The account 'r00t' on the remote host has no password.  An attacker may leverage this issue to gain access to the affected system and launch further attacks against it.

The account 'root' on the remote host has the password 'rootme'. An attacker may leverage this issue to gain total control of the affected system.

The account 'root' on the remote host has the password 'testpass123'.
An attacker may leverage this to gain total control of the affected system.

The account 'dbadmin' on the remote host has the password 'sq!us3r'. 

An attacker may leverage this issue to gain access to the affected system. 

Note that RioRey RIOS appliances, used for dynamic denial of service mitigation, are reported to use these credentials to support connections from rVIEW, the vendor's central management and configuration tool, and that an attacker reportedly may be able to escalate privileges through several vulnerabilities to gain full control over the device.

The account 'admin' on the remote host has the password 'infoblox'. An attacker may leverage this issue to gain total control of the affected system.

The account 'root' on the remote host has the password '0p3nm35h'. An attacker may leverage this issue to gain total control of the affected system.

Note that some network devices are known to use these credentials by default.

The account 'admin' on the remote host has the password 'password'.
An attacker may leverage this issue to gain access, likely as an administrator, to the affected system.

The remote POP3 server is vulnerable to the following buffer overflow :

 USER test PASS <buffer>

This may allow an attacker to execute arbitrary commands as root on the remote POP3 server.

The remote Windows host has a 'guest' FTP account enabled. This could allow a remote attacker to upload or download arbitrary files on the remote host.

Note that this plugin only tests for guest accounts over FTP.

The remote FTP server closes the connection when a command or argument is too long.  This is probably due to a buffer overflow and may allow an attacker to execute arbitrary code on the remote host.

The EMC vApp Manager web application running on the remote host uses a default set of credentials ('smc' / 'smc'). An unauthenticated, remote attacker can exploit this issue to authenticate to the application and perform actions allowed by the default account. Specifically, the attacker can login and exploit a file upload RCE vulnerability (CVE-2018-1215) to cause remote code execution on the remote host.

The remote host is running HylaFAX, a fax / pager server application for Linux / unix. 

The version of HylaFAX installed on the remote host does not check passwords when authenticating users via hfaxd, its fax server.  An attacker can exploit this issue to bypass authentication using a valid username and gain access to the system.

The remote host is running a version of the BNC IRC proxy that contains a flaw in its authentication process that accepted only logins with incorrect passwords.  An attacker may use this issue to gain access to the remote IRC proxy server.

The remote host is running Nukedit, a content management system written in ASP. 

The version of Nukedit installed on the remote host fails to sanitize user input to the 'email' parameter of the 'utilities/login.asp' script before using it in a database query.  An unauthenticated attacker may be able to exploit this issue to manipulate database queries to disclose sensitive information, bypass authentication, or even attack the underlying database.

PostgreSQL contains a flaw that is triggered when attempting to  authenticate to the database with an empty password using a modified  or a non-libpq-based client. This allows a remote attacker to  bypass authentication mechanisms.

NETGEAR ships at least one device with a built-in administrator account. This account cannot be changed via the configuration interface and enables a remote attacker to control the NETGEAR device.

To duplicate this error, simply point your browser to a vulnerable machine, and log in (when prompted) with :

  userid = super   password = 5777364

or :

  userid = superman   password = 21241036

The remote F5 Networks device has the default password set for the 'support' user account.  This account normally provides read/write access to the web configuration utility.  An attacker could take advantage of this to reconfigure your systems and possibly gain shell access to the system with super-user privileges.

The remote Linksys router accepts the default password 'admin' for the web administration console.  This console provides read/write access to the router's configuration.  An attacker could take advantage of this to reconfigure the router and possibly re-route traffic.

The remote Janitza FTP server can be accessed with hard-coded credentials. A remote attacker can leverage the credentials to upload and download arbitrary files.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
34083	Unpassworded 'r00t' account	Nessus	Default Unix Accounts	2008/9/4	2022/4/11	critical
34323	Default Password (rootme) for 'root' Account	Nessus	Default Unix Accounts	2008/10/1	2022/4/11	critical
34418	Default Password (testpass123) for 'root' Account	Nessus	Default Unix Accounts	2008/10/15	2022/4/11	critical
42147	Default Password (sq!us3r) for 'dbadmin' Account	Nessus	Default Unix Accounts	2009/10/15	2022/4/11	critical
42211	Default Password (infoblox) for 'admin' Account	Nessus	Default Unix Accounts	2009/10/22	2022/4/11	critical
48274	Default Password (0p3nm35h) for 'root' Account	Nessus	Default Unix Accounts	2010/8/9	2022/4/11	critical
35660	Default Password (password) for 'admin' Account	Nessus	Default Unix Accounts	2009/2/12	2022/4/11	critical
10325	XtraMail POP3 PASS Command Remote Overflow	Nessus	Gain a shell remotely	1999/11/10	2018/11/15	critical
10166	Windows NT FTP 'guest' Account Present	Nessus	FTP	1999/6/22	2018/8/13	critical
10084	Multiple FTP Server Command Handling Overflow	Nessus	FTP	1999/6/22	2024/1/16	critical
106849	EMC vApp Manager Default Credentials	Nessus	CGI abuses	2018/2/15	2019/11/8	critical
20387	HylaFAX hfaxd with PAM Password Policy Bypass	Nessus	Misc.	2006/1/10	2018/11/15	high
15703	BNC IRC Server Incorrect Password Authentication Bypass	Nessus	Misc.	2004/11/13	2018/6/27	high
31192	Nukedit utilities/login.asp email Parameter SQL Injection	Nessus	CGI abuses	2008/2/27	2022/4/11	high
104031	PostgreSQL Empty Password Handling Remote Authentication Bypass	Nessus	Databases	2017/10/20	2025/7/14	critical
12258	NETGEAR Wireless Access Point Hardcoded Default Password	Nessus	CGI abuses	2004/6/3	2021/1/19	high
10820	F5 Device Default Support Password	Nessus	Misc.	2001/12/6	2020/6/12	critical
10999	Linksys Router Default Password	Nessus	CISCO	2002/6/5	2013/12/17	critical
86905	Janitza Hard-Coded FTP Password	Nessus	FTP	2015/11/17	2018/11/15	critical

检测

插件搜索

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

high

high

high

critical

high

critical

critical

critical