new method to get a hash which involves the Pre-Shared Key (PSK) of a wifi access point. A successful exploitation of the technique allows an attacker to retrieve the PSK.
101e1f0f11d0be1353a3e8f6
Cyber Brief 25-12 - November 2025 Tuesday, December 02, 2025 04:00:00 PM CET Cyber Briefs are monthly executive reports that aim to present an overview of the most relevant developments in cyber security, based exclusively on open sources, with a view to inform political leadership and senior management in its constituency. Additional information on any item in this Brief can be provided upon request. Cyber Briefs are TLP:CLEAR.
14880f3be225b8bc6eb65814
2023-074: HTTP/2 Rapid Reset DDoS Vulnerability Tuesday, October 17, 2023 10:37:46 PM CEST On October 10, 2023, Cloudflare, Google and Amazon AWS, jointly disclosed a vulnerability affecting the HTTP/2 protocol. Named as "CVE-2023-44487", this vulnerability impacts various web services and cloud customers. This vulnerability is being actively exploited and has led to Distributed Denial of Service (DDoS) attacks that are significantly larger than previous Layer 7 attacks. CERT-EU recommends ident
164e9b5c225d1223c305e30c
Cyber Brief 25-11 - October 2025 Saturday, November 01, 2025 04:00:00 PM CET Cyber Briefs are monthly executive reports that aim to present an overview of the most relevant developments in cyber security, based exclusively on open sources, with a view to inform political leadership and senior management in its constituency. Additional information on any item in this Brief can be provided upon request. Cyber Briefs are TLP:CLEAR.
1bbf5d450611b77636ae8300
2024-117: Zero-Day Vulnerabilities in Palo Alto Networks PAN-OS Tuesday, November 19, 2024 10:55:57 AM CET Palo Alto Networks released security updates for two actively exploited zero-day vulnerabilities in Palo Alto Networks PAN-OS. If exploited, these vulnerabilities could allow a remote unauthenticated attacker to gain administrator privileges, or a PAN-OS administrator to perform actions on the firewall with root privileges. It recommended applying the updates and restricting the access to t
1ee17365ef997b70c76d843b
2023-059: Multiple Junos OS Vulnerabilities Tuesday, September 19, 2023 11:36:53 AM CEST Juniper Networks has released fixes to address several vulnerabilities. These vulnerabilities could potentially be chained together to allow unauthorised remote code execution (RCE) on SRX and EX series devices. The combined CVSS score for these flaws is 9.8 (Critical) and a PoC exploit has been publicly released. Therefore, CERT-EU strongly advises users to promptly update their devices to the latest versio
2478e8aca48921497bf1e2c7
Cyber Security Brief 23-10 - September 2023 Wednesday, October 04, 2023 10:50:00 AM CEST Cyber Security Briefs are monthly executive reports that aim to present an overview of the most relevant developments in cyber security, based exclusively on open sources, with a view to inform political leadership and senior management in its constituency. Additional information on any item in this Brief can be provided upon request. Cyber Security Briefs are TLP:CLEAR.
2680cc37ee8f65e8e40e6ae1
Cyber Brief 24-05 - April 2024 Thursday, May 02, 2024 06:00:00 PM CEST Cyber Briefs are monthly executive reports that aim to present an overview of the most relevant developments in cyber security, based exclusively on open sources, with a view to inform political leadership and senior management in its constituency. Additional information on any item in this Brief can be provided upon request. Cyber Security Briefs are TLP:CLEAR.
2d1ee0e007632eaa18665e0f
2020-045: Vulnerabilities in Palo Alto PAN-OS Thursday, September 10, 2020 12:05:00 PM CEST On 9th of September 2020, Palo Alto released several security advisories, updates, and workarounds to address security vulnerabilities including five high severity vulnerabilities and one critical one for PAN-OS:* CVE-2020-2040 PAN-OS: Buffer overflow when Captive Portal or Multi-Factor Authentication (MFA) is enabled - CVSS score 9.8 (critical)* CVE-2020-2036 PAN-OS: Reflected Cross-Site Scripting (XSS)
2de15b870ee1e7fa85e48d0f
2015-824: Remote code execution vulnerability in jar analysis Wednesday, December 16, 2015 05:44:00 PM CET Tavis Ormandy and Natalie Silvanovich of Google Project Zero discovered a critical vulnerability in Fireeye devices. As a result, an attacker can send an email to a user or alternatively get them to click a link and completely compromise one of the most privileged machines on the network. This allows exfiltration of confidential data, tampering with traffic, lateral movement around networks
3149ef4d675627192800b4d0
Cyber Brief 26-04 - March 2026 Wednesday, April 01, 2026 05:00:00 PM CEST Cyber Briefs are monthly executive reports that aim to present an overview of the most relevant developments in cyber security, based exclusively on open sources, with a view to inform political leadership and senior management in its constituency. Additional information on any item in this Brief can be provided upon request. Cyber Briefs are TLP:CLEAR.
31560e14b6211923cb45b9db
2024-038: Critical vulnerabilities in Junos OS and Junos OS Evolved Tuesday, April 16, 2024 08:59:45 PM CEST Multiple critical vulnerabilities have been identified in Juniper Networks Junos OS and Junos OS Evolved, primarily related to outdated cURL libraries. These vulnerabilities could allow remote attackers to execute arbitrary code, cause denial of service, or leak sensitive information. It is strongly advised to update affected systems to the latest versions to mitigate these risks.
3238a7f05b26fa25f81772ea
2023-062: Cisco Remote Access VPN Vulnerability Monday, September 11, 2023 05:04:13 PM CEST On July 12, 2023, Cisco released an advisory to address a vulnerability in the remote access VPN feature of Cisco Adaptive Security Appliance (ASA) and Cisco Firepower Threat Defence (FTD) software. It could allow an unauthenticated, remote attacker to conduct a brute force attack in an attempt to identify valid username and password combinations or an authenticated, remote attacker to establish a client-
347317d1b3f300eea208fe47
2020-033: UPDATE: Serious MobileIron Vulnerabilities Friday, July 10, 2020 12:21:00 PM CEST In July 2020, an independent security researcher reported to MobileIron that he had identified vulnerabilities in MobileIron Core that could allow an attacker to execute remote exploits without authentication. MobileIron has issued patches for the affected products. The patches cover three independent vulnerabilities: CVE-2020-15505 (remote code execution), CVE-2020-15506 (authentication bypass), and CVE-
Europol / EC3 campaign / regional advisory intelligence — 2
0aefbe7b6f5a4d0a53303855
Europol and Palo Alto Networks expand their cooperation in tackling cybercrime | Europol You need to enable JavaScript to run this app. Loading application. Please wait.
3246acf57294f818efa3f2a4
Global cyber strike disrupts SocGholish, Amadey, and StealC malware networks – Coordinated actions take down criminal infrastructure; over EUR 41 million in criminal crypto assets seized | Europol You need to enable JavaScript to run this app. Loading application. Please wait.
system : sx2000

Public sources document default credentials associated with this vendor or product. No login attempt was performed.

Source: scantide_default_credentials
References

IP806GB

Vendor:
· Model: IP806GB
unknown
admin : admin

Public sources document default credentials associated with this vendor or product. No login attempt was performed.

Source: scantide_default_credentials

Enterasys

Vendor:
unknown
tiger : [blank]

Public sources document default credentials associated with this vendor or product. No login attempt was performed.

Source: scantide_default_credentials

IBM

Vendor:
unknown
26 campaign/advisory records
FBI / IC3 campaign / regional advisory intelligence — 1
36b4ec7d77002ad7f7aa6d7e
Guidelines for secure AI system development
CERT-EU campaign / regional advisory intelligence — 6
5cc2ed95629003380b8e47d0
2011
9c97832c4deff24c44466de4
Cyber Security Brief 23-08 - July 2023 Tuesday, August 01, 2023 08:30:00 PM CEST Cyber Security Briefs are monthly executive reports that aim to present an overview of the most relevant developments in cyber security, based exclusively on open sources, with a view to inform political leadership and senior management in its constituency. Additional information on any item in this Brief can be provided upon request. Cyber Security Briefs are TLP:CLEAR.
a07ff9c64a8eaaac05972609
2012-0102: IBM WebSphere MQ File Transfer Edition Web Gateway insufficient access control Friday, August 17, 2012 03:34:00 PM CEST When using the web gateway, an authenticated user is able to access other users' files without further access control if the URL of the file is known. The URL for a file contains non guessable elements.
decebe71a58113ba6e5f1c3b
2012
e4d65c698fc358af977b08bd
Cyber Security Brief 24-04 - March 2024 Wednesday, April 03, 2024 12:30:00 PM CEST Cyber Security Briefs are monthly executive reports that aim to present an overview of the most relevant developments in cyber security, based exclusively on open sources, with a view to inform political leadership and senior management in its constituency. Additional information on any item in this Brief can be provided upon request. Cyber Security Briefs are TLP:CLEAR.
ea61f1a5c038c8c69b6b9bd6
Cyber Brief 26-06 - May 2026 Tuesday, June 02, 2026 06:00:00 PM CEST Cyber Briefs are monthly executive reports that aim to present an overview of the most relevant developments in cyber security, based exclusively on open sources, with a view to inform political leadership and senior management in its constituency. Additional information on any item in this Brief can be provided upon request. Cyber Briefs are TLP:CLEAR.
JVN / Japan campaign / regional advisory intelligence — 19
JVNDB-2005-000705
Fujitsu Java Runtime Environment reflection API vulnerability
Published 2008-05-21T00:00:00+09:00
JVNDB-2005-000706
Fujitsu Java Runtime Environment reflection API vulnerability
Published 2008-05-21T00:00:00+09:00
JVNDB-2005-000707
Fujitsu Java Runtime Environment reflection API vulnerability
Published 2008-05-21T00:00:00+09:00
JVNDB-2005-000727
mod_imap cross-site scripting vulnerability
Published 2008-05-21T00:00:00+09:00
JVNDB-2005-000776
Java Cryptography Extension 1.2.1 (JCE 1.2.1) will no longer function properly after July 28, 2005 due to the expiration of its digital certificate
Published 2008-05-21T00:00:00+09:00
JVNDB-2007-000802
Lotus Domino cross-site scripting vulnerability
Published 2008-05-21T00:00:00+09:00
JVNDB-2007-000819
Cross-site scripting vulnerability in Apache HTTP Server "mod_imap" and "mod_imagemap"
Published 2008-05-21T00:00:00+09:00
JVNDB-2008-001043
X.Org Foundation X server buffer overflow vulnerability
Published 2008-06-13T17:11:26+09:00
JVNDB-2011-000016
IBM DB2 vulnerable to denial-of-service (DoS)
Published 2011-03-04T19:29:37+09:00
JVNDB-2011-000017
IBM WebSphere Application Server vulnerable to denial-of-service (DoS)
Published 2011-03-04T19:29:20+09:00
JVNDB-2011-000018
IBM Lotus vulnerable to denial-of-service (DoS)
Published 2011-03-04T19:28:42+09:00
JVNDB-2013-000004
WebSphere Application Server (WAS) vulnerable to cross-site scripting
Published 2013-01-25T12:32:36+09:00
JVNDB-2013-000030
Lotus Domino vulnerable to denial-of-service (DoS)
Published 2013-03-28T12:32:39+09:00
JVNDB-2013-000070
Oracle Outside In vulnerable to buffer overflow
Published 2013-07-17T13:45:49+09:00
JVNDB-2013-000071
Oracle Outside In vulnerable to denial-of-service (DoS)
Published 2013-07-17T13:56:43+09:00
JVNDB-2026-000038
Installer for IBM Trusteer Rapport may insecurely load Dynamic Link Libraries
Published 2026-03-17T14:57:53+09:00
JVNDB-2007-000395
Homepage Builder sample CGI programs vulnerable to OS command injection
Published 2008-05-21T00:00:00+09:00
JVNDB-2008-000011
Internet Scanner reporting engine vulnerable to cross-site scripting
Published 2008-05-21T00:00:00+09:00
JVNDB-2025-000104
Multiple vulnerabilities in GNU Libmicrohttpd
Published 2025-11-10T15:07:35+09:00
[no username] : IBM

Public sources document default credentials associated with this vendor or product. No login attempt was performed.

Source: scantide_default_credentials
References

DPC3828D

Vendor:
· Model: DPC3828D
unknown
24 upcoming vendor advisories 50 campaign/advisory records
FBI / IC3 campaign / regional advisory intelligence — 20
01e9abcc28c68df5c0b4e43e
Update on SVR Cyber Operations and Vulnerability Exploitation
02c564e5d11e235eccef00f3
New Sandworm malware Cyclops Blink replaces VPNFilter
1222c75ac30b8499f3f6f137
Russian Government Cyber Actors Targeting Networking Devices, Critical Infrastructure
23ecec0c3c508513e5d9a1bb
Russian State-Sponsored Cyber Actors Gain Network Access by Exploiting Default Multifactor Authentication Protocols and "PrintNightmare" Vulnerability
2becd729f39ba0f44afaf582
People's Republic of China-Linked Cyber Actors Hide in Router Firmware
427b50ed882d3c9a0378d316
2023 Top Routinely Exploited Vulnerabilities
468ca719334549d0f6bad717
#StopRansomware: Akira Ransomware
57ff43de10c50b891ba950cf
Top CVEs Actively Exploited By People's Republic of China State-Sponsored Cyber Actors
6f43c633cb1c2eda279c3b6e
PRC State-Sponsored Cyber Activity: Actions For Critical Infrastructure Leaders
7552923fc476335081e148e7
Enhanced Visibility and Hardening Guidance for Communications Infrastructure
7680e4673ab4f16938da44f9
Russian State-Sponsored Advanced Persistent Threat Actor Compromises US Government Targets
7af9cda0c10273509413ad9a
State-Sponsored Actors Compromise and Maintain Persistent Access to U.S. Critical Infrastructure
9550066e70010a432e19c33e
People's Republic of China-Linked Actors Compromise Routers and IoT Devices for Botnet Operations
FBI_IC3-260312.pdf
TLP:CLEAR 12 March 2026 FLASH Number 20260312-001 AVrecon Malware-Infected Routers Exploited as Residential Proxies by SocksEscort Summary The Federal Bureau of Investigation (FBI) is releasing this FLASH to disseminate indicators of compro
FBI_IC3-260423.pdf
Advisory Defending against China-nexus covert networks of compromised devices 23 April 2026  Crown Copyright 2026 National Cyber Security Centre Defending against China-nexus covert networks of compromised devices Explaining the widespread
FBI_IC3-260713.pdf
Joint Cybersecurity Advisory TLP:CLEAR Improve Router Hygiene to Protect Against Russian State-Sponsored Targeting Russian Government-Sponsored Activity Targets Poorly Configured and Vulnerable Devices Across Critical Sectors Executive summ
d620cb9876fb5bb5e7fbfb1d
Russian Government Cyber Actors Targeting Networking Devices, Critical Infrastructure — FBI An official website of the United States government. Here's how you know Official websites use .gov A .gov website belongs to an official government organization in the United States. Secure .gov websites use HTTPS A lock ( ) or https:// means you've safely connected to the .gov website. Share sensitive inf
d739e7f21758c959e3826e34
Mitigating Log4Shell and Other Log4j-Related Vulnerabilities
ea8bc5e2980b7954c0f0d1c0
APT28 exploits known vulnerability to carry out reconnaissance of routers and deploy malware
fa89754768997e9e243a4438
North Korea Cyber Group Conducts Global Espionage Campaign to Advance Regime's Military and Nuclear Programs
CERT-EU campaign / regional advisory intelligence — 20
00fcbc2726cc1783631565f5
2021-034: Vulnerabilities in Cisco Products Friday, July 09, 2021 07:29:00 AM CEST On July 7, Cisco released security updates to address several security vulnerabilities. This list includes vulnerabilities rated High affecting Cisco Business Process Automation (BPA) with a CVSS score of 8.8 out of 10 and a vulnerability rated Medium affecting Cisco Adaptive Security Device Manager (ASDM) with a CVSS score of 7.5 out of 10.Vulnerabilities in Cisco Business Process Automation (BPA) could allow an
03f275e81a7d188dbbd18cbc
2018-011: Cisco Products Multiple Vulnerabilities Thursday, April 19, 2018 04:36:00 PM CEST On the 17th and 18th of April 2018, Cisco has released several updates to address vulnerabilities affecting multiple products in which a remote attacker can exploit these vulnerabilities to trigger cross site scripting, denial of service, remote code execution, security restriction bypass and sensitive information disclosure on the targeted system.
0442e4958da9974386d3aed6
2013-0061: Authenticated Command Injection Vulnerability in Multiple Cisco Content Network and Video Delivery Products Friday, August 09, 2013 01:06:00 PM CEST Multiple Cisco content network and video delivery products contain a vulnerability when they are configured to run in central management mode.
0463bc1aca415ae34bacd02a
2021-009: Critical Vulnerabilities in Cisco Products Thursday, February 04, 2021 09:35:00 PM CET Cisco has published an advisory about several vulnerabilities affecting various Cisco Products. These vulnerabilities could lead to remote code execution, privilege escalation, directory traversal, file overwrite or denial of service. While Cisco is not aware of any malicious exploit in the wild, it is highly recommended to patch the affected products.
04fc97c8f2852a360cdf4afc
2023
054ae807cc981d37171a388a
2012-0078: Multiple Buffer Overflow Vulnerabilities in the Cisco WebEx Player Monday, July 02, 2012 10:32:00 AM CEST The Cisco WebEx Recording Format (WRF) player contains four buffer overflow vulnerabilities and the Cisco Advanced Recording Format (ARF) player contains one buffer overflow vulnerability. In some cases,exploitation of the vulnerabilities could allow a remote attacker to execute arbitrary code on the system with the privileges of a targeted user.
062b7209b6e24bd336bba3e4
2025-025: Critical Vulnerabilities in Cisco ISE Friday, July 18, 2025 02:57:21 PM CEST On June 25, Cisco released an advisory addressing 2 critical vulnerabilities affecting Cisco's Identity Services Engine (ISE) product that would allow an attacker to execute arbitrary code on vulnerable devices. On July 16, Cisco updated this advisory adding a third critical vulnerability affecting Cisco's Identity Services Engine (ISE) product. It is recommended updating affected product as soon as possible.
06398e085df7cb738a141f67
2025-035: High Vulnerability in Cisco IOS and IOS XE Software Friday, September 26, 2025 09:03:31 AM CEST On September 24, 2025, Cisco released a security advisory regarding a high severity vulnerability in the Simple Network Management Protocol (SNMP) subsystem of Cisco IOS Software and Cisco IOS XE Software. The vulnerability is being exploited in the wild. It is recommended updating as soon as possible and conduct a compromise assessment on devices that are exposing SNMP on the Internet. It i
079931b001ededf027d979ae
2013-0080: Several Vulnerabilities and Security Notices in multiple Cisco products Monday, October 21, 2013 04:04:00 PM CEST Cisco Adaptive Security Appliance (ASA) Software is affected by the following vulnerabilities
07f93ac177a174d99635789b
2020-036: Critical Cisco Vulnerabilities Thursday, July 16, 2020 12:06:00 PM CEST Cisco released 31 Security Advisories for vulnerabilities affecting its products. Five of them are rated critical with CVSS Score 9.8. In particular, critical vulnerabilities affect: telnet service of firewall routers (CVE-2020-3330), web-based management interface of routers (CVE-2020-3323, CVE-2020-3144, and CVE-2020-3331), and web management interface of Cisco Prime License Manager (PLM) software (CVE-2020-3140)
08af8e105c397ab708b7e1a4
Cyber Brief 24-11 - October 2024 Monday, November 04, 2024 05:00:00 PM CET Cyber Briefs are monthly executive reports that aim to present an overview of the most relevant developments in cyber security, based exclusively on open sources, with a view to inform political leadership and senior management in its constituency. Additional information on any item in this Brief can be provided upon request. Cyber Security Briefs are TLP:CLEAR.
0a56d52387d7c2a6a62c3e2a
2020-052: Critical Cisco IOS XR Software Vulnerability Under Attack Wednesday, October 21, 2020 02:46:00 PM CEST Cisco released a warning on the 20th of October regarding the attacks that are actively targeting the CVE-2020-3118 high severity vulnerability found to affect multiple carrier-grade routers that run the company's Cisco IOS XR Software. An advisory for this vulnerability was released by Cisco in the 5th of February. It is related to the Cisco Discovery Protocol implementation for Cisc
0d836fdbaa349cae4d922431
2016-122: Cisco - Denial of Service Vulnerabilities Wednesday, April 13, 2016 02:15:00 PM CEST The March 23, 2016, release of the Cisco IOS and IOS XE Software Security Advisory Bundled Publication includes six Cisco Security Advisories that describe vulnerabilities in Cisco IOS Software.
0ec0805d66352d38da4e246f
2013-0054: Cisco ASA Software Vulnerability Friday, June 21, 2013 03:01:00 PM CEST A vulnerability on Cisco ASA could cause a reload of the affected device.
0f4d9db7b1dbc7f09b7ff248
2014-017: Title: Cisco Firewall Services Module Cut-Through Proxy Denial of Service Vulnerability Friday, February 21, 2014 02:09:00 PM CET Cisco Firewall Services Module (FWSM) Software contains a vulnerability that could allow an unauthenticated, remote attacker to cause a reload of an affected system.
101e1f0f11d0be1353a3e8f6
Cyber Brief 25-12 - November 2025 Tuesday, December 02, 2025 04:00:00 PM CET Cyber Briefs are monthly executive reports that aim to present an overview of the most relevant developments in cyber security, based exclusively on open sources, with a view to inform political leadership and senior management in its constituency. Additional information on any item in this Brief can be provided upon request. Cyber Briefs are TLP:CLEAR.
10f3205f97e0128801acb4b1
2013-0100: Cisco ASA Denial of service Wednesday, December 11, 2013 04:22:00 PM CET A vulnerability in the Cisco Adaptive Security Appliance (ASA) Software could allow an unauthenticated, remote attacker to cause an affected system to become unresponsive to management session requests via SSH, Telnet, HTTP, and HTTPS.
11a0a27b0509990a33d24199
2013-0036: Cisco Network Admission Control Manager SQL Injection Vulnerability Wednesday, April 24, 2013 09:56:00 AM CEST Cisco Network Admission Control (NAC) Manager contains a vulnerability that could allow an unauthenticated remote attacker to execute arbitrary code and take full control of the vulnerable system.
11bd7cbb6e3b18cdc11ae175
Cyber Brief - September 2022 Monday, October 03, 2022 10:10:00 PM CEST Cyber Briefs are monthly executive reports that aim to present an overview of the most relevant developments in cyber security, based exclusively on open sources, with a view to inform political leadership and senior management in its constituency. Additional information on any item in this Brief can be provided upon request. Cyber Briefs are TLP:WHITE.
1223ca5566f4db106d0b5dac
2024-031: High Severity Vulnerabilities in Cisco Products Friday, March 29, 2024 11:49:02 AM CET On March 27, 2024, Cisco released security updates for fourteen (14) vulnerabilities affecting IOS, IOS XE and Cisco Access Point software. Six (6) high severity vulnerabilities with a CVSS score of 8.6, could allow an unauthenticated, remote attacker to cause denial of service on an affected device.
JVN / Japan campaign / regional advisory intelligence — 10
JVNDB-2005-000776
Java Cryptography Extension 1.2.1 (JCE 1.2.1) will no longer function properly after July 28, 2005 due to the expiration of its digital certificate
Published 2008-05-21T00:00:00+09:00
JVNDB-2009-000006
Cisco IOS cross-site scripting vulnerability
Published 2009-01-15T19:14:24+09:00
JVNDB-2009-000032
Directory traversal vulnerability in multiple Cisco Systems products
Published 2009-05-29T16:19:04+09:00
JVNDB-2010-000014
Cisco Router and Security Device Manager vulnerable to cross-site scripting
Published 2010-04-08T17:47:51+09:00
JVNDB-2011-000007
Cisco Linksys WRT54GC vulnerable to buffer overflow
Published 2011-01-21T18:22:22+09:00
JVNDB-2013-000017
Multiple Cisco products vulnerable to denial-of-service (DoS)
Published 2013-03-07T14:13:54+09:00
JVNDB-2022-000044
Cisco Catalyst 2940 Series Switches vulnerable to cross-site scripting
Published 2022-06-14T13:46:23+09:00
JVNDB-2023-000100
Scanning evasion issue in Cisco Secure Email Gateway
Published 2023-10-16T16:11:02+09:00
JVNDB-2023-000114
Multiple vulnerabilities in Cisco Firepower Management Center Software
Published 2023-11-13T14:01:47+09:00
JVNDB-2021-000038
Multiple vulnerabilities in Cisco Small Business Series Wireless Access Points
Published 2021-05-14T15:26:35+09:00
Upcoming ZDI vendor advisories — 24

Vendor-level advance notice: ZDI has not yet disclosed which product is affected. These entries are shown because this credential record matches the vendor; they are not findings against this product or model.

ZDI-CAN-28709 CVSS 7.2
Vendor contacted: 2025-12-18 Planned disclosure: 2026-04-17 Researcher: Jonathan Lein of Trend Research
Affected product: Not yet disclosed · Open ZDI Upcoming
ZDI-CAN-28708 CVSS 4.9
Vendor contacted: 2025-12-18 Planned disclosure: 2026-04-17 Researcher: Jonathan Lein of Trend Research
Affected product: Not yet disclosed · Open ZDI Upcoming
ZDI-CAN-29246 CVSS 7.5
Vendor contacted: 2026-02-12 Planned disclosure: 2026-06-12 Researcher: Bobby Gould (@bobbygould5) of TrendAI Zero Day Initiative
Affected product: Not yet disclosed · Open ZDI Upcoming
ZDI-CAN-29197 CVSS 7.2
Vendor contacted: 2026-02-12 Planned disclosure: 2026-06-12 Researcher: Jonathan Lein of TrendAI Research
Affected product: Not yet disclosed · Open ZDI Upcoming
ZDI-CAN-30390 CVSS 9.8
Vendor contacted: 2026-04-16 Planned disclosure: 2026-08-14 Researcher: Andy Niu of TrendAI Research
Affected product: Not yet disclosed · Open ZDI Upcoming
ZDI-CAN-30946 CVSS 8.1
Vendor contacted: 2026-05-20 Planned disclosure: 2026-09-17 Researcher: Andy Niu of TrendAI Research
Affected product: Not yet disclosed · Open ZDI Upcoming
ZDI-CAN-30945 CVSS 7.2
Vendor contacted: 2026-05-20 Planned disclosure: 2026-09-17 Researcher: Jonathan Lein of TrendAI Research
Affected product: Not yet disclosed · Open ZDI Upcoming
ZDI-CAN-31320 CVSS 7.2
Vendor contacted: 2026-05-28 Planned disclosure: 2026-09-25 Researcher: Jonathan Lein of TrendAI Research
Affected product: Not yet disclosed · Open ZDI Upcoming
ZDI-CAN-31322 CVSS 4.9
Vendor contacted: 2026-05-28 Planned disclosure: 2026-09-25 Researcher: Jonathan Lein of TrendAI Research
Affected product: Not yet disclosed · Open ZDI Upcoming
ZDI-CAN-31647 CVSS 7.2
Vendor contacted: 2026-06-04 Planned disclosure: 2026-10-02 Researcher: Andy Niu of TrendAI Research
Affected product: Not yet disclosed · Open ZDI Upcoming
Upcoming ZDI CVSS 9.8
Researcher: Alex Williams from Pellera Technologies
Affected product: Not yet disclosed · Open ZDI Upcoming
Upcoming ZDI CVSS 8.1
Researcher: @TristanInSec
Affected product: Not yet disclosed · Open ZDI Upcoming
Upcoming ZDI CVSS 8.1
Researcher: Alex Williams from Pellera Technologies
Affected product: Not yet disclosed · Open ZDI Upcoming
Upcoming ZDI CVSS 8.1
Researcher: Connor Kastner (ret2c)
Affected product: Not yet disclosed · Open ZDI Upcoming
Upcoming ZDI CVSS 7.8
Researcher: Bobby Gould (@bobbygould5) of TrendAI Zero Day Initiative
Affected product: Not yet disclosed · Open ZDI Upcoming
Upcoming ZDI CVSS 7.8
Researcher: Bobby Gould (@bobbygould5) of TrendAI Zero Day Initiative
Affected product: Not yet disclosed · Open ZDI Upcoming
Upcoming ZDI CVSS 7.8
Researcher: Bobby Gould (@bobbygould5) of TrendAI Zero Day Initiative
Affected product: Not yet disclosed · Open ZDI Upcoming
Upcoming ZDI CVSS 7.8
Researcher: Bobby Gould (@bobbygould5) of TrendAI Zero Day Initiative
Affected product: Not yet disclosed · Open ZDI Upcoming
Upcoming ZDI CVSS 7.8
Researcher: Bobby Gould (@bobbygould5) of TrendAI Zero Day Initiative
Affected product: Not yet disclosed · Open ZDI Upcoming
Upcoming ZDI CVSS 7.8
Researcher: Bobby Gould (@bobbygould5) of TrendAI Zero Day Initiative
Affected product: Not yet disclosed · Open ZDI Upcoming
Upcoming ZDI CVSS 7.8
Researcher: Bobby Gould (@bobbygould5) of TrendAI Zero Day Initiative
Affected product: Not yet disclosed · Open ZDI Upcoming
Upcoming ZDI CVSS 7.8
Researcher: Bobby Gould (@bobbygould5) of TrendAI Zero Day Initiative
Affected product: Not yet disclosed · Open ZDI Upcoming
Upcoming ZDI CVSS 7.8
Researcher: Bobby Gould (@bobbygould5) of TrendAI Zero Day Initiative
Affected product: Not yet disclosed · Open ZDI Upcoming
Upcoming ZDI CVSS 3.7
Researcher: Mat Powell of TrendAI Zero Day Initiative
Affected product: Not yet disclosed · Open ZDI Upcoming
[no username] : [blank]

Public sources document default credentials associated with this vendor or product. No login attempt was performed.

Source: scantide_default_credentials

Generic

Vendor:
· Model: Generic
multi
40 campaign/advisory records
FBI / IC3 campaign / regional advisory intelligence — 20
02c564e5d11e235eccef00f3
New Sandworm malware Cyclops Blink replaces VPNFilter
468ca719334549d0f6bad717
#StopRansomware: Akira Ransomware
796ede2f89ea176be6f19e84
Threat Actors Exploit Progress Telerik Vulnerability in U.S. Government IIS Server
FBI_IC3-261008.pdf
TLP:CLEAR Co-Authored by: Product ID: AA26-281A Chinese Government-linked Cyber Threat Actors Combine Automated and Hands- on Hacking Tools to Steal Sensitive Data Publication: October 8, 2026 US Federal Bureau of Investigation Canadian Cen
FBI_IC3-AA26-281A-stix.json
{ "type": "bundle", "id": "bundle--0ee90381-d136-48b1-a049-879b3427545e", "objects": [ { "spec_version": "2.1", "type": "attack-pattern", "id": "attack-pattern--015a4f9c-e145-47b4-8998-0bf633be13e2", "created": "2019-05-16T18:29:50.516Z", "
FBI_IC3-AA26-281A-stix.xml
AA26-281A Chinese Government-linked Cyber Threat Actors Combine Automated and Hands-on Hacking Tools to Steal Sensitive Data Indicators This STIX file provides indicators of compromise (IOCs) associated with malicious activity reported in C
a1ec2d34be04b293b9297f23
#StopRansomware: LockBit 3.0 Ransomware Affiliates Exploit CVE 2023-4966 Citrix Bleed Vulnerability
abc1437a18ff56db906f4764
Joint Guidance: Identifying and Mitigating Living Off the Land Techniques
cf6253d777ef9c82747f7cd4
Advanced Persistent Threat Actors Targeting U.S. Think Tanks
1cb4e557a572e298427e7857
Safety Concerns Related to Fraudulent Compounding Practices Associated with Weight Loss Drugs — FBI An official website of the United States government. Here's how you know Official websites use .gov A .gov website belongs to an official government organization in the United States. Secure .gov websites use HTTPS A lock ( ) or https:// means you've safely connected to the .gov website. Share sensi
2c6ddd043dc18c620cdd4a40
Home Internet Connected Devices Facilitate Criminal Activity — FBI An official website of the United States government. Here's how you know Official websites use .gov A .gov website belongs to an official government organization in the United States. Secure .gov websites use HTTPS A lock ( ) or https:// means you've safely connected to the .gov website. Share sensitive information only on official
3c8fc2080b77827513541387
#StopRansomware: BianLian Data Extortion Group
4e9a3f6a5ef5e5c66481c7c3
Home Internet Connected Devices Facilitate Criminal Activity
7552923fc476335081e148e7
Enhanced Visibility and Hardening Guidance for Communications Infrastructure
77e0e2f12ea72aebfc7e9969
#StopRansomware: BianLian Ransomware Group
9c0a06e855a703aeeea0275e
High-Impact Ransomware Attacks Threaten U.S. Businesses And Organizations
FBI_IC3-IOC_List_Jackpotting_FLASH.csv
Newage.exe Color.exe Levantaito.exe NCRApp.exe sdelete.exe Promo.exe WinMonitor.exe WinMonitorCheck.exe Anydesk1.exe Identified MD5s: 2C2D16658D8DA6B389934273EF8F8E22 5F177B84F3D92AB5711BE446125FDBE3 61EECEB5F9186A0BC01DC82798CD6C5F FDA8203
FLASH-20260219-01
TLP:CLEAR 19 FEBRUARY 2026 FLASH Number FLASH-20260219-001 D Increase in Malware Enabled ATM Jackpotting Incidents Across United States Summary The Federal Bureau of Investigation (FBI) is releasing this FLASH to disseminate indicators of c
c9aefe705e132a178e25d878
Known Indicators of Compromise Associated with Androxgh0st Malware
facda2fc9a72e8a6e8783924
Cyber Criminals Targeting Victims through Mobile Beta-Testing Applications
CERT-EU campaign / regional advisory intelligence — 12
47b2303bdb1b3959febeff13
2018-025: Cisco Webex Player Remote Code Execution Vulnerabilities Friday, September 21, 2018 10:46:00 AM CEST On 19th of September 2018, Cisco published a security advisory concerning Remote Code Execution Vulnerabilities. These vulnerabilities allow an unauthenticated remote attacker to execute arbitrary code on an affected device. The vulnerabilities are due to improper validation of Webex recording files. An attacker could exploit these vulnerabilities by sending a user an e-mail with a link
4d991b0325eb37eb82ddf86d
2017
5c1bea886d0b2438ba2899a5
2022-058: Critical Shell Command Injection Vulnerability in Apache Spark Wednesday, August 03, 2022 09:15:00 AM CEST On July 18, Apache Spark released a security bulletin regarding a newly found critical vulnerability within Apache Spark's ACL implementation, tracked as CVE-2022-33891 and with a CVSS score of 8.8 out of 10. The flaw was discovered by a security researcher, with the proof of concept (PoC) exploit already available on GitHub and exploitation attempts in the wild being detected sin
65c0f9d2753fd4f42c81979a
2022
7297a6ba82c93ee4f2d5cc75
2018-013: Cisco WebEx ARF Remote Code Execution Vulnerabilities Thursday, May 03, 2018 12:58:00 PM CEST On May 2nd, 2018, Cisco published two advisories for remote code execution vulnerabilities, CVE-2018-0287 (medium) and CVE-2018-0264 (critical) in the various Cisco WebEx Players. The players are used to play back WebEx meeting recordings that have been recorded by an online meeting attendee. The records are using the Advanced Recording Format (ARF). An attacker could exploit these vulnerabili
7cdcbda8e1048b210cd58067
2022-063: Path Traversal Vulnerability in Unrar affects Zimbra software Wednesday, August 31, 2022 02:55:00 PM CEST In May 2022, security research team from SonarSource discovered a 0-day vulnerability in the "unrar" utility for Linux and Unix systems. This utility is a third party tool used in Zimbra. The exploitation of this vulnerability allows a remote attacker to execute arbitrary code on a vulnerable Zimbra instance without requiring any prior authentication or knowledge about it.Proof of
821a6ddd051d81cc27393341
2013-0006: Multiple Vulnerabilities in Adobe ColdFusion Thursday, January 10, 2013 11:09:00 AM CET Adobe has identified three vulnerabilities affecting ColdFusion for Windows, Macintosh and UNIX: CVE-2013-0625 affects ColdFusion 10, 9.0.2, 9.0.1 and 9.0, and could permit an unauthorized user to remotely circumvent authentication controls, potentially allowing the attacker to take control of the affected server. CVE-2013-0629 affects ColdFusion 10, 9.0.2, 9.0.1 and 9.0, and could permit an unauth
8b054de7e010b2082b663600
2017-013: Privileges Escalation Vulnerabilities in Unix Operating Systems Tuesday, June 20, 2017 03:40:00 PM CEST On 19th of June 2017, Qualys Research Team published a blog post and a security advisory about vulnerabilities in the memory management of several UNIX operating systems. These vulnerabilities can lead to privilege escalation on these systems, by corrupting memory and executing arbitrary code. They named the bug Stack Clash as it exploits flaws in the way these operating system are h
d2e235632010e5fce3dd7412
2021-007: UPDATE: Sudo Heap-based Buffer Overflow Tuesday, February 02, 2021 11:46:00 AM CET On the 26th of January 2021, Sudo in coordination with Qualys released a security advisory regarding a vulnerability in Sudo allowing any local user on Unix-based system to execute code as root without authentication (privilege escalation).The vulnerability is exploitable via "sudoedit -s" commands on most systems and several proof-of-concepts were published by security researchers.The potential impact o
defa53cd3b5b1849c6ff8f6f
2021-078: Apache HTTP Server Critical Vulnerability Thursday, December 23, 2021 02:15:00 PM CET On Monday 20 December 2021, The Apache Software Foundation has released Apache HTTP Server 2.4.52. This version fixes two vulnerabilities:- CVE-2021-44790: critical severity, CVSS base score of 9.8.- CVE-2021-44224: high severity, CVSS base score of 8.2.While the vulnerabilities affect optional modules, the risk is substantial if these modules are used in specific configurations, as the attack does no
39779f9590d9c96f1b1ed883
2024-113: Critical 0-day Vulnerability in Fortinet FortiManager Thursday, October 24, 2024 10:56:10 AM CEST On October 23, 2024, Fortinet released a security advisory addressing a critical 0-day vulnerability in its FortiManager product. If exploited, a remote unauthenticated attacker could execute arbitrary code or commands on the affected device. It is strongly recommended applying the update. When not possible, it is recommended applying the workaround. In all cases, it is recommended searchi
cbc3026d855dabca07828e3f
2019-001: Web Cache Poisoning Vulnerabilities - Thursday, January 24, 2019 09:15:00 AM CET Web cache poisoning has long been considered a _theoretical_ threat. However, already published research describes practical examples of this type of attack. Also, recently there have been documented cases of observing exploitation of these types of vulnerabilities on production systems.
JVN / Japan campaign / regional advisory intelligence — 8
JVNDB-2004-000169
LHa Vuffer Overflow Vulnerability in Testing and Extracting Process
Published 2008-05-21T00:00:00+09:00
JVNDB-2004-000170
Lha Directory Traversal Vulnerability in Testing and Extracting Process
Published 2008-05-21T00:00:00+09:00
JVNDB-2004-000195
LHA Arbitrary Command Execution Vulnerability with Shell Metacharacter in Directory Name
Published 2008-05-21T00:00:00+09:00
JVNDB-2004-000196
LHA Buffer Overflow Vulnerability with lack of Path Length Validation
Published 2008-05-21T00:00:00+09:00
JVNDB-2004-000197
LHA extrace_one Vuffer Overflow Vulnerability
Published 2008-05-21T00:00:00+09:00
JVNDB-2023-000073
GBrowse vulnerable to unrestricted upload of files with dangerous types
Published 2023-07-21T15:02:30+09:00
JVNDB-2019-014437
Privilege escalation vulnerability in multiple RICOH printer drivers
Published 2020-02-25T15:29:12+09:00
JVNDB-2026-020742
Generic IO & Memory Access driver for TOSHIBA and Dynabook PCs exposes its IOCTL with insufficient access control
Published 2026-06-26T09:52:37+09:00
checkfs : checkfs

Public sources document default credentials associated with this vendor or product. No login attempt was performed.

Source: scantide_default_credentials

telnet (telnet)

Vendor:
unknown
22 campaign/advisory records
FBI / IC3 campaign / regional advisory intelligence — 13
590b43d2bf56104d53f7eb63
#StopRansomware: Ransomware Attacks on Critical Infrastructure Fund DPRK Malicious Cyber Activities
7552923fc476335081e148e7
Enhanced Visibility and Hardening Guidance for Communications Infrastructure
7b829d8a8489b953221ba12a
North Korean State-Sponsored Cyber Actors Use Maui Ransomware to Target the Healthcare and Public Health Sector
8be0e6ad8aaa95329853ed47
Chinese Government-Mandated Tax Software Contains Malware, Enabling Backdoor Access
FBI_IC3-260407.pdf
TLP:CLEAR Co-Authored by: Product ID: AA26-097A Iranian-Affiliated Cyber Actors Exploit Programmable Logic Controllers Across US Critical Infrastructure Publication: April 7, 2026 Federal Bureau of Investigation Cybersecurity and Infrastruc
FBI_IC3-260818.pdf
TLP:CLEAR Co-Authored by: Product ID: AA25-071A #StopRansomware: Medusa Ransomware Publication: March 12, 2025 Last Updated: August 18, 2026 Cybersecurity and Infrastructure Security Agency Federal Bureau of Investigation Department of Heal
a3029583db8893671055550b
HiatusRAT Actors Targeting Web Cameras and DVRs
a5c1a0b0774239b41c154d04
Threat Actors Exploit Multiple Vulnerabilities in Ivanti Connect Secure and Policy Secure Gateways
b231bb0588fb58ea25e903a9
Indictment of China-Based Cyber Actors Associated with APT 41 for Intrusion Activities
d5a9855d1d7790d4f365af8d
#StopRansomware: Daixin Team
dcc3eb16963e92b8e0c4641b
Tactics, Techniques, and Procedures Associated with Malware within Chinese Government-Mandated Tax Software
ea8bc5e2980b7954c0f0d1c0
APT28 exploits known vulnerability to carry out reconnaissance of routers and deploy malware
f5d451173ad0fcfd92324078
COVID-19 Phishing Email Indicators
CERT-EU campaign / regional advisory intelligence — 9
0463bc1aca415ae34bacd02a
2021-009: Critical Vulnerabilities in Cisco Products Thursday, February 04, 2021 09:35:00 PM CET Cisco has published an advisory about several vulnerabilities affecting various Cisco Products. These vulnerabilities could lead to remote code execution, privilege escalation, directory traversal, file overwrite or denial of service. While Cisco is not aware of any malicious exploit in the wild, it is highly recommended to patch the affected products.
07f93ac177a174d99635789b
2020-036: Critical Cisco Vulnerabilities Thursday, July 16, 2020 12:06:00 PM CEST Cisco released 31 Security Advisories for vulnerabilities affecting its products. Five of them are rated critical with CVSS Score 9.8. In particular, critical vulnerabilities affect: telnet service of firewall routers (CVE-2020-3330), web-based management interface of routers (CVE-2020-3323, CVE-2020-3144, and CVE-2020-3331), and web management interface of Cisco Prime License Manager (PLM) software (CVE-2020-3140)
10f3205f97e0128801acb4b1
2013-0100: Cisco ASA Denial of service Wednesday, December 11, 2013 04:22:00 PM CET A vulnerability in the Cisco Adaptive Security Appliance (ASA) Software could allow an unauthenticated, remote attacker to cause an affected system to become unresponsive to management session requests via SSH, Telnet, HTTP, and HTTPS.
1fcf21fda66910438380068c
2013
579a8b2540f682b380dc70a2
Cyber Brief 25-10 - September 2025 Wednesday, October 01, 2025 05:00:00 PM CEST Cyber Briefs are monthly executive reports that aim to present an overview of the most relevant developments in cyber security, based exclusively on open sources, with a view to inform political leadership and senior management in its constituency. Additional information on any item in this Brief can be provided upon request. Cyber Briefs are TLP:CLEAR.
a0018c749f30221cebfa3a3c
2020
a665dbcf3d8c512500c7c170
2021-048: Vulnerabilities in PaloAlto Software Saturday, September 11, 2021 10:21:00 AM CEST On September 8, Palo Alto published security advisories about three vulnerabilities rated as high, CVE-2020-10188, CVE-2021-3051 and CVE-2021-3052 affecting respectively PanOS telnet-based administrative management service, Cortex XSOAR and PAN-OS web interface.
b38ac92e454aed6f052a132a
2012-0008: Cisco IronPort Appliances Telnet Remote Code Execution Vulnerability Monday, January 30, 2012 08:39:00 AM CET Cisco IronPort Email Security Appliances (ESA) and Cisco IronPort Security Management Appliances (SMA) contain a vulnerability that may allow a remote, unauthenticated attacker to execute arbitrary code with elevated privileges
ed61e81dd2353009f908399f
2017-006: UPDATE Critical Cisco CMP Remote Code Execution Vulnerability Tuesday, March 21, 2017 11:44:00 AM CET Cisco security researchers found a vulnerability in the Cluster Management Protocol (CMP) code in Cisco IOS and Cisco IOS XE software that could allow an unauthenticated, remote attacker to cause a reload of an affected device or remotely execute code with elevated privileges. Cisco has now released a software fix for this vulnerability.
administrator : [blank]

Public sources document default credentials associated with this vendor or product. No login attempt was performed.

Source: scantide_default_credentials

Digital Equipment

Vendor:
unknown
45 campaign/advisory records
FBI / IC3 campaign / regional advisory intelligence — 20
0bffb47abc37b910c5409e2d
Malicious Actors Almost Certainly Will Leverage Synthetic Content for Cyber and Foreign Influence Operations
18ea7a6458253a663ccafb8d
Office of Public Affairs | Justice Department Announces Coordinated, Nationwide Actions to Combat North Korean Remote Information Technology Workers’ Illicit Revenue Generation Schemes | United States Department of Justice Skip to main content An official website of the United States government Here's how you know Here's how you know Official websites use .gov A .gov website belongs to an official
22d54aba1c3e6e05a9d1d8d1
Common Internet of Things Devices May Expose Consumers to Cyber Exploitation
2f77c75345a43a8958c70b0a
ESXiArgs Ransomware Virtual Machine Recovery Guidance
3ef0e143169ef8b9b75a55ea
2024 U.S. Federal Elections: The Insider Threat
4780ab778103ec39f0d8c2bb
Identification and Disruption of QakBot Infrastructure
4d24213bd1443ba660e0f939
Iranian Islamic Revolutionary Guard Corps-Affiliated Cyber Actors Exploiting Vulnerabilities for Data Extortion and Disk Encryption for Ransom Operations
57ff43de10c50b891ba950cf
Top CVEs Actively Exploited By People's Republic of China State-Sponsored Cyber Actors
79fc6189212549303d80c9c5
DoppelPaymer Ransomware Attacks on Critical Infrastructure Impact Critical Services
7b829d8a8489b953221ba12a
North Korean State-Sponsored Cyber Actors Use Maui Ransomware to Target the Healthcare and Public Health Sector
7db4f2bef4d168d1c184f709
#StopRansomware: AvosLocker Ransomware (Update)
8f561d81060dba1c0feb8c4d
Potential for Malicious Cyber Activities to Disrupt the 2020 Tokyo Summer Olympics
FBI_IC3-260312.pdf
TLP:CLEAR 12 March 2026 FLASH Number 20260312-001 AVrecon Malware-Infected Routers Exploited as Residential Proxies by SocksEscort Summary The Federal Bureau of Investigation (FBI) is releasing this FLASH to disseminate indicators of compro
FBI_IC3-260429.pdf
TLP:CLEAR Adapting Zero Trust Principles to Operational Technology Publication: April 29, 2026 Cybersecurity and Infrastructure Security Agency Department of War Department of Energy Federal Bureau of Investigation Department of State This
FBI_IC3-260818.pdf
TLP:CLEAR Co-Authored by: Product ID: AA25-071A #StopRansomware: Medusa Ransomware Publication: March 12, 2025 Last Updated: August 18, 2026 Cybersecurity and Infrastructure Security Agency Federal Bureau of Investigation Department of Heal
FBI_IC3-261008-2.pdf
MITIGATING INSIDER THREATS TO U.S. ELECTION SYSTEMS OVERVIEW Elections in the United States are administered at the state and local levels of government, creating a diverse landscape of election systems and technologies across the country.
FBI_IC3-PSA260312
Internet Crime Complaint Center (IC3) | Evading Residential Proxy Networks: Protecting Your Devices from Becoming a Tool for Criminals Skip to main Alert Number: I-031226-PSA | 12 March 2026 Evading Residential Proxy Networks: Protecting Yo
FLASH-20260219-01
TLP:CLEAR 19 FEBRUARY 2026 FLASH Number FLASH-20260219-001 D Increase in Malware Enabled ATM Jackpotting Incidents Across United States Summary The Federal Bureau of Investigation (FBI) is releasing this FLASH to disseminate indicators of c
a1ec2d34be04b293b9297f23
#StopRansomware: LockBit 3.0 Ransomware Affiliates Exploit CVE 2023-4966 Citrix Bleed Vulnerability
abeffa5c0d7adaf9b765ca12
Iranian Cyber Actors' Brute Force and Credential Access Activity Compromises Critical Infrastructure Organizations
CERT-EU campaign / regional advisory intelligence — 20
03b7a54ee5ce9e82f09fe828
Cyber Security Brief 23-09 - August 2023 Monday, September 04, 2023 12:20:00 PM CEST Cyber Security Briefs are monthly executive reports that aim to present an overview of the most relevant developments in cyber security, based exclusively on open sources, with a view to inform political leadership and senior management in its constituency. Additional information on any item in this Brief can be provided upon request. Cyber Security Briefs are TLP:CLEAR.
2478e8aca48921497bf1e2c7
Cyber Security Brief 23-10 - September 2023 Wednesday, October 04, 2023 10:50:00 AM CEST Cyber Security Briefs are monthly executive reports that aim to present an overview of the most relevant developments in cyber security, based exclusively on open sources, with a view to inform political leadership and senior management in its constituency. Additional information on any item in this Brief can be provided upon request. Cyber Security Briefs are TLP:CLEAR.
5a84a2d6ff686f88874206e7
Cyber Brief 24-06 - May 2024 Monday, June 03, 2024 06:00:00 PM CEST Cyber Briefs are monthly executive reports that aim to present an overview of the most relevant developments in cyber security, based exclusively on open sources, with a view to inform political leadership and senior management in its constituency. Additional information on any item in this Brief can be provided upon request. Cyber Security Briefs are TLP:CLEAR.
752eab72a4e9a2505b11e760
Cyber Brief 24-09 - August 2024 Wednesday, September 04, 2024 06:00:00 PM CEST Cyber Briefs are monthly executive reports that aim to present an overview of the most relevant developments in cyber security, based exclusively on open sources, with a view to inform political leadership and senior management in its constituency. Additional information on any item in this Brief can be provided upon request. Cyber Security Briefs are TLP:CLEAR.
7a8af3c6f57edf032a0f70fa
Cyber Security Brief - November 2022 Thursday, December 01, 2022 11:20:00 AM CET Cyber Security Briefs are monthly executive reports that aim to present an overview of the most relevant developments in cyber security, based exclusively on open sources, with a view to inform political leadership and senior management in its constituency. Additional information on any item in this Brief can be provided upon request. Cyber Security Briefs are TLP:WHITE.
952bde419462d5f35b2804d1
Cyber Brief 25-02 - January 2025 Monday, February 03, 2025 02:00:00 PM CET Cyber Briefs are monthly executive reports that aim to present an overview of the most relevant developments in cyber security, based exclusively on open sources, with a view to inform political leadership and senior management in its constituency. Additional information on any item in this Brief can be provided upon request. Cyber Briefs are TLP:CLEAR.
9c97832c4deff24c44466de4
Cyber Security Brief 23-08 - July 2023 Tuesday, August 01, 2023 08:30:00 PM CEST Cyber Security Briefs are monthly executive reports that aim to present an overview of the most relevant developments in cyber security, based exclusively on open sources, with a view to inform political leadership and senior management in its constituency. Additional information on any item in this Brief can be provided upon request. Cyber Security Briefs are TLP:CLEAR.
b3384778dc49dc28ed930803
Cyber Security Brief - October 2022 Thursday, November 03, 2022 10:50:00 AM CET Cyber Security Briefs are monthly executive reports that aim to present an overview of the most relevant developments in cyber security, based exclusively on open sources, with a view to inform political leadership and senior management in its constituency. Additional information on any item in this Brief can be provided upon request. Cyber Security Briefs are TLP:WHITE.
060783a8f0553c4295139910
Cyber Brief 25-04 - March 2025 Wednesday, April 02, 2025 04:00:00 PM CEST Cyber Briefs are monthly executive reports that aim to present an overview of the most relevant developments in cyber security, based exclusively on open sources, with a view to inform political leadership and senior management in its constituency. Additional information on any item in this Brief can be provided upon request. Cyber Briefs are TLP:CLEAR.
08af8e105c397ab708b7e1a4
Cyber Brief 24-11 - October 2024 Monday, November 04, 2024 05:00:00 PM CET Cyber Briefs are monthly executive reports that aim to present an overview of the most relevant developments in cyber security, based exclusively on open sources, with a view to inform political leadership and senior management in its constituency. Additional information on any item in this Brief can be provided upon request. Cyber Security Briefs are TLP:CLEAR.
11bd7cbb6e3b18cdc11ae175
Cyber Brief - September 2022 Monday, October 03, 2022 10:10:00 PM CEST Cyber Briefs are monthly executive reports that aim to present an overview of the most relevant developments in cyber security, based exclusively on open sources, with a view to inform political leadership and senior management in its constituency. Additional information on any item in this Brief can be provided upon request. Cyber Briefs are TLP:WHITE.
164e9b5c225d1223c305e30c
Cyber Brief 25-11 - October 2025 Saturday, November 01, 2025 04:00:00 PM CET Cyber Briefs are monthly executive reports that aim to present an overview of the most relevant developments in cyber security, based exclusively on open sources, with a view to inform political leadership and senior management in its constituency. Additional information on any item in this Brief can be provided upon request. Cyber Briefs are TLP:CLEAR.
2680cc37ee8f65e8e40e6ae1
Cyber Brief 24-05 - April 2024 Thursday, May 02, 2024 06:00:00 PM CEST Cyber Briefs are monthly executive reports that aim to present an overview of the most relevant developments in cyber security, based exclusively on open sources, with a view to inform political leadership and senior management in its constituency. Additional information on any item in this Brief can be provided upon request. Cyber Security Briefs are TLP:CLEAR.
3149ef4d675627192800b4d0
Cyber Brief 26-04 - March 2026 Wednesday, April 01, 2026 05:00:00 PM CEST Cyber Briefs are monthly executive reports that aim to present an overview of the most relevant developments in cyber security, based exclusively on open sources, with a view to inform political leadership and senior management in its constituency. Additional information on any item in this Brief can be provided upon request. Cyber Briefs are TLP:CLEAR.
3b7a915615df3ee8c305af0f
2012-0005: Vulnerabilities in Cisco IP Video Phone E20 and Digital Media Manager Friday, January 20, 2012 02:39:00 PM CET Cisco IP Video Phone E20 Default Root Account Cisco TelePresence Software version TE 4.1.0 contains a default account vulnerability that could allow an unauthenticated, remote attacker to take complete control of the affected device.
40bd775e38586aabc60b91ae
Cyber Security Brief 24-01 - December 2023 Friday, January 05, 2024 04:00:00 PM CET Cyber Security Briefs are monthly executive reports that aim to present an overview of the most relevant developments in cyber security, based exclusively on open sources, with a view to inform political leadership and senior management in its constituency. Additional information on any item in this Brief can be provided upon request. Cyber Security Briefs are TLP:WHITE.
522a288ee1b7b3f828225d33
About us
5ae0dac2996931f7562a35de
Cyber Security Brief 24-03 - February 2024 Friday, March 01, 2024 04:00:00 PM CET Cyber Security Briefs are monthly executive reports that aim to present an overview of the most relevant developments in cyber security, based exclusively on open sources, with a view to inform political leadership and senior management in its constituency. Additional information on any item in this Brief can be provided upon request. Cyber Security Briefs are TLP:WHITE.
5cc2ed95629003380b8e47d0
2011
6350fe51a8e40e4f490446ae
Cyber Brief 25-08 - July 2025 Monday, August 04, 2025 11:00:00 AM CEST Cyber Briefs are monthly executive reports that aim to present an overview of the most relevant developments in cyber security, based exclusively on open sources, with a view to inform political leadership and senior management in its constituency. Additional information on any item in this Brief can be provided upon request. Cyber Briefs are TLP:CLEAR.
Europol / EC3 campaign / regional advisory intelligence — 5
06f6f38fe5be5c14cb128258
Fraudulent shopping sites tied to cybercrime marketplace taken offline – Over 200 terabytes of digital evidence secured during investigation | Europol You need to enable JavaScript to run this app. Loading application. Please wait.
439cdd4aa49d1261c2471d81
Europol and Capgemini Netherlands seek pioneering solutions to tackle cyber threats – Europol’s European Cybercrime Centre (EC3) signs a Memorandum of Understanding (MoU) with Capgemini, a global leader in consulting, technology services and digital transformation. Joint exercises, capacity building and prevention campaigns will be at the heart of this collaboration. | Europol You need to enable J
d2e3e0e6b45288d01ce5a144
Europol Cybercrime Conference: Future-proofing policing in the digital age | Europol You need to enable JavaScript to run this app. Loading application. Please wait.
f6128711b1e826962eec9db0
Cybercrime as a business: The digital underground economy – The Hague, the Netherlands | Europol You need to enable JavaScript to run this app. Loading application. Please wait.
de68910fd2aeace6de9d6f5f
Germany and Ukraine hit two high-value ransomware targets – Forensic analysis of the seized equipment is still ongoing to determine the exact role of the suspects and their links to other accomplices | Europol You need to enable JavaScript to run this app. Loading application. Please wait.
USER : USER

Public sources document default credentials associated with this vendor or product. No login attempt was performed.

Source: scantide_default_credentials
References

Mandarin M3

Vendor:
· Model: Mandarin M3
unknown
40 campaign/advisory records
FBI / IC3 campaign / regional advisory intelligence — 20
FBI_IC3-260819.pdf
Joint Cybersecurity Advisory TLP:CLEAR Defending Against an Active Threat to Siemens S7 Series PLCs Executive summary Note: This advisory relates to an active threat to Siemens S7 Series programmable logic controllers (PLCs). However, ongoi
c1e6dfe7f5ede874b7f6049b
2022 Top Routinely Exploited Vulnerabilities
ded44e7e83bf8db847d7eafa
Improving Security of Open Source Software in Operational Technology and Industrial Control Systems
01e9abcc28c68df5c0b4e43e
Update on SVR Cyber Operations and Vulnerability Exploitation
20bee27eb52601ef0c0024e1
versión en español
26ae0114f59b79e474d49793
versión en español
36b4ec7d77002ad7f7aa6d7e
Guidelines for secure AI system development
427b50ed882d3c9a0378d316
2023 Top Routinely Exploited Vulnerabilities
4626b1e7ed1591635c5f6004
Iranian Government-Sponsored Actors Conduct Cyber Operations Against Global Government and Commercial Networks
590b43d2bf56104d53f7eb63
#StopRansomware: Ransomware Attacks on Critical Infrastructure Fund DPRK Malicious Cyber Activities
77e0e2f12ea72aebfc7e9969
#StopRansomware: BianLian Ransomware Group
796ede2f89ea176be6f19e84
Threat Actors Exploit Progress Telerik Vulnerability in U.S. Government IIS Server
7af9cda0c10273509413ad9a
State-Sponsored Actors Compromise and Maintain Persistent Access to U.S. Critical Infrastructure
7d6efaac6ca8ebeffb544914
Hunting Russian Intelligence "Snake" Malware
FBI_IC3-260810.pdf
TLP:CLEAR Co-Authored by: Product ID: AA26-222A #StopRansomware: Gunra Ransomware Publication: August 10, 2026 U.S. Federal Bureau of Investigation U.S. National Security Agency U.S. Cybersecurity and Infrastructure Security Agency U.S. Sec
a1ec2d34be04b293b9297f23
#StopRansomware: LockBit 3.0 Ransomware Affiliates Exploit CVE 2023-4966 Citrix Bleed Vulnerability
ae8290dc74ede2ee7303c1ca
Ransomware Activity Targeting the Healthcare and Public Health Sector
d739e7f21758c959e3826e34
Mitigating Log4Shell and Other Log4j-Related Vulnerabilities
e6bd83e372e2d6560e45aa77
Secure by Design Alert: Eliminating OS Command Injection Vulnerabilities
f6a4823d9021b727651efd8e
Iranian State-Sponsored Advanced Persistent Threat Actors Threaten Election-Related Systems
CERT-EU campaign / regional advisory intelligence — 20
306b20e791e762e784f9a514
2021-074: CISCO Critical Vulnerability Saturday, December 18, 2021 04:05:00 PM CET On December 16th, CISCO updated its security advisory related to CVE-2021-44228 affecting many of its products. While this CVE affects the Java logging library log4j, all products using this library are vulnerable to at least Unauthenticated Remote Code Execution.
7427d4b2830aae7f80fa6aa6
2023-094: Multiple Critical Vulnerabilities in Atlassian Products Wednesday, December 06, 2023 12:11:25 PM CET On December 5, 2023, Atlassian released several security advisories regarding critical vulnerabilities affecting multiple Atlassian products. The exploitation of these vulnerabilities could lead to Remote Code Execution. It is recommended to upgrade to a fixed version as soon as possible.
c13f0f778db9976337297377
2020-060: UPDATE: Multiple Vulnerabilities in SolarWinds Orion Wednesday, December 16, 2020 12:37:00 PM CET Multiple vulnerabilities have been discovered in SolarWinds Orion, a popular Network Management System software, the most severe of which could allow for arbitrary code execution. Numerous public and private organisations around the world are affected. Additionally, the attackers gained access to victims via trojanised SolarWinds Orion updates. The attack was a very sophisticated supply ch
d9246c5ab21dcbbc5e180cef
2021-075: VMWare Critical Vulnerability Saturday, December 18, 2021 04:20:00 PM CET On December 17th, VMWare updated its security advisory related to CVE-2021-44228, and CVE-2021-45046 affecting many of its products. While these CVE affect the Java logging library log4j, all products using this library are vulnerable at least to Unauthenticated Remote Code Execution.
021dad8bb0c4c9076a95ac7d
2017-012: UPDATE! WannaCry Ransomware Campaign Exploiting SMB Vulnerability Monday, May 22, 2017 03:46:00 PM CEST A large ransomware campaign has been observed since Friday, May 12th, 2017. The payload delivered is a variant of ransomware malware called WannaCry. It appears to infect computers through a recent SMB vulnerability in Microsoft Windows operating system (CVE-2017-0145).
02b23e9258cdd1ad17334e61
2023-093: High Vulnerabilities in Google Chrome Wednesday, November 29, 2023 06:08:09 PM CET On November 28, Google has released an emergency security update to address six high vulnerabilities found in Chrome. Google is aware that an exploit exists for one of the vulnerabilities, tracked as "CVE-2023-6345".
033d5b33e3749dbd93f31a54
2021-076: Fortinet Critical Vulnerability Saturday, December 18, 2021 04:33:00 PM CET On December 15th, Fortinet PSIRT updated its advisory related to CVE-2021-44228 and CVE-2021-45046 affecting Fortinet products. While these CVE affect the Java logging library "log4j", all products using this library are vulnerable to Unauthenticated Remote Code Execution.
04fc97c8f2852a360cdf4afc
2023
05241d6aac9489a4cf120337
2022-073: UPDATE: OpenSSL Critical Vulnerability Tuesday, November 01, 2022 09:55:00 PM CET On November 1, 2022, the OpenSSL project team has released a new version of the openssl library version 3. The version 3.0.7 fixes two HIGH vulnerabilities, CVE-2022-3602 and CVE-2022-3786, that could lead to Denial of Service conditions, or Remote Code Execution in some cases. It is recommended upgrading openssl to the last versions. Proof of concepts are now available.
15a376060dccc646475be773
2022-050: Multiple Critical Vulnerabilities in Microsoft Products Thursday, July 14, 2022 09:15:00 AM CEST On the 12th of July, Microsoft released July's 2022 Patch Tuesday including fixes for one actively exploited zero-day vulnerability and a total of 84 flaws. A zero-day vulnerability tracked as CVE-2022-22047 concerns a Windows CSRSS elevation of privilege, allowing an attacker to gain SYSTEM privileges. Out of the 84 other security flows, four of them are classified as Critical, as they all
15cbb5574c21f1cb85f6dd18
2021-062: NPM Libraries Hijacked Friday, November 05, 2021 02:12:00 PM CET On November 4, malicious code was discovered in two popular NPM libraries after unexpected releases have been published for the "coa" library. Hours after these new releases, the "rc" library was also found hijacked. The first library is a parser for command-line options, while the second is used as a configuration loader for applications. Malicious releases were all published on November 4, versions "2.0.3", "2.0.4", "2.
1e24f1b1e4afc17c10062875
2021-049: Multiple Zero-Day Vulnerabilities in Apple Products Tuesday, September 14, 2021 10:59:00 AM CEST On September 13, Apple has released multiple security updates to address two zero-day vulnerabilities tracked as CVE-2021-30858 and CVE-2021-30860 in multiple products. An attacker could exploit these vulnerabilities to take control of an affected device. One vulnerability is known to be used to install the Pegasus spyware on iPhones and Apple is aware of a report that this issue may have b
1e750323f48817bd0a0db67d
2017-023: UPDATE RSA Key Generation Prone to Factorization Attack Wednesday, October 18, 2017 12:17:00 PM CEST A vulnerability (CVE-2017-15361) in the procedure of RSA key generation used by a software library allows a practical factorization attack. As a result it is possible to compute the private part of an RSA key based only on its public part. The vulnerable library is used in cryptographic smartcards, security tokens, and other secure hardware chips manufactured by Infineon Technologies AG
2680cc37ee8f65e8e40e6ae1
Cyber Brief 24-05 - April 2024 Thursday, May 02, 2024 06:00:00 PM CEST Cyber Briefs are monthly executive reports that aim to present an overview of the most relevant developments in cyber security, based exclusively on open sources, with a view to inform political leadership and senior management in its constituency. Additional information on any item in this Brief can be provided upon request. Cyber Security Briefs are TLP:CLEAR.
33528a888b3e62c8f74608f6
2024-118: Critical Vulnerability in 7-Zip Monday, November 25, 2024 09:34:13 AM CET A severe security vulnerability has been discovered in 7-Zip, the popular file compression utility, allowing remote attackers to execute malicious code through specially crafted archives. The vulnerability tracked as CVE-2024-11477 has received a high CVSS score of 7.8.
335af501a62e0aa64ae0161c
2025-011: Critical Vulnerabilities in Gitlab Friday, March 14, 2025 05:03:26 PM CET On March 13, 2025, GitLab released security updates for Community Edition (CE) and Enterprise Edition (EE), addressing nine vulnerabilities, including two critical severity flaws in the "ruby-saml" library used for SAML Single Sign-On (SSO) authentication. It is recommended updating affected assets as soon as possible.
3a4d290f6b38233ff5bd0ba2
2023-066: Mozilla Firefox and Thunderbird Zero-Day Vulnerability Thursday, September 14, 2023 06:26:54 PM CEST On September 12, 2023, Mozilla released an emergency security update that addresses a zero-day vulnerability, which has been exploited in the wild. The vulnerability impacts its Firefox web browser and Thunderbird email client and is being tracked as CVE-2023-4863. The issue is being exploited in the wild. [Update] Please note that this vulnerability also impacts other browsers and any
423c60784c60459d29cc1761
2023-057: Microsoft August 2023 Patch Tuesday Thursday, August 10, 2023 01:52:15 PM CEST Microsoft has released its August 2023 Patch Tuesday Security Updates, addressing a total of 74 Microsoft CVEs, including two actively exploited zero-day vulnerabilities, and six Critical vulnerabilities.
42c010c087f373ced48c4f6a
2021-073: Adobe ColdFusion Critical Vulnerability Friday, December 17, 2021 04:07:00 PM CET On December 16th, Adobe updated its security advisory related to CVE-2021-44228 affecting ColdFusion products. While this CVE affects the Java logging library log4j, all products using this library are vulnerable to Unauthenticated Remote Code Execution.
4b789a247e4930d4850ae736
2020-055: Critical Vulnerability in the Solaris PAM Library Thursday, November 05, 2020 02:32:00 PM CET Within its monthly Critical Patch Update Advisory, Oracle released patch for a critical vulnerability affecting Solaris Pluggable Authentication Module (PAM).FireEye discovered during an investigation traces of exploitation of this vulnerability since 2018. Moreover, FireEye associated the vulnerability with Oracle Solaris SSHD Remote Root Exploit identified on black-market for sale. This vuln
admin : boca raton

Public sources document default credentials associated with this vendor or product. No login attempt was performed.

Source: scantide_default_credentials
References

UTStarcom

Vendor:
unknown
snmp : [blank]

Public sources document default credentials associated with this vendor or product. No login attempt was performed.

Source: scantide_default_credentials

Nortel

Vendor:
unknown
rwa : [blank]

Public sources document default credentials associated with this vendor or product. No login attempt was performed.

Source: scantide_default_credentials

Network cameras

Vendor:
· Model: Network cameras
unknown
46 campaign/advisory records
FBI / IC3 campaign / regional advisory intelligence — 20
22d54aba1c3e6e05a9d1d8d1
Common Internet of Things Devices May Expose Consumers to Cyber Exploitation
24eae392c7e3a25cf0cb8d60
Ransomware Attacks Straining Local US Governments and Public Services
3a1646c7b2f5c6b4bfcd91be
Russian Military Cyber Actors Target U.S. and Global Critical Infrastructure
3ea3cb07dd4c7f0f2db3478c
2024
3ef0e143169ef8b9b75a55ea
2024 U.S. Federal Elections: The Insider Threat
57ff43de10c50b891ba950cf
Top CVEs Actively Exploited By People's Republic of China State-Sponsored Cyber Actors
7258bcf352fa4c07d85afa23
Cyber Actors Use Internet of Things Devices as Proxies for Anonymity and Pursuit of Malicious Cyber Activities
727bf4770c53f60ac4bf0c93
New Tradecraft of Iranian Cyber Group Aria Sepehr Ayandehsazan aka Emennet Pasargad
80d9ef62d337e508062cbe27
Skip to content
907c908590f218ea37bf4a97
Revised: Internet-Connected Toys Could Present Privacy and Contact Concerns for Children
9550066e70010a432e19c33e
People's Republic of China-Linked Actors Compromise Routers and IoT Devices for Botnet Operations
004e15477836566437b67760
Office of Public Affairs | Justice Department Announces Actions to Combat Two Russian State-Sponsored Cyber Criminal Hacking Groups | United States Department of Justice Skip to main content An official website of the United States government Here's how you know Here's how you know Official websites use .gov A .gov website belongs to an official government organization in the United States. Secure
01e9abcc28c68df5c0b4e43e
Update on SVR Cyber Operations and Vulnerability Exploitation
02c564e5d11e235eccef00f3
New Sandworm malware Cyclops Blink replaces VPNFilter
034b6dd4edcdf314784d621e
Unpatched and Outdated Medical Devices Provide Cyber Attack Opportunities
0395243c18e95df7d5cb774c
In Real Life (IRL) Com: Violent Subset of The Community (Com) is a Rising Threat to Youth Online — FBI An official website of the United States government. Here's how you know Official websites use .gov A .gov website belongs to an official government organization in the United States. Secure .gov websites use HTTPS A lock ( ) or https:// means you've safely connected to the .gov website. Share se
0698638c72fa1363ede20ec4
2021 Trends Show Increased Globalized Threat of Ransomware
07e7eb1322d4643ea3b7b3c7
Return to top
07e8dad684aa5ddf5f71550d
Motor Vehicles Increasingly Vulnerable to Remote Exploits
0910102e922241808c13aeb5
Alert on Cryptocurrency Money Services Businesses — FBI An official website of the United States government. Here's how you know Official websites use .gov A .gov website belongs to an official government organization in the United States. Secure .gov websites use HTTPS A lock ( ) or https:// means you've safely connected to the .gov website. Share sensitive information only on official, secure we
CERT-EU campaign / regional advisory intelligence — 20
408489f685ebe344cf418bea
Cyber Security Brief 24-02 - January 2024 Friday, February 02, 2024 12:00:00 PM CET Cyber Security Briefs are monthly executive reports that aim to present an overview of the most relevant developments in cyber security, based exclusively on open sources, with a view to inform political leadership and senior management in its constituency. Additional information on any item in this Brief can be provided upon request. Cyber Security Briefs are TLP:WHITE.
9136a85af7dac9f7b449484e
TLR 10 Years
a819b39204a06005b3b1daa9
Cyber Brief 25-07 - June 2025 Tuesday, July 01, 2025 05:00:00 PM CEST Cyber Briefs are monthly executive reports that aim to present an overview of the most relevant developments in cyber security, based exclusively on open sources, with a view to inform political leadership and senior management in its constituency. Additional information on any item in this Brief can be provided upon request. Cyber Briefs are TLP:CLEAR.
00fcbc2726cc1783631565f5
2021-034: Vulnerabilities in Cisco Products Friday, July 09, 2021 07:29:00 AM CEST On July 7, Cisco released security updates to address several security vulnerabilities. This list includes vulnerabilities rated High affecting Cisco Business Process Automation (BPA) with a CVSS score of 8.8 out of 10 and a vulnerability rated Medium affecting Cisco Adaptive Security Device Manager (ASDM) with a CVSS score of 7.5 out of 10.Vulnerabilities in Cisco Business Process Automation (BPA) could allow an
0156a7adb3958cfad7c04e73
2021-041: Critical Vulnerability in Jira Products Friday, July 23, 2021 12:22:00 PM CEST A critical vulnerability (CVE-2020-36239) in many versions of Jira Data Center and Jira Service Management Data Center products can lead to arbitrary code execution.
021dad8bb0c4c9076a95ac7d
2017-012: UPDATE! WannaCry Ransomware Campaign Exploiting SMB Vulnerability Monday, May 22, 2017 03:46:00 PM CEST A large ransomware campaign has been observed since Friday, May 12th, 2017. The payload delivered is a variant of ransomware malware called WannaCry. It appears to infect computers through a recent SMB vulnerability in Microsoft Windows operating system (CVE-2017-0145).
028690869a5d7895c1925e08
2021-065: Vulnerabilities in VMware Products Thursday, November 25, 2021 09:55:00 AM CET On November 23, VMWare has released the VMSA-2021-0027 advisory that addresses two vulnerabilities in vCenter Server and Cloud Foundation. An attacker could exploit these vulnerabilities to read sensitive files ("CVE-2021-21980" - unauthorised arbitrary file read vulnerability) or to induce the server to make connections to arbitrary destinations ("CVE-2021-22049" - SSRF vulnerability).
03b7a54ee5ce9e82f09fe828
Cyber Security Brief 23-09 - August 2023 Monday, September 04, 2023 12:20:00 PM CEST Cyber Security Briefs are monthly executive reports that aim to present an overview of the most relevant developments in cyber security, based exclusively on open sources, with a view to inform political leadership and senior management in its constituency. Additional information on any item in this Brief can be provided upon request. Cyber Security Briefs are TLP:CLEAR.
03f275e81a7d188dbbd18cbc
2018-011: Cisco Products Multiple Vulnerabilities Thursday, April 19, 2018 04:36:00 PM CEST On the 17th and 18th of April 2018, Cisco has released several updates to address vulnerabilities affecting multiple products in which a remote attacker can exploit these vulnerabilities to trigger cross site scripting, denial of service, remote code execution, security restriction bypass and sensitive information disclosure on the targeted system.
0442e4958da9974386d3aed6
2013-0061: Authenticated Command Injection Vulnerability in Multiple Cisco Content Network and Video Delivery Products Friday, August 09, 2013 01:06:00 PM CEST Multiple Cisco content network and video delivery products contain a vulnerability when they are configured to run in central management mode.
04fc97c8f2852a360cdf4afc
2023
057fdcd62e3ec018a2633e0f
2024-072: Vulnerabilities in Ivanti EPMM Monday, July 22, 2024 10:34:56 AM CEST On July 17, 2024, Ivanti released a security advisory addressing several vulnerabilities in its EPMM solution (formerly known as MobileIron). These vulnerabilities could lead to remote code execution, authentication bypass, and sensitive information leakage. It is recommended updating as soon as possible.
060783a8f0553c4295139910
Cyber Brief 25-04 - March 2025 Wednesday, April 02, 2025 04:00:00 PM CEST Cyber Briefs are monthly executive reports that aim to present an overview of the most relevant developments in cyber security, based exclusively on open sources, with a view to inform political leadership and senior management in its constituency. Additional information on any item in this Brief can be provided upon request. Cyber Briefs are TLP:CLEAR.
06398e085df7cb738a141f67
2025-035: High Vulnerability in Cisco IOS and IOS XE Software Friday, September 26, 2025 09:03:31 AM CEST On September 24, 2025, Cisco released a security advisory regarding a high severity vulnerability in the Simple Network Management Protocol (SNMP) subsystem of Cisco IOS Software and Cisco IOS XE Software. The vulnerability is being exploited in the wild. It is recommended updating as soon as possible and conduct a compromise assessment on devices that are exposing SNMP on the Internet. It i
07a28d190f41f960bd15cf9a
Cyber Brief - July 2022 Tuesday, August 02, 2022 10:17:00 AM CEST Cyber Briefs are monthly executive reports that aim to present an overview of the most relevant developments in cyber security, based exclusively on open sources, with a view to inform political leadership and senior management in its constituency. Additional information on any item in this Brief can be provided upon request. Cyber Briefs are TLP:WHITE.
08af8e105c397ab708b7e1a4
Cyber Brief 24-11 - October 2024 Monday, November 04, 2024 05:00:00 PM CET Cyber Briefs are monthly executive reports that aim to present an overview of the most relevant developments in cyber security, based exclusively on open sources, with a view to inform political leadership and senior management in its constituency. Additional information on any item in this Brief can be provided upon request. Cyber Security Briefs are TLP:CLEAR.
0a56d52387d7c2a6a62c3e2a
2020-052: Critical Cisco IOS XR Software Vulnerability Under Attack Wednesday, October 21, 2020 02:46:00 PM CEST Cisco released a warning on the 20th of October regarding the attacks that are actively targeting the CVE-2020-3118 high severity vulnerability found to affect multiple carrier-grade routers that run the company's Cisco IOS XR Software. An advisory for this vulnerability was released by Cisco in the 5th of February. It is related to the Cisco Discovery Protocol implementation for Cisc
0d43a014d0bc71366a1007ce
2021-056: Critical Vulnerability in Microsoft Exchange Server Wednesday, October 20, 2021 04:40:00 PM CEST On October 12, Microsoft released in the monthly Patch Tuesday a new batch of patches fixing several vulnerabilities, one of which could lead to remote code execution on certain versions of Microsoft Exchange servers. The vulnerability, identified as "CVE-2021-26427", has a CVSS3 score of 9 out of 10 and could allow an attacker to execute remote code on on-premise exchange servers. Accordin
0d95e024a42c3c5aaf0f6269
2018-002: INTEL AMT Security Issue Friday, January 12, 2018 04:33:00 PM CET On January 12th 2018, F-Secure reported a security issue affecting laptops supporting Intel’s Active Management Technology (AMT). The issue allows an attacker with physical access to the laptop to bypass the need to enter credentials, including BIOS and Bitlocker passwords and TPM pins, and to gain remote access for later exploitation.
0e8356092fb79e06f765ecc9
2018-019: New attack on WPA/WPA2 using PMKID Wednesday, August 08, 2018 08:53:00 AM CEST On August 4th the researcher Jens Steube published on his website a new method to get a hash which involves the Pre-Shared Key (PSK) of a wifi access point. A successful exploitation of the technique allows an attacker to retrieve the PSK.
Europol / EC3 campaign / regional advisory intelligence — 6
7c9f923fb2209b9afc3963b9
Police dismantle prolific ransomware cybercriminal network – The Hague, the Netherlands | Europol You need to enable JavaScript to run this app. Loading application. Please wait.
afae6f19a40f7e54a02517fa
Global operation targets NoName057(16) pro-Russian cybercrime network – The offenders targeted Ukraine and supporting countries, including many EU Member States | Europol You need to enable JavaScript to run this app. Loading application. Please wait.
c1a6dbe7dad82d4689fb14e8
Cybercrime-as-a-service takedown: 7 arrested – Operation takes down sophisticated criminal network that enabled criminals to commit serious crimes across Europe | Europol You need to enable JavaScript to run this app. Loading application. Please wait.
cc48a5b86d652879ecf009a5
Criminal phishing network resulting in over 480 000 victims worldwide busted in Spain and Latin America – First ever joint operation between Europol and the Specialised Cybercrime Centre of Ameripol | Europol You need to enable JavaScript to run this app. Loading application. Please wait.
e29d41d3cc410f6b18aa643e
GOZNYM MALWARE: CYBERCRIMINAL NETWORK DISMANTLED IN INTERNATIONAL OPERATION | Europol You need to enable JavaScript to run this app. Loading application. Please wait.
ece2d4b920b04ded952bd339
Hook, line and sinker: cybercrime network phishing bank credentials arrested in Romania – The criminal group sent phishing text messages and emails to get access to victims’ bank accounts | Europol You need to enable JavaScript to run this app. Loading application. Please wait.
admin : admin

Public sources document default credentials associated with this vendor or product. No login attempt was performed.

Source: scantide_default_credentials

PBX

Vendor:
· Model: PBX
telnet
1 CVE · highest 5.8 2 campaign/advisory records
CVEs matching this vendor/product — 1 Highest CVSS 5.8
CVSS 5.8 EPSS 58.2% EUVD 1 Vulnrichment GHSA 1
Issabel PBX Asterisk-Cli os command injection
Published 2024-01-28T23:31:04.667Z Updated 2025-05-29T15:11:05.761Z CWE-78
JVN / Japan campaign / regional advisory intelligence — 2
JVNDB-2024-000006
FusionPBX vulnerable to cross-site scripting
Published 2024-01-19T12:30:50+09:00
JVNDB-2023-000005
Multiple vulnerabilities in MAHO-PBX NetDevancer series
Published 2023-01-11T16:11:20+09:00
dhs3pms : dhs3pms

Public sources document default credentials associated with this vendor or product. No login attempt was performed.

Source: scantide_default_credentials

Submit a missing product

Suggestions appear in search immediately with an unreviewed community label and remain queued for moderation. Please include a public reference when possible.