Scantide Default Credential Lookup

c-010-i

Vendor: · Model: c-010-i

unknown

2 upcoming vendor advisories 6 campaign/advisory records

FBI / IC3 campaign / regional advisory intelligence — 4

FBI_IC3-260407.pdf

TLP:CLEAR Co-Authored by: Product ID: AA26-097A Iranian-Affiliated Cyber Actors Exploit Programmable Logic Controllers Across US Critical Infrastructure Publication: April 7, 2026 Federal Bureau of Investigation Cybersecurity and Infrastruc

Open source record

FBI_IC3-260722.pdf

TLP:CLEAR Co-Authored by: Product ID: AA26-097A Iranian-Affiliated Cyber Actors Exploit Programmable Logic Controllers Across US Critical Infrastructure Publication: April 7, 2026 Last Update: July 22, 2026 Federal Bureau of Investigation D

Open source record

FBI_IC3-260819.pdf

Joint Cybersecurity Advisory TLP:CLEAR Defending Against an Active Threat to Siemens S7 Series PLCs Executive summary Note: This advisory relates to an active threat to Siemens S7 Series programmable logic controllers (PLCs). However, ongoi

Open source record

ded44e7e83bf8db847d7eafa

Improving Security of Open Source Software in Operational Technology and Industrial Control Systems

Open source record

CERT-EU campaign / regional advisory intelligence — 2

81584383d86765a515d350e9

Cyber Security Brief 23-06 - May 2023 Thursday, June 01, 2023 04:20:00 PM CEST Cyber Security Briefs are monthly executive reports that aim to present an overview of the most relevant developments in cyber security, based exclusively on open sources, with a view to inform political leadership and senior management in its constituency. Additional information on any item in this Brief can be provided upon request. Cyber Security Briefs are TLP:CLEAR.

Open source record

e174a70be7fbff2ccdbe4f99

Cyber Security Brief 23-07 - June 2023 Monday, July 03, 2023 11:55:00 AM CEST Cyber Security Briefs are monthly executive reports that aim to present an overview of the most relevant developments in cyber security, based exclusively on open sources, with a view to inform political leadership and senior management in its constituency. Additional information on any item in this Brief can be provided upon request. Cyber Security Briefs are TLP:CLEAR.

Open source record

Upcoming ZDI vendor advisories — 2

Vendor-level advance notice: ZDI has not yet disclosed which product is affected. These entries are shown because this credential record matches the vendor; they are not findings against this product or model.

ZDI-CAN-27993 CVSS 9.8

Vendor contacted: 2026-08-04 Planned disclosure: 2026-12-02 Researcher: Anonymous

Affected product: Not yet disclosed · Open ZDI Upcoming

ZDI-CAN-28006 CVSS 9.8

Vendor contacted: 2026-08-04 Planned disclosure: 2026-12-02 Researcher: Anonymous

Affected product: Not yet disclosed · Open ZDI Upcoming

unknown : unknown

Public sources document default credentials associated with this vendor or product. No login attempt was performed.

Source: scantide_default_credentials

BinTec

Vendor:

unknown

admin : bintec

Public sources document default credentials associated with this vendor or product. No login attempt was performed.

Source: scantide_default_credentials

References

https://github.com/danielmiessler/SecLists/blob/master/Passwords/Default-Credentials/default-passwords.csv

P 2602R

Vendor: · Model: P 2602R

unknown

6 campaign/advisory records

FBI / IC3 campaign / regional advisory intelligence — 2

9550066e70010a432e19c33e

People's Republic of China-Linked Actors Compromise Routers and IoT Devices for Botnet Operations

Open source record

FBI_IC3-260312.pdf

TLP:CLEAR 12 March 2026 FLASH Number 20260312-001 AVrecon Malware-Infected Routers Exploited as Residential Proxies by SocksEscort Summary The Federal Bureau of Investigation (FBI) is releasing this FLASH to disseminate indicators of compro

Open source record

CERT-EU campaign / regional advisory intelligence — 4

060783a8f0553c4295139910

Cyber Brief 25-04 - March 2025 Wednesday, April 02, 2025 04:00:00 PM CEST Cyber Briefs are monthly executive reports that aim to present an overview of the most relevant developments in cyber security, based exclusively on open sources, with a view to inform political leadership and senior management in its constituency. Additional information on any item in this Brief can be provided upon request. Cyber Briefs are TLP:CLEAR.

Open source record

134ff9b67400d8a3bb280abb

2022-035: Critical Remote Code Execution in Zyxel Products Tuesday, May 17, 2022 10:02:00 AM CEST In April 2022, a security researcher from Rapid7 discovered and reported a vulnerability that affects Zyxel firewall and VPN devices for business (advisory publicly released on 12th May 2022). Tracked as CVE-2022-30525 with a CVSS score of 9.8, a successful exploitation of this vulnerability allows an unauthenticated and remote attacker to achieve code execution as the "nobody" user.A public exploit

Open source record

880c62e58e29fb1916e3bd13

Cyber Security Brief 23-12 - November 2023 Monday, December 04, 2023 10:25:00 AM CET Cyber Security Briefs are monthly executive reports that aim to present an overview of the most relevant developments in cyber security, based exclusively on open sources, with a view to inform political leadership and senior management in its constituency. Additional information on any item in this Brief can be provided upon request. Cyber Security Briefs are TLP:WHITE.

Open source record

d07cd2151232c2d54b899e35

2016-141: Black Nurse ICMP DOS attacks Monday, November 14, 2016 05:11:00 PM CET TDC-SOC-CERT the CERT from TDC A/S, a Danish telecommunications company, observed and started analyzing a number of denial of service attacks (DOS) based on the ICMP protocol.

Open source record

[no username] : 1234

Public sources document default credentials associated with this vendor or product. No login attempt was performed.

Source: scantide_default_credentials

Netgear modem/router and SSR

Vendor: · Model: Netgear modem/router and SSR

unknown

7 campaign/advisory records

FBI / IC3 campaign / regional advisory intelligence — 4

7af9cda0c10273509413ad9a

State-Sponsored Actors Compromise and Maintain Persistent Access to U.S. Critical Infrastructure

Open source record

9550066e70010a432e19c33e

People's Republic of China-Linked Actors Compromise Routers and IoT Devices for Botnet Operations

Open source record

FBI_IC3-260312.pdf

TLP:CLEAR 12 March 2026 FLASH Number 20260312-001 AVrecon Malware-Infected Routers Exploited as Residential Proxies by SocksEscort Summary The Federal Bureau of Investigation (FBI) is releasing this FLASH to disseminate indicators of compro

Open source record

FBI_IC3-260423.pdf

Advisory Defending against China-nexus covert networks of compromised devices 23 April 2026  Crown Copyright 2026 National Cyber Security Centre Defending against China-nexus covert networks of compromised devices Explaining the widespread

Open source record

CERT-EU campaign / regional advisory intelligence — 3

b385d64eaf5286d6c7c949da

Cyber Brief 24-12 - November 2024 Tuesday, December 03, 2024 11:00:00 AM CET Cyber Security Briefs are monthly executive reports that aim to present an overview of the most relevant developments in cyber security, based exclusively on open sources, with a view to inform political leadership and senior management in its constituency. Additional information on any item in this Brief can be provided upon request. Cyber Security Briefs are TLP:CLEAR.

Open source record

76b8f83f08353259dba25ca7

2024-065: Critical Vulnerability in Juniper Networks Products Monday, July 01, 2024 11:49:52 AM CEST On June 27, 2024, Juniper Networks issued an advisory about a critical vulnerability, CVE-2024-2973, affecting Session Smart Router (SSR), Session Smart Conductor, and WAN Assurance Router products. This vulnerability allows an attacker to bypass authentication and gain full control of the device, primarily affecting high-availability redundant configurations. It is recommended to update affected

Open source record

991800cd6ca74d40cd0cb52e

2024

Open source record

netman : [blank]

Public sources document default credentials associated with this vendor or product. No login attempt was performed.

Source: scantide_default_credentials

Oracle

Vendor: · Model: Oracle

unknown

18 upcoming vendor advisories 39 campaign/advisory records

FBI / IC3 campaign / regional advisory intelligence — 4

25091f9b0f59b31c2bd98141

Iranian State Actors Conduct Cyber Operations Against the Government of Albania

Open source record

32fea06933ed880e2baf94a5

Cyber Criminals Increasingly Exploit Vulnerabilities in Decentralized Finance Platforms to Obtain Cryptocurrency, Causing Investors to Lose Money

Open source record

c1e6dfe7f5ede874b7f6049b

2022 Top Routinely Exploited Vulnerabilities

Open source record

fa89754768997e9e243a4438

North Korea Cyber Group Conducts Global Espionage Campaign to Advance Regime's Military and Nuclear Programs

Open source record

CERT-EU campaign / regional advisory intelligence — 20

05bd242fd3f8859308bab2f8

2013-053: Oracle Java SE Critical Patch Update - June 2013 Friday, June 21, 2013 02:59:00 PM CEST The Oracle Java SE Critical Patch Update [1] for June 2013 were released on.

Open source record

0b03f2f7f8921c77fce46a8f

2014-169: NEW SSLv3 Padding Oracle On Downgraded Legacy Encryption attack Thursday, November 20, 2014 10:09:00 AM CET The SSL protocol 3.0, as used in OpenSSL and other products, uses non-deterministic CBC padding, which makes it easier for man-in-the-middle attackers to obtain clear text data via a padding-oracle attack, aka the "POODLE" issue.

Open source record

101e1f0f11d0be1353a3e8f6

Cyber Brief 25-12 - November 2025 Tuesday, December 02, 2025 04:00:00 PM CET Cyber Briefs are monthly executive reports that aim to present an overview of the most relevant developments in cyber security, based exclusively on open sources, with a view to inform political leadership and senior management in its constituency. Additional information on any item in this Brief can be provided upon request. Cyber Briefs are TLP:CLEAR.

Open source record

1424ba9a397110ec1688ac22

2012-0073: Oracle Java SE Critical Patch Update Advisory - June 2012 Wednesday, June 13, 2012 04:52:00 PM CEST A Critical Patch Update is a collection of patches for multiple security vulnerabilities. The Critical Patch Update for Java SE also includes non-security fixes.

Open source record

164e9b5c225d1223c305e30c

Cyber Brief 25-11 - October 2025 Saturday, November 01, 2025 04:00:00 PM CET Cyber Briefs are monthly executive reports that aim to present an overview of the most relevant developments in cyber security, based exclusively on open sources, with a view to inform political leadership and senior management in its constituency. Additional information on any item in this Brief can be provided upon request. Cyber Briefs are TLP:CLEAR.

Open source record

1b0e1f9069dff7138fba17b4

2020-054: Critical Vulnerability in Oracle WebLogic Server Tuesday, November 03, 2020 04:13:00 PM CET On the 1st of November 2020, Oracle released an out-of-band patch to address a critical vulnerability (CVSS score 9.8) that has been assigned CVE-2020-14750. According to Oracle, this bug is linked to the vulnerability CVE-2020-14882. However, Oracle did not provide any information about the relation between both of the security flaws. The CVE-2020-14750 vulnerability could allow a non-authentic

Open source record

1b73dcbba2ab33095336de4b

2022-006: Critical Vulnerabilities in Multiple Oracle Products Thursday, January 20, 2022 06:24:00 PM CET On January 18th, Oracle released their quarterly Critical Patch Update advisory, a collection of patches that addresses hundreds of critical security flaws, affecting several of their products. Many of these vulnerabilities may be remotely exploited without the need for user credentials. It is therefore highly recommended to apply the security patches without delay.

Open source record

1fcf21fda66910438380068c

2013

Open source record

28700f0ed9d3200ac276ae2b

2012-0059: Vulnerability in the Oracle Grid Engine component of Oracle Sun Products Suite Monday, April 30, 2012 02:13:00 PM CEST Two critical vulnerabilities have been identified in the Oracle Grid Engine component of Oracle Sun Products Suite

Open source record

2b8496d7d1db50e1ed8025a7

2012-0004: Remote Security Vulnerability in Oracle Sun Solaris Friday, January 20, 2012 02:16:00 PM CET Oracle Sun Solaris is prone to a remote security vulnerability. Fixes are available.

Open source record

2d9da3e5556cc55032f0b42f

2021-037: Critical Vulnerabilities in Oracle WebLogic Server Thursday, July 22, 2021 04:24:00 PM CEST Within the Critical Patch Update for July 2021 addressing hundreds of vulnerabilities across multiple products, Oracle released information about critical vulnerabilities affecting WebLogic Server.

Open source record

3260db19d0763137915d5a52

2022-029: UPDATE: Oracle Java SE RCE Vulnerability Thursday, April 21, 2022 02:21:00 PM CEST Oracle published a Critical Patch Update Advisory - April 2022 which is a collection of patches for multiple security vulnerabilities. This Critical Patch Update contains 520 new security patches across the product families.One of the vulnerabilities is CVE-2022-21449. It is an exploitable vulnerability which allows unauthenticated attacker with network access via multiple protocols to compromise Oracle

Open source record

3d5dadd623e642eb42c811ef

2019-010: UPDATE: Oracle WebLogic 0-day Vulnerability Friday, April 26, 2019 05:00:00 PM CEST A highly critical, zero-day vulnerability in Oracle WebLogic server was disclosed. Some attackers might have already started exploiting it in the wild. The vulnerability potentially allows attackers to remotely execute arbitrary commands. Oracle has issued an out-of-band security update to address this vulnerability.

Open source record

3d84eec3454c9182bb0378cb

2013-0012: UPDATED - Oracle Java 0-day Vulnerability Exploited in the Wild Thursday, January 17, 2013 10:26:00 AM CET This Security Alert addresses security issues CVE-2013-0422 (US-CERT Alert TA13-010A - Oracle Java 7 Security Manager Bypass Vulnerability) and another vulnerability possibly related to "permissions of certain Java classes," as exploited in the wild in January 2013, and as demonstrated by Blackhole and Nuclear Pack, affecting Java running in web browsers.

Open source record

3fc2df2c6c621004c626c231

2012-0124: Oracle Critical Patch Update - October 2012 Wednesday, October 17, 2012 03:13:00 PM CEST The Critical Patch Update for October 2012 [2] and The Oracle Java SE Critical Patch Update [3] for October 2012 were released. Oracle strongly recommends applying the patches as soon as possible. Please note that Sun products are included in this Critical Patch Update.

Open source record

427c825a3f797f5dd34544e0

2020-053: Critical Vulnerability in Oracle WebLogic Server Friday, October 30, 2020 05:38:00 PM CET In October, within the monthly Critical Patch Update Advisory addressing hundreds of vulnerabilities, Oracle released an update about a critical vulnerability affecting WebLogic Server. This vulnerability may allow unauthenticated attackers with network access via HTTP to achieve total compromise and takeover of vulnerable Oracle WebLogic Servers. This bug has been assigned CVE-2020-14882 and has

Open source record

4b789a247e4930d4850ae736

2020-055: Critical Vulnerability in the Solaris PAM Library Thursday, November 05, 2020 02:32:00 PM CET Within its monthly Critical Patch Update Advisory, Oracle released patch for a critical vulnerability affecting Solaris Pluggable Authentication Module (PAM).FireEye discovered during an investigation traces of exploitation of this vulnerability since 2018. Moreover, FireEye associated the vulnerability with Oracle Solaris SSHD Remote Root Exploit identified on black-market for sale. This vuln

Open source record

4d2e7c21608430e5950b4683

2013-0058: Oracle Critical Patch Update Advisory Friday, August 09, 2013 01:01:00 PM CEST The Oracle Critical Patch Update for July 2013 [1] were released. Oracle strongly recommends applying the patches as soon as possible.

Open source record

4d5a58376a2df4824e4643b6

2012-0079: Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Tuesday, July 03, 2012 02:47:00 PM CEST Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 update 4 and earlier allows remote attackers to affect confidentiality and integrity via unknown vectors related to Libraries

Open source record

57f4da2583be950a807f16f7

2014-043: Oracle Critical Patch Update Advisory Thursday, May 08, 2014 04:31:00 PM CEST The Oracle Critical Patch Update for April 2014 [1] were released.

Open source record

JVN / Japan campaign / regional advisory intelligence — 15

JVNDB-2005-000727

mod_imap cross-site scripting vulnerability

Published 2008-05-21T00:00:00+09:00

Open source record

JVNDB-2007-000819

Cross-site scripting vulnerability in Apache HTTP Server "mod_imap" and "mod_imagemap"

Published 2008-05-21T00:00:00+09:00

Open source record

JVNDB-2008-000040

Directory traversal vulnerability in WebLogic Server and WebLogic Express plug-ins

Published 2008-07-24T14:22:29+09:00

Open source record

JVNDB-2009-000007

Oracle WebLogic Server vulnerable to cross-site scripting

Published 2009-01-20T16:45:07+09:00

Open source record

JVNDB-2009-002069

Oracle iPlanet Web Server information disclosure vulnerability

Published 2011-07-25T18:06:11+09:00

Open source record

JVNDB-2010-000004

Oracle Application Server vulnerable to cross-site scripting

Published 2010-01-14T21:24:17+09:00

Open source record

JVNDB-2010-000042

Cross-site Request Forgery Vulnerability in Oracle iPlanet Web Server

Published 2010-10-18T19:37:08+09:00

Open source record

JVNDB-2010-000054

Flash Player access restriction bypass vulnerability

Published 2010-11-09T19:59:22+09:00

Open source record

JVNDB-2012-000007

Oracle WebLogic Server vulnerable to cross-site scripting

Published 2012-01-20T15:37:30+09:00

Open source record

JVNDB-2013-000070

Oracle Outside In vulnerable to buffer overflow

Published 2013-07-17T13:45:49+09:00

Open source record

JVNDB-2013-000071

Oracle Outside In vulnerable to denial-of-service (DoS)

Published 2013-07-17T13:56:43+09:00

Open source record

JVNDB-2013-003391

Oracle Enterprise Manager vulnerable to cross-site scripting

Published 2013-07-22T15:00:03+09:00

Open source record

JVNDB-2013-003469

Apache Struts vulnerable to remote command execution

Published 2013-09-06T14:12:18+09:00

Open source record

JVNDB-2024-000014

Oracle WebLogic Server vulnerable to HTTP header injection

Published 2024-01-24T13:53:09+09:00

Open source record

JVNDB-2020-000047

JavaFX WebEngine does not properly restrict Java method execution

Published 2020-07-28T15:47:48+09:00

Open source record

Upcoming ZDI vendor advisories — 18

Vendor-level advance notice: ZDI has not yet disclosed which product is affected. These entries are shown because this credential record matches the vendor; they are not findings against this product or model.

ZDI-CAN-29370 CVSS 7.8

Vendor contacted: 2026-03-31 Planned disclosure: 2026-07-29 Researcher: Dvir Gozlan

Affected product: Not yet disclosed · Open ZDI Upcoming

ZDI-CAN-29543 CVSS 7.8

Vendor contacted: 2026-04-08 Planned disclosure: 2026-08-06 Researcher: Mat Powell of TrendAI Zero Day Initiative

Affected product: Not yet disclosed · Open ZDI Upcoming

ZDI-CAN-29542 CVSS 7.8

Vendor contacted: 2026-04-08 Planned disclosure: 2026-08-06 Researcher: Mat Powell of TrendAI Zero Day Initiative

Affected product: Not yet disclosed · Open ZDI Upcoming

ZDI-CAN-29541 CVSS 7.8

Vendor contacted: 2026-04-08 Planned disclosure: 2026-08-06 Researcher: Mat Powell of TrendAI Zero Day Initiative

Affected product: Not yet disclosed · Open ZDI Upcoming

ZDI-CAN-31766 CVSS 7.8

Vendor contacted: 2026-06-10 Planned disclosure: 2026-10-08 Researcher: Mat Powell of TrendAI Zero Day Initiative

Affected product: Not yet disclosed · Open ZDI Upcoming

ZDI-CAN-31765 CVSS 7.8

Vendor contacted: 2026-06-10 Planned disclosure: 2026-10-08 Researcher: Mat Powell of TrendAI Zero Day Initiative

Affected product: Not yet disclosed · Open ZDI Upcoming

ZDI-CAN-31767 CVSS 7.8

Vendor contacted: 2026-06-10 Planned disclosure: 2026-10-08 Researcher: Mat Powell of TrendAI Zero Day Initiative

Affected product: Not yet disclosed · Open ZDI Upcoming

ZDI-CAN-31777 CVSS 7.8

Vendor contacted: 2026-06-10 Planned disclosure: 2026-10-08 Researcher: Mat Powell of TrendAI Zero Day Initiative

Affected product: Not yet disclosed · Open ZDI Upcoming

ZDI-CAN-31842 CVSS 9.3

Vendor contacted: 2026-06-16 Planned disclosure: 2026-10-14 Researcher: Lucas Miller of TrendAI Research

Affected product: Not yet disclosed · Open ZDI Upcoming

ZDI-CAN-32013 CVSS 9.9

Vendor contacted: 2026-06-23 Planned disclosure: 2026-10-21 Researcher: Bobby Gould (@bobbygould5) of TrendAI Zero Day Initiative

Affected product: Not yet disclosed · Open ZDI Upcoming

ZDI-CAN-29751 CVSS 7.5

Vendor contacted: 2026-06-25 Planned disclosure: 2026-10-23 Researcher: Team Amazone@229

Affected product: Not yet disclosed · Open ZDI Upcoming

ZDI-CAN-30083 CVSS 7.5

Vendor contacted: 2026-06-25 Planned disclosure: 2026-10-23 Researcher: crixer(@pwning_me)

Affected product: Not yet disclosed · Open ZDI Upcoming

ZDI-CAN-32169 CVSS 7.8

Vendor contacted: 2026-06-30 Planned disclosure: 2026-10-28 Researcher: Mat Powell of TrendAI Zero Day Initiative

Affected product: Not yet disclosed · Open ZDI Upcoming

ZDI-CAN-31121 CVSS 7.5

Vendor contacted: 2026-07-07 Planned disclosure: 2026-11-04 Researcher: Xiaobye(@xiaobye_tw) of DEVCORE Research Team

Affected product: Not yet disclosed · Open ZDI Upcoming

ZDI-CAN-30184 CVSS 7.5

Vendor contacted: 2026-07-10 Planned disclosure: 2026-11-07 Researcher: Phan Vinh Khang of Viettel Cyber Security

Affected product: Not yet disclosed · Open ZDI Upcoming

ZDI-CAN-29835 CVSS 6.1

Vendor contacted: 2026-07-10 Planned disclosure: 2026-11-07 Researcher: Xiaobye(@xiaobye_tw) of DEVCORE Research Team

Affected product: Not yet disclosed · Open ZDI Upcoming

ZDI-CAN-31532 CVSS 6.1

Vendor contacted: 2026-07-24 Planned disclosure: 2026-11-21 Researcher: vmpr0be

Affected product: Not yet disclosed · Open ZDI Upcoming

ZDI-CAN-31625 CVSS 5.3

Vendor contacted: 2026-07-24 Planned disclosure: 2026-11-21 Researcher: vmpr0be

Affected product: Not yet disclosed · Open ZDI Upcoming

SAMPLE : SAMPLE

Public sources document default credentials associated with this vendor or product. No login attempt was performed.

Source: scantide_default_credentials

windows (RDP)

Vendor:

unknown

1 CVE 41 campaign/advisory records 2 Microsoft KB relationships

CVEs matching this vendor/product — 1

EPSS 5.0% EUVD 1 GHSA 1

The Remote Desktop Protocol (RDP) implementation in Microsoft Windows 10 1703 allows an attacker to connect to a target system using RDP and send specially crafted requests, aka "Windows Remote Desktop Protocol (RDP) Denial of Service Vulnerability."

Published 2017-08-08T21:00:00.000Z Updated 2024-09-16T16:49:12.676Z

FBI / IC3 campaign / regional advisory intelligence — 20

0a2ed3f904e1b539478b556c

APT40 Advisory: PRC MSS tradecraft in action

Open source record

1499297aad75b4e344422d39

#StopRansomware: Royal Ransomware

Open source record

1cabacddc320508fb266e21c

Cyber Actors Target K-12 Distance Learning Education to Cause Disruptions and Steal Data

Open source record

1e1e19419dbe954c101e3fe4

Conti Ransomware Attacks Impact Healthcare and First Responder Networks

Open source record

20fccf4dc914e7de91594312

Karakurt Data Extortion Group

Open source record

22789051db10cd5b88150b2e

#StopRansomware: Phobos Ransomware

Open source record

23ecec0c3c508513e5d9a1bb

Russian State-Sponsored Cyber Actors Gain Network Access by Exploiting Default Multifactor Authentication Protocols and "PrintNightmare" Vulnerability

Open source record

25091f9b0f59b31c2bd98141

Iranian State Actors Conduct Cyber Operations Against the Government of Albania

Open source record

27c9b576d9871629d627efe9

Iranian Government-Sponsored APT Actors Compromise Federal Network, Deploy Crypto Miner, Credential Harvester

Open source record

2becd729f39ba0f44afaf582

People's Republic of China-Linked Cyber Actors Hide in Router Firmware

Open source record

35aef6c52a456203f20d3c21

#StopRansomware: BlackSuit (Royal) Ransomware

Open source record

3c8fc2080b77827513541387

#StopRansomware: BianLian Data Extortion Group

Open source record

3cf3abac6a50ac70e5372abd

#StopRansomware Guide

Open source record

423daaa0186455dd99a33c2d

#StopRansomware: Play Ransomware

Open source record

45d71456061bd18b528cd350

APT Actors Exploiting Fortinet Vulnerabilities to Gain Access for Malicious Activity

Open source record

46742e38127a672abb7ac33a

#StopRansomware: Rhysida Ransomware

Open source record

468ca719334549d0f6bad717

#StopRansomware: Akira Ransomware

Open source record

47bbd1d17f59c7f340bfc49f

#StopRansomware: Cuba Ransomware

Open source record

4d24213bd1443ba660e0f939

Iranian Islamic Revolutionary Guard Corps-Affiliated Cyber Actors Exploiting Vulnerabilities for Data Extortion and Disk Encryption for Ransom Operations

Open source record

4e9cdbce8a09aff14fbf67d7

#StopRansomware: Hive Ransomware

Open source record

CERT-EU campaign / regional advisory intelligence — 20

57290228ca09d11606e01c27

2019-013: UPDATED 07/2019: Remote Desktop Services -- Remote Code Execution Vulnerability Thursday, May 16, 2019 04:22:00 PM CEST Microsoft released fixes for a critical Remote Code Execution vulnerability (CVE-2019-0708) in Remote Desktop Services that affects some older versions of Windows. The vulnerability has been since named BlueKeep.The Remote Desktop Protocol (RDP) itself is not vulnerable. This vulnerability is pre-authentication and requires no user interaction. In other words, the vul

Open source record

65091666d8e6bfcaa5d1f9af

2019

Open source record

021dad8bb0c4c9076a95ac7d

2017-012: UPDATE! WannaCry Ransomware Campaign Exploiting SMB Vulnerability Monday, May 22, 2017 03:46:00 PM CEST A large ransomware campaign has been observed since Friday, May 12th, 2017. The payload delivered is a variant of ransomware malware called WannaCry. It appears to infect computers through a recent SMB vulnerability in Microsoft Windows operating system (CVE-2017-0145).

Open source record

02b23e9258cdd1ad17334e61

2023-093: High Vulnerabilities in Google Chrome Wednesday, November 29, 2023 06:08:09 PM CET On November 28, Google has released an emergency security update to address six high vulnerabilities found in Chrome. Google is aware that an exploit exists for one of the vulnerabilities, tracked as "CVE-2023-6345".

Open source record

0371e6cc94018d0698d99ee9

2017-009: UPDATE Critical zero-day vulnerability in Microsoft Office actively exploited Wednesday, April 12, 2017 10:37:00 AM CEST A vulnerability in Microsoft Office is actively exploited to distribute Dridex banking Trojan.

Open source record

04c8d1bf109ea3389562f3d2

2024-062: Vulnerabilities in Chrome and Chromium based Browsers Thursday, December 12, 2024 11:28:13 AM CET Google has released a critical security update for its Chrome Browser, addressing six high-severity vulnerabilities that could lead to serious security issues. Chromium-based browsers are also impacted.

Open source record

04fc97c8f2852a360cdf4afc

2023

Open source record

05b4274b8448d3ced200ec82

2014-047: Security updates available for Adobe Flash Player Friday, May 16, 2014 11:05:00 AM CEST Adobe has released security updates for Adobe Flash Player 13.0.0.206 and earlier versions for Windows and Macintosh and Adobe Flash Player 11.2.202.356 and earlier versions for Linux.

Open source record

060783a8f0553c4295139910

Cyber Brief 25-04 - March 2025 Wednesday, April 02, 2025 04:00:00 PM CEST Cyber Briefs are monthly executive reports that aim to present an overview of the most relevant developments in cyber security, based exclusively on open sources, with a view to inform political leadership and senior management in its constituency. Additional information on any item in this Brief can be provided upon request. Cyber Briefs are TLP:CLEAR.

Open source record

0720c858a779af3a816b6c99

2013-0008: Security updates for Adobe Reader and Acrobat Thursday, January 10, 2013 11:12:00 AM CET Adobe has released security updates for Adobe Reader and Acrobat XI (11.0.0) and earlier versions for Windows and Macintosh, and Adobe Reader 9.5.1 and earlier 9.x versions for Linux. These updates address vulnerabilities that could cause a crash and potentially allow an attacker to take control of the affected system. CVE numbers: CVE-2012-1530, CVE-2013-0601, CVE-2013-0602, CVE-2013-0603, CVE-20

Open source record

07a28d190f41f960bd15cf9a

Cyber Brief - July 2022 Tuesday, August 02, 2022 10:17:00 AM CEST Cyber Briefs are monthly executive reports that aim to present an overview of the most relevant developments in cyber security, based exclusively on open sources, with a view to inform political leadership and senior management in its constituency. Additional information on any item in this Brief can be provided upon request. Cyber Briefs are TLP:WHITE.

Open source record

09230da21b34651f36d0bfc5

2014-001: Multiple Adobe vulnerabilities Tuesday, January 21, 2014 02:59:00 PM CET Adobe has released security updates for Adobe Reader and Acrobat XI (11.0.05) and earlier versions for Windows and Macintosh.

Open source record

09d7746f500e07afea9b8632

2012-0143: Adobe Hotfix available for ColdFusion 10 and earlier Friday, December 14, 2012 09:59:00 AM CET Adobe has released a security hotfix for ColdFusion 10 and earlier versions for Windows, Macintosh and UNIX. This hotfix resolves a vulnerability which could result in a sandbox permissions violation in a shared hosting environment. Adobe recommends users update their product installation using the instructions provided below.

Open source record

0ac13a3c9a2a19c3588705b0

2022-038: Zoom Vulnerabilities Friday, May 27, 2022 04:29:00 PM CEST On the 17th of May 2022, Zoom released an advisory about two high vulnerabilities. They are tracked as CVE-2022-22786 with a CVSS score of 7.5 and CVE-2022-22784 with a CVSS score of 8.1. A successful exploitation of both of these vulnerabilities could be used in a more sophisticated attack to trick a user into downgrading their Zoom client to a less secure version and to forge XMPP messages from the server, respectively.

Open source record

0c4e7db66326f26799d25361

2014-042: Security updates available for Adobe Flash Player Tuesday, April 29, 2014 04:12:00 PM CEST Adobe has released security updates for Adobe Flash Player 13.0.0.182 and earlier versions for Windows, Adobe Flash Player 13.0.0.201 and earlier versions for Macintosh and Adobe Flash Player 11.2.202.350 and earlier versions for Linux.

Open source record

0c9f6e589b40a846826a66e4

2022-016: Important Vulnerability in Windows SMBv3 Thursday, March 10, 2022 11:05:00 PM CET On March 8th, Microsoft fixed in the monthly Patch Tuesday 71 vulnerabilities with three classified as Critical as they allow remote code execution. A remote code execution vulnerability classified as Important affects Windows SMBv3 Client/Server.The vulnerability tracked as CVE-2022-24508 is a remote code execution vulnerability allowing an authenticated user to execute malicious code on Windows 10 versi

Open source record

0ee2124b2a371343263cbe86

2025-009: Critical Vulnerabilities in Windows Remote Desktop Services Friday, March 14, 2025 05:01:59 PM CET On March 13, Microsoft has released its March security update, addressing 57 vulnerabilities across its product range, including six critical flaws. Among the critical vulnerabilities are CVE-2025-24035 and CVE-2025-24045, both Remote Code Execution (RCE) vulnerabilities in Windows Remote Desktop Services (RDS). Each vulnerability has been assigned a CVSSv3 score of 8.1 and is rated as cr

Open source record

0f6144d791dc06347d6ae92f

2021-035: Multiple Palo Alto Vulnerabilities Thursday, July 15, 2021 03:01:00 PM CEST On July 14, Palo Alto published security advisories about two vulnerabilities rated as high, CVE-2021-3042 and CVE-2021-3044, affecting respectively Cortex XDR Agent and Prisma Cloud.

Open source record

101e1f0f11d0be1353a3e8f6

Cyber Brief 25-12 - November 2025 Tuesday, December 02, 2025 04:00:00 PM CET Cyber Briefs are monthly executive reports that aim to present an overview of the most relevant developments in cyber security, based exclusively on open sources, with a view to inform political leadership and senior management in its constituency. Additional information on any item in this Brief can be provided upon request. Cyber Briefs are TLP:CLEAR.

Open source record

1103362bedc3abc2e8440221

2016-125: Critical vulnerability in Adobe Flash Player Tuesday, May 17, 2016 10:28:00 AM CEST A critical vulnerability (CVE-2016-4117) exists in Adobe Flash Player 21.0.0.226 and earlier versions for Windows, Macintosh, Linux, and Chrome OS. Successful exploitation could cause a crash and potentially allow an attacker to take control of the affected system [1].

Open source record

Europol / EC3 campaign / regional advisory intelligence — 1

f8880f2d5578c942aee5e11b

European Cybercrime Centre at Europol warns about Windows XP security risks – The Hague, The Netherlands | Europol You need to enable JavaScript to run this app. Loading application. Please wait.

Open source record

Microsoft CVE ↔ KB correlation — 2

KB4034674CVE-2017-8673

Windows 10 Version 1703 for x64-based Systems

Open Microsoft update guidance

KB4034674CVE-2017-8673

Windows 10 Version 1703 for 32-bit Systems

Open Microsoft update guidance

maxreg : [blank]

Public sources document default credentials associated with this vendor or product. No login attempt was performed.

Source: scantide_default_credentials

Microplex

Vendor:

unknown

root : [blank]

Public sources document default credentials associated with this vendor or product. No login attempt was performed.

Source: scantide_default_credentials

SHDSL1421

Vendor: · Model: SHDSL1421

http

admin : admin

Public sources document default credentials associated with this vendor or product. No login attempt was performed.

Source: scantide_default_credentials

References

https://www.phenoelit.de/dpl/dpl.html

Network cameras

Vendor: · Model: Network cameras

unknown

46 campaign/advisory records

FBI / IC3 campaign / regional advisory intelligence — 20

22d54aba1c3e6e05a9d1d8d1

Common Internet of Things Devices May Expose Consumers to Cyber Exploitation

Open source record

24eae392c7e3a25cf0cb8d60

Ransomware Attacks Straining Local US Governments and Public Services

Open source record

3a1646c7b2f5c6b4bfcd91be

Russian Military Cyber Actors Target U.S. and Global Critical Infrastructure

Open source record

3ea3cb07dd4c7f0f2db3478c

2024

Open source record

3ef0e143169ef8b9b75a55ea

2024 U.S. Federal Elections: The Insider Threat

Open source record

57ff43de10c50b891ba950cf

Top CVEs Actively Exploited By People's Republic of China State-Sponsored Cyber Actors

Open source record

7258bcf352fa4c07d85afa23

Cyber Actors Use Internet of Things Devices as Proxies for Anonymity and Pursuit of Malicious Cyber Activities

Open source record

727bf4770c53f60ac4bf0c93

New Tradecraft of Iranian Cyber Group Aria Sepehr Ayandehsazan aka Emennet Pasargad

Open source record

80d9ef62d337e508062cbe27

Skip to content

Open source record

907c908590f218ea37bf4a97

Revised: Internet-Connected Toys Could Present Privacy and Contact Concerns for Children

Open source record

9550066e70010a432e19c33e

People's Republic of China-Linked Actors Compromise Routers and IoT Devices for Botnet Operations

Open source record

004e15477836566437b67760

Office of Public Affairs | Justice Department Announces Actions to Combat Two Russian State-Sponsored Cyber Criminal Hacking Groups | United States Department of Justice Skip to main content An official website of the United States government Here's how you know Here's how you know Official websites use .gov A .gov website belongs to an official government organization in the United States. Secure

Open source record

01e9abcc28c68df5c0b4e43e

Update on SVR Cyber Operations and Vulnerability Exploitation

Open source record

02c564e5d11e235eccef00f3

New Sandworm malware Cyclops Blink replaces VPNFilter

Open source record

034b6dd4edcdf314784d621e

Unpatched and Outdated Medical Devices Provide Cyber Attack Opportunities

Open source record

0395243c18e95df7d5cb774c

In Real Life (IRL) Com: Violent Subset of The Community (Com) is a Rising Threat to Youth Online — FBI An official website of the United States government. Here's how you know Official websites use .gov A .gov website belongs to an official government organization in the United States. Secure .gov websites use HTTPS A lock ( ) or https:// means you've safely connected to the .gov website. Share se

Open source record

0698638c72fa1363ede20ec4

2021 Trends Show Increased Globalized Threat of Ransomware

Open source record

07e7eb1322d4643ea3b7b3c7

Return to top

Open source record

07e8dad684aa5ddf5f71550d

Motor Vehicles Increasingly Vulnerable to Remote Exploits

Open source record

0910102e922241808c13aeb5

Alert on Cryptocurrency Money Services Businesses — FBI An official website of the United States government. Here's how you know Official websites use .gov A .gov website belongs to an official government organization in the United States. Secure .gov websites use HTTPS A lock ( ) or https:// means you've safely connected to the .gov website. Share sensitive information only on official, secure we

Open source record

CERT-EU campaign / regional advisory intelligence — 20

408489f685ebe344cf418bea

Cyber Security Brief 24-02 - January 2024 Friday, February 02, 2024 12:00:00 PM CET Cyber Security Briefs are monthly executive reports that aim to present an overview of the most relevant developments in cyber security, based exclusively on open sources, with a view to inform political leadership and senior management in its constituency. Additional information on any item in this Brief can be provided upon request. Cyber Security Briefs are TLP:WHITE.

Open source record

9136a85af7dac9f7b449484e

TLR 10 Years

Open source record

a819b39204a06005b3b1daa9

Cyber Brief 25-07 - June 2025 Tuesday, July 01, 2025 05:00:00 PM CEST Cyber Briefs are monthly executive reports that aim to present an overview of the most relevant developments in cyber security, based exclusively on open sources, with a view to inform political leadership and senior management in its constituency. Additional information on any item in this Brief can be provided upon request. Cyber Briefs are TLP:CLEAR.

Open source record

00fcbc2726cc1783631565f5

2021-034: Vulnerabilities in Cisco Products Friday, July 09, 2021 07:29:00 AM CEST On July 7, Cisco released security updates to address several security vulnerabilities. This list includes vulnerabilities rated High affecting Cisco Business Process Automation (BPA) with a CVSS score of 8.8 out of 10 and a vulnerability rated Medium affecting Cisco Adaptive Security Device Manager (ASDM) with a CVSS score of 7.5 out of 10.Vulnerabilities in Cisco Business Process Automation (BPA) could allow an

Open source record

0156a7adb3958cfad7c04e73

2021-041: Critical Vulnerability in Jira Products Friday, July 23, 2021 12:22:00 PM CEST A critical vulnerability (CVE-2020-36239) in many versions of Jira Data Center and Jira Service Management Data Center products can lead to arbitrary code execution.

Open source record

021dad8bb0c4c9076a95ac7d

2017-012: UPDATE! WannaCry Ransomware Campaign Exploiting SMB Vulnerability Monday, May 22, 2017 03:46:00 PM CEST A large ransomware campaign has been observed since Friday, May 12th, 2017. The payload delivered is a variant of ransomware malware called WannaCry. It appears to infect computers through a recent SMB vulnerability in Microsoft Windows operating system (CVE-2017-0145).

Open source record

028690869a5d7895c1925e08

2021-065: Vulnerabilities in VMware Products Thursday, November 25, 2021 09:55:00 AM CET On November 23, VMWare has released the VMSA-2021-0027 advisory that addresses two vulnerabilities in vCenter Server and Cloud Foundation. An attacker could exploit these vulnerabilities to read sensitive files ("CVE-2021-21980" - unauthorised arbitrary file read vulnerability) or to induce the server to make connections to arbitrary destinations ("CVE-2021-22049" - SSRF vulnerability).

Open source record

03b7a54ee5ce9e82f09fe828

Cyber Security Brief 23-09 - August 2023 Monday, September 04, 2023 12:20:00 PM CEST Cyber Security Briefs are monthly executive reports that aim to present an overview of the most relevant developments in cyber security, based exclusively on open sources, with a view to inform political leadership and senior management in its constituency. Additional information on any item in this Brief can be provided upon request. Cyber Security Briefs are TLP:CLEAR.

Open source record

03f275e81a7d188dbbd18cbc

2018-011: Cisco Products Multiple Vulnerabilities Thursday, April 19, 2018 04:36:00 PM CEST On the 17th and 18th of April 2018, Cisco has released several updates to address vulnerabilities affecting multiple products in which a remote attacker can exploit these vulnerabilities to trigger cross site scripting, denial of service, remote code execution, security restriction bypass and sensitive information disclosure on the targeted system.

Open source record

0442e4958da9974386d3aed6

2013-0061: Authenticated Command Injection Vulnerability in Multiple Cisco Content Network and Video Delivery Products Friday, August 09, 2013 01:06:00 PM CEST Multiple Cisco content network and video delivery products contain a vulnerability when they are configured to run in central management mode.

Open source record

04fc97c8f2852a360cdf4afc

2023

Open source record

057fdcd62e3ec018a2633e0f

2024-072: Vulnerabilities in Ivanti EPMM Monday, July 22, 2024 10:34:56 AM CEST On July 17, 2024, Ivanti released a security advisory addressing several vulnerabilities in its EPMM solution (formerly known as MobileIron). These vulnerabilities could lead to remote code execution, authentication bypass, and sensitive information leakage. It is recommended updating as soon as possible.

Open source record

060783a8f0553c4295139910

Cyber Brief 25-04 - March 2025 Wednesday, April 02, 2025 04:00:00 PM CEST Cyber Briefs are monthly executive reports that aim to present an overview of the most relevant developments in cyber security, based exclusively on open sources, with a view to inform political leadership and senior management in its constituency. Additional information on any item in this Brief can be provided upon request. Cyber Briefs are TLP:CLEAR.

Open source record

06398e085df7cb738a141f67

2025-035: High Vulnerability in Cisco IOS and IOS XE Software Friday, September 26, 2025 09:03:31 AM CEST On September 24, 2025, Cisco released a security advisory regarding a high severity vulnerability in the Simple Network Management Protocol (SNMP) subsystem of Cisco IOS Software and Cisco IOS XE Software. The vulnerability is being exploited in the wild. It is recommended updating as soon as possible and conduct a compromise assessment on devices that are exposing SNMP on the Internet. It i

Open source record

07a28d190f41f960bd15cf9a

Cyber Brief - July 2022 Tuesday, August 02, 2022 10:17:00 AM CEST Cyber Briefs are monthly executive reports that aim to present an overview of the most relevant developments in cyber security, based exclusively on open sources, with a view to inform political leadership and senior management in its constituency. Additional information on any item in this Brief can be provided upon request. Cyber Briefs are TLP:WHITE.

Open source record

08af8e105c397ab708b7e1a4

Cyber Brief 24-11 - October 2024 Monday, November 04, 2024 05:00:00 PM CET Cyber Briefs are monthly executive reports that aim to present an overview of the most relevant developments in cyber security, based exclusively on open sources, with a view to inform political leadership and senior management in its constituency. Additional information on any item in this Brief can be provided upon request. Cyber Security Briefs are TLP:CLEAR.

Open source record

0a56d52387d7c2a6a62c3e2a

2020-052: Critical Cisco IOS XR Software Vulnerability Under Attack Wednesday, October 21, 2020 02:46:00 PM CEST Cisco released a warning on the 20th of October regarding the attacks that are actively targeting the CVE-2020-3118 high severity vulnerability found to affect multiple carrier-grade routers that run the company's Cisco IOS XR Software. An advisory for this vulnerability was released by Cisco in the 5th of February. It is related to the Cisco Discovery Protocol implementation for Cisc

Open source record

0d43a014d0bc71366a1007ce

2021-056: Critical Vulnerability in Microsoft Exchange Server Wednesday, October 20, 2021 04:40:00 PM CEST On October 12, Microsoft released in the monthly Patch Tuesday a new batch of patches fixing several vulnerabilities, one of which could lead to remote code execution on certain versions of Microsoft Exchange servers. The vulnerability, identified as "CVE-2021-26427", has a CVSS3 score of 9 out of 10 and could allow an attacker to execute remote code on on-premise exchange servers. Accordin

Open source record

0d95e024a42c3c5aaf0f6269

2018-002: INTEL AMT Security Issue Friday, January 12, 2018 04:33:00 PM CET On January 12th 2018, F-Secure reported a security issue affecting laptops supporting Intel’s Active Management Technology (AMT). The issue allows an attacker with physical access to the laptop to bypass the need to enter credentials, including BIOS and Bitlocker passwords and TPM pins, and to gain remote access for later exploitation.

Open source record

0e8356092fb79e06f765ecc9

2018-019: New attack on WPA/WPA2 using PMKID Wednesday, August 08, 2018 08:53:00 AM CEST On August 4th the researcher Jens Steube published on his website a new method to get a hash which involves the Pre-Shared Key (PSK) of a wifi access point. A successful exploitation of the technique allows an attacker to retrieve the PSK.

Open source record

Europol / EC3 campaign / regional advisory intelligence — 6

7c9f923fb2209b9afc3963b9

Police dismantle prolific ransomware cybercriminal network – The Hague, the Netherlands | Europol You need to enable JavaScript to run this app. Loading application. Please wait.

Open source record

afae6f19a40f7e54a02517fa

Global operation targets NoName057(16) pro-Russian cybercrime network – The offenders targeted Ukraine and supporting countries, including many EU Member States | Europol You need to enable JavaScript to run this app. Loading application. Please wait.

Open source record

c1a6dbe7dad82d4689fb14e8

Cybercrime-as-a-service takedown: 7 arrested – Operation takes down sophisticated criminal network that enabled criminals to commit serious crimes across Europe | Europol You need to enable JavaScript to run this app. Loading application. Please wait.

Open source record

cc48a5b86d652879ecf009a5

Criminal phishing network resulting in over 480 000 victims worldwide busted in Spain and Latin America – First ever joint operation between Europol and the Specialised Cybercrime Centre of Ameripol | Europol You need to enable JavaScript to run this app. Loading application. Please wait.

Open source record

e29d41d3cc410f6b18aa643e

GOZNYM MALWARE: CYBERCRIMINAL NETWORK DISMANTLED IN INTERNATIONAL OPERATION | Europol You need to enable JavaScript to run this app. Loading application. Please wait.

Open source record

ece2d4b920b04ded952bd339

Hook, line and sinker: cybercrime network phishing bank credentials arrested in Romania – The criminal group sent phishing text messages and emails to get access to victims’ bank accounts | Europol You need to enable JavaScript to run this app. Loading application. Please wait.

Open source record

Admin : 1234

Public sources document default credentials associated with this vendor or product. No login attempt was performed.

Source: scantide_default_credentials

NTCIP Message Sign Software

Vendor: · Model: NTCIP Message Sign Software

unknown

42 campaign/advisory records

FBI / IC3 campaign / regional advisory intelligence — 20

25091f9b0f59b31c2bd98141

Iranian State Actors Conduct Cyber Operations Against the Government of Albania

Open source record

2becd729f39ba0f44afaf582

People's Republic of China-Linked Cyber Actors Hide in Router Firmware

Open source record

57ff43de10c50b891ba950cf

Top CVEs Actively Exploited By People's Republic of China State-Sponsored Cyber Actors

Open source record

1cabacddc320508fb266e21c

Cyber Actors Target K-12 Distance Learning Education to Cause Disruptions and Steal Data

Open source record

23ecec0c3c508513e5d9a1bb

Russian State-Sponsored Cyber Actors Gain Network Access by Exploiting Default Multifactor Authentication Protocols and "PrintNightmare" Vulnerability

Open source record

367ff75850d5d58c73369f33

Phishing Guidance: Stopping the Attack Cycle at Phase One

Open source record

47a9dfe0663bec84d0f159e7

Privacy Policy

Open source record

93300cf254ac4337846c793d

Iranian Cyber Actors Targeting Personal Accounts to Support Operations

Open source record

15370f46fbce26b9a742d001

Criminal Actors Use Business Email Compromise to Steal Large Shipments of Food Products and Ingredients

Open source record

47bbd1d17f59c7f340bfc49f

#StopRansomware: Cuba Ransomware

Open source record

64af8dcd0e3c1ba4ef460821

2025

Open source record

725c462d3770cd1d7ac5d167

Skip to content

Open source record

8252636e4f1918a10e064cb1

File A Complaint

Open source record

9550066e70010a432e19c33e

People's Republic of China-Linked Actors Compromise Routers and IoT Devices for Botnet Operations

Open source record

FBI_IC3-260826.pdf

TLP:CLEAR Co-Authored by: ID: JCSA-20260826-01 China-Linked Hacking Group QTFY Targets Military and Critical Infrastructure with Malicious Distributed Systems To report suspicious or criminal activity related to information found in this jo

Open source record

e20824ffecee41239349de94

Office of Public Affairs | Two U.S. Nationals Sentenced for Facilitating Fraudulent Remote Information Technology Worker Schemes to Generate Revenue for the Democratic People’s Republic of Korea | United States Department of Justice Skip to main content An official website of the United States government Here's how you know Here's how you know Official websites use .gov A .gov website belongs to a

Open source record

0698638c72fa1363ede20ec4

2021 Trends Show Increased Globalized Threat of Ransomware

Open source record

11c95addfb97b7069dc5873a

Compromise of Microsoft Exchange Server

Open source record

1425b84a538a19f525596083

Tech Support Scam

Open source record

22444a6e216640bfd70dc549

Spear-Phishing Attack Directing Recipients to Download a Fake Windows Application Impersonating a Financial Institution

Open source record

CERT-EU campaign / regional advisory intelligence — 20

62bf27692784636cef85c083

2021-067: UPDATE: Java Logging Package RCE Vulnerability Friday, December 10, 2021 12:35:00 PM CET On December 9th, information about a critical unauthenticated RCE vulnerability (CVE-2021-44228) that is affecting the well-known Java logging package Log4j used by many popular applications and web services was tweeted along with a proof-of-concept (PoC) posted on GitHub. This vulnerability could allow the attacker a full control of the affected server, if a user-controlled string is logged. Since

Open source record

6c02dd9198476af5eb61710d

2019-007: UPDATE: Operation ShadowHammer – Compromised ASUS Computers Tuesday, March 26, 2019 12:17:00 PM CET In January 2019, Kaspersky has discovered a supply chain attack that affects ASUS computers. Dubbed Operation ShadowHammer, the operation took place from June to November 2018. It is similar to other supply chain attacks on Netsarang and CCleaner. Around 500 thousands of computers could have been potentially impacted, although the malware seems to have been only targeting a few hundred (

Open source record

03f275e81a7d188dbbd18cbc

2018-011: Cisco Products Multiple Vulnerabilities Thursday, April 19, 2018 04:36:00 PM CEST On the 17th and 18th of April 2018, Cisco has released several updates to address vulnerabilities affecting multiple products in which a remote attacker can exploit these vulnerabilities to trigger cross site scripting, denial of service, remote code execution, security restriction bypass and sensitive information disclosure on the targeted system.

Open source record

1bdf57eef3573a4cede87a88

2022-003: UPDATE: New Critical Vulnerabilities in Microsoft Products Friday, January 14, 2022 05:26:00 PM CET On the 11th of January 2022, Microsoft released a software update to mitigate several vulnerabilities that affect many of its products. Few of them could lead to remote code execution on certain versions of Microsoft Windows and Server, Microsoft Exchange Servers, and Microsoft Office, Word, Excel and Sharepoint.No active exploitation of these vulnerabilities is known yet, however, regar

Open source record

2680cc37ee8f65e8e40e6ae1

Cyber Brief 24-05 - April 2024 Thursday, May 02, 2024 06:00:00 PM CEST Cyber Briefs are monthly executive reports that aim to present an overview of the most relevant developments in cyber security, based exclusively on open sources, with a view to inform political leadership and senior management in its constituency. Additional information on any item in this Brief can be provided upon request. Cyber Security Briefs are TLP:CLEAR.

Open source record

3238a7f05b26fa25f81772ea

2023-062: Cisco Remote Access VPN Vulnerability Monday, September 11, 2023 05:04:13 PM CEST On July 12, 2023, Cisco released an advisory to address a vulnerability in the remote access VPN feature of Cisco Adaptive Security Appliance (ASA) and Cisco Firepower Threat Defence (FTD) software. It could allow an unauthenticated, remote attacker to conduct a brute force attack in an attempt to identify valid username and password combinations or an authenticated, remote attacker to establish a client-

Open source record

37e2b0b3f3643adf445a9c1b

2020-043: Critical Vulnerabilities in Cisco Products Thursday, September 03, 2020 01:35:00 PM CEST On 29th of August and on 2nd of September, Cisco released several security advisories, updates, and workarounds to address security vulnerabilities including five high severity vulnerabilities, and one critical:* CVE-2020-3495 - Arbitrary Code Execution - CVSS score 9.9 (critical)* CVE-2020-3566 - Memory Exhaustion - CVSS score 8.6 (high)* CVE-2020-3530 - Authenticated User Privilege Escalation - C

Open source record

408489f685ebe344cf418bea

Cyber Security Brief 24-02 - January 2024 Friday, February 02, 2024 12:00:00 PM CET Cyber Security Briefs are monthly executive reports that aim to present an overview of the most relevant developments in cyber security, based exclusively on open sources, with a view to inform political leadership and senior management in its constituency. Additional information on any item in this Brief can be provided upon request. Cyber Security Briefs are TLP:WHITE.

Open source record

45cfa634d813d45a823f8613

2021-010: Severe Vulnerability in Cisco IOS XR Software Friday, February 12, 2021 11:11:00 AM CET Cisco has published an advisory about severe vulnerability affecting Cisco Cisco IOS XR Software. These vulnerabilities could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. Cisco is not aware of any malicious exploit in the wild.

Open source record

4b2f6546cbbb3d9a5f2ed1c5

2016

Open source record

5a84a2d6ff686f88874206e7

Cyber Brief 24-06 - May 2024 Monday, June 03, 2024 06:00:00 PM CEST Cyber Briefs are monthly executive reports that aim to present an overview of the most relevant developments in cyber security, based exclusively on open sources, with a view to inform political leadership and senior management in its constituency. Additional information on any item in this Brief can be provided upon request. Cyber Security Briefs are TLP:CLEAR.

Open source record

7f01323a1f16d23e75cb03c7

2024-037: Critical Vulnerability in PAN-OS software Monday, April 29, 2024 12:45:35 PM CEST On April 12, 2024, Palo Alto Networks released a security advisory for a critical vulnerability affecting a feature of PAN-OS software. This vulnerability allows an unauthenticated remote attacker to execute arbitrary code as root on the affected device. This vulnerability is being exploited in the wild, and proof-of-concepts have been publicly disclosed by third parties. The vendor is gradually releasing

Open source record

81bbb26dce2beb58d272783c

2021-008: Critical Vulnerabilities in SolarWinds Orion Platform Thursday, February 04, 2021 09:26:00 AM CET Three critical vulnerabilities have been found in SolarWinds Orion platform. Two of them could be exploitable by a local attacker and a third one, the most severe of all, allows a remote, unprivileged actor to take control of the platform. These vulnerabilities are separate and not directly related to the earlier reported Sunburst attack.

Open source record

84ab03c69cbb64c80bae16db

2021

Open source record

87a7e620239146883ecd0751

Cyber Brief 25-03 - February 2025 Monday, March 03, 2025 05:00:00 PM CET Cyber Briefs are monthly executive reports that aim to present an overview of the most relevant developments in cyber security, based exclusively on open sources, with a view to inform political leadership and senior management in its constituency. Additional information on any item in this Brief can be provided upon request. Cyber Briefs are TLP:CLEAR.

Open source record

8b81a463e5fe32eccbc5ed71

2017-021: KRACK - Key Reinstallation Attacks: Breaking WPA2 Tuesday, October 17, 2017 04:27:00 PM CEST Researchers in the KU Leuven University have discovered a serious weaknesses in WPA2, a protocol that secures all modern protected Wi-Fi networks. An attacker within the range of the Wi-Fi of the victim can exploit these weaknesses using key reinstallation attack (KRACK). Attackers can use this attack to read information that was previously assumed to be safely encrypted. The weakness was found

Open source record

8c53390a64e1fa5afec77cf6

2020-059: Cisco Jabber Desktop and Mobile Client Software Vulnerabilities Monday, December 14, 2020 11:47:00 AM CET On 10th of December, Cisco released an advisory about multiple vulnerabilities in Cisco Jabber for Windows, Jabber for MacOS, and Jabber for mobile platforms. These vulnerabilities could allow an attacker to execute arbitrary programs on the underlying operating system (OS) with elevated privileges or gain access to sensitive information.

Open source record

9c97832c4deff24c44466de4

Cyber Security Brief 23-08 - July 2023 Tuesday, August 01, 2023 08:30:00 PM CEST Cyber Security Briefs are monthly executive reports that aim to present an overview of the most relevant developments in cyber security, based exclusively on open sources, with a view to inform political leadership and senior management in its constituency. Additional information on any item in this Brief can be provided upon request. Cyber Security Briefs are TLP:CLEAR.

Open source record

164e9b5c225d1223c305e30c

Cyber Brief 25-11 - October 2025 Saturday, November 01, 2025 04:00:00 PM CET Cyber Briefs are monthly executive reports that aim to present an overview of the most relevant developments in cyber security, based exclusively on open sources, with a view to inform political leadership and senior management in its constituency. Additional information on any item in this Brief can be provided upon request. Cyber Briefs are TLP:CLEAR.

Open source record

81584383d86765a515d350e9

Cyber Security Brief 23-06 - May 2023 Thursday, June 01, 2023 04:20:00 PM CEST Cyber Security Briefs are monthly executive reports that aim to present an overview of the most relevant developments in cyber security, based exclusively on open sources, with a view to inform political leadership and senior management in its constituency. Additional information on any item in this Brief can be provided upon request. Cyber Security Briefs are TLP:CLEAR.

Open source record

Europol / EC3 campaign / regional advisory intelligence — 2

3184bc82d43d8086e673ca9d

Orange and Europol sign a memorandum of understanding to fight cybercrime more effectively | Europol You need to enable JavaScript to run this app. Loading application. Please wait.

Open source record

3a423a0bb8f22c870762610b

Romanian duo arrested for running malware encryption service to bypass antivirus software | Europol You need to enable JavaScript to run this app. Loading application. Please wait.

Open source record

[no username] : NTCIP

Public sources document default credentials associated with this vendor or product. No login attempt was performed.

Source: scantide_default_credentials

References

http://www.scribd.com/doc/68216572/Wanco-Users-Guide-Ntcip-Message-Sign-Software-Dec-2004

EMC

Vendor:

unknown

3 campaign/advisory records

CERT-EU campaign / regional advisory intelligence — 1

5dff998bf58348d5a185275a

2012-0031: RSA SecurID Software Token Converter buffer overflow vulnerability Thursday, March 08, 2012 10:13:00 AM CET CVE-2012-0397 Buffer overflow in EMC RSA SecurID Software Token Converter before 2.6.1 allows remote attackers to cause a denial of service or possibly execute arbitrary code via unspecified vectors.[1][2]

Open source record

JVN / Japan campaign / regional advisory intelligence — 2

JVNDB-2010-000019

WebSAM DeploymentManager vulnerable to denial of service

Published 2010-05-17T16:42:14+09:00

Open source record

JVNDB-2011-000102

Multiple vulnerabilities in products that use the Preboot Execution Environment (PXE) SDK

Published 2011-12-15T16:26:34+09:00

Open source record

backuponly : [blank]

Public sources document default credentials associated with this vendor or product. No login attempt was performed.

Source: scantide_default_credentials

SNMP

snmp / 161

19 campaign/advisory records

FBI / IC3 campaign / regional advisory intelligence — 10

1222c75ac30b8499f3f6f137

Russian Government Cyber Actors Targeting Networking Devices, Critical Infrastructure

Open source record

427b50ed882d3c9a0378d316

2023 Top Routinely Exploited Vulnerabilities

Open source record

468ca719334549d0f6bad717

#StopRansomware: Akira Ransomware

Open source record

7552923fc476335081e148e7

Enhanced Visibility and Hardening Guidance for Communications Infrastructure

Open source record

9883cca01b447c711eb32c12

#StopRansomware: Black Basta

Open source record

FBI_IC3-260713.pdf

Joint Cybersecurity Advisory TLP:CLEAR Improve Router Hygiene to Protect Against Russian State-Sponsored Targeting Russian Government-Sponsored Activity Targets Poorly Configured and Vulnerable Devices Across Critical Sectors Executive summ

Open source record

FBI_IC3-260819.pdf

Joint Cybersecurity Advisory TLP:CLEAR Defending Against an Active Threat to Siemens S7 Series PLCs Executive summary Note: This advisory relates to an active threat to Siemens S7 Series programmable logic controllers (PLCs). However, ongoi

Open source record

b4284e883c8cee8a243ba437

RagnarLocker Ransomware Indicators of Compromise

Open source record

d620cb9876fb5bb5e7fbfb1d

Russian Government Cyber Actors Targeting Networking Devices, Critical Infrastructure — FBI An official website of the United States government. Here's how you know Official websites use .gov A .gov website belongs to an official government organization in the United States. Secure .gov websites use HTTPS A lock ( ) or https:// means you've safely connected to the .gov website. Share sensitive inf

Open source record

ea8bc5e2980b7954c0f0d1c0

APT28 exploits known vulnerability to carry out reconnaissance of routers and deploy malware

Open source record

CERT-EU campaign / regional advisory intelligence — 6

06398e085df7cb738a141f67

2025-035: High Vulnerability in Cisco IOS and IOS XE Software Friday, September 26, 2025 09:03:31 AM CEST On September 24, 2025, Cisco released a security advisory regarding a high severity vulnerability in the Simple Network Management Protocol (SNMP) subsystem of Cisco IOS Software and Cisco IOS XE Software. The vulnerability is being exploited in the wild. It is recommended updating as soon as possible and conduct a compromise assessment on devices that are exposing SNMP on the Internet. It i

Open source record

4d991b0325eb37eb82ddf86d

2017

Open source record

90309c5f8b083b5e93c5d29a

2025

Open source record

9495a422f3f1f0644a3692de

2017-015: Cisco SNMP Remote Code Execution Vulnerabilities Friday, June 30, 2017 02:32:00 PM CEST The Simple Network Management Protocol (SNMP) subsystem of Cisco IOS and IOS XE Software contains multiple vulnerabilities that could allow an authenticated, attacker to remotely execute code on an affected system or cause an affected system to reload. An attacker could exploit these vulnerabilities by sending a crafted SNMP packet to an affected system via IPv4 or IPv6.

Open source record

a3669f25439ea71ed1983d8c

2012-0138: Samsung and some Dell printers, Remote Disclosure of Information. Thursday, December 06, 2012 10:06:00 AM CET Samsung printers and some Dell printers manufactured for Samsung contain and snmp account that could be used to get privileged access to the devices.

Open source record

decebe71a58113ba6e5f1c3b

2012

Open source record

JVN / Japan campaign / regional advisory intelligence — 3

JVNDB-2009-001968

GIF File Processing Denial of Service Vulnerability in Multiple JP1 Products

Published 2009-09-14T10:31:53+09:00

Open source record

JVNDB-2006-000983

JP1 Request Handling Denial of Service Vulnerabilities

Published 2008-05-21T00:00:00+09:00

Open source record

JVNDB-2024-000068

JP1/Extensible SNMP Agent fails to restrict access permissions

Published 2024-07-03T14:57:10+09:00

Open source record

[no username] : proxy

Known default or weak credential handling definition. Verify configuration; no login attempt was performed.

Source: changeme

References

CT-560

Vendor: · Model: CT-560

unknown

admin : admin

Public sources document default credentials associated with this vendor or product. No login attempt was performed.

Source: scantide_default_credentials

WHR-G54S

Vendor: · Model: WHR-G54S

unknown

Affected products and hardware

Official NVD applicability identities associated with the CVEs matched to this credential/device record.

whr-g54s-ni firmware whr-g54s firmware

1 device-risk CWE signal 4 CVEs · highest 8.8 2 via NVD applicability 21 campaign/advisory records

Device security weakness intelligence

Matched CVEs for this exact product/device carry CWE classifications related to authentication, authorization, sensitive-data exposure, hard-coded cryptographic keys or firmware maintainability. These signals are independent from documented default-password records.

Authentication risk

Authentication bypass CWE-287

Evidence comes from 1 matched CVE.

CVEs matching this vendor/product — 4 Highest CVSS 8.8

CVSS 8.8 NVD applicability · 2 criteria EPSS 0.4% EUVD 1 GHSA 1

Authentication bypass vulnerability in multiple Buffalo network devices allows a network-adjacent attacker to bypass authentication and access the device. The affected products/versions are as follows: WCR-300 firmware Ver. 1.87 and earlier, WHR-HP-G300N firmware Ver. 2.00 and earlier, WHR-HP-GN firmware Ver. 1.87 and earlier, WPL-05G300 firmware Ver. 1.88 and earlier, WRM-D2133HP firmware Ver. 2.85 and earlier, WRM-D2133HS firmware Ver. 2.96 and earlier, WTR-M2133HP firmware Ver. 2.85 and earlier, WTR-M2133HS firmware Ver. 2.96 and earlier, WXR-1900DHP firmware Ver. 2.50 and earlier, WXR-1900DHP2 firmware Ver. 2.59 and earlier, WXR-1900DHP3 firmware Ver. 2.63 and earlier, WXR-5950AX12 firmware Ver. 3.40 and earlier, WXR-6000AX12B firmware Ver. 3.40 and earlier, WXR-6000AX12S firmware Ver. 3.40 and earlier, WZR-300HP firmware Ver. 2.00 and earlier, WZR-450HP firmware Ver. 2.00 and earlier, WZR-600DHP firmware Ver. 2.00 and earlier, WZR-900DHP firmware Ver. 1.15 and earlier, WZR-1750DHP2 firmware Ver. 2.31 and earlier, WZR-HP-AG300H firmware Ver. 1.76 and earlier, WZR-HP-G302H firmware Ver. 1.86 and earlier, WEM-1266 firmware Ver. 2.85 and earlier, WEM-1266WP firmware Ver. 2.85 and earlier, WLAE-AG300N firmware Ver. 1.86 and earlier, FS-600DHP firmware Ver. 3.40 and earlier, FS-G300N firmware Ver. 3.14 and earlier, FS-HP-G300N firmware Ver. 3.33 and earlier, FS-R600DHP firmware Ver. 3.40 and earlier, BHR-4GRV firmware Ver. 2.00 and earlier, DWR-HP-G300NH firmware Ver. 1.84 and earlier, DWR-PG firmware Ver. 1.83 and earlier, HW-450HP-ZWE firmware Ver. 2.00 and earlier, WER-A54G54 firmware Ver. 1.43 and earlier, WER-AG54 firmware Ver. 1.43 and earlier, WER-AM54G54 firmware Ver. 1.43 and earlier, WER-AMG54 firmware Ver. 1.43 and earlier, WHR-300 firmware Ver. 2.00 and earlier, WHR-300HP firmware Ver. 2.00 and earlier, WHR-AM54G54 firmware Ver. 1.43 and earlier, WHR-AMG54 firmware Ver. 1.43 and earlier, WHR-AMPG firmware Ver. 1.52 and earlier, WHR-G firmware Ver. 1.49 and earlier, WHR-G300N firmware Ver. 1.65 and earlier, WHR-G301N firmware Ver. 1.87 and earlier, WHR-G54S firmware Ver. 1.43 and earlier, WHR-G54S-NI firmware Ver. 1.24 and earlier, WHR-HP-AMPG firmware Ver. 1.43 and earlier, WHR-HP-G firmware Ver. 1.49 and earlier, WHR-HP-G54 firmware Ver. 1.43 and earlier, WLI-H4-D600 firmware Ver. 1.88 and earlier, WS024BF firmware Ver. 1.60 and earlier, WS024BF-NW firmware Ver. 1.60 and earlier, WXR-1750DHP firmware Ver. 2.60 and earlier, WXR-1750DHP2 firmware Ver. 2.60 and earlier, WZR-1166DHP firmware Ver. 2.18 and earlier, WZR-1166DHP2 firmware Ver. 2.18 and earlier, WZR-1750DHP firmware Ver. 2.30 and earlier, WZR2-G300N firmware Ver. 1.55 and earlier, WZR-450HP-CWT firmware Ver. 2.00 and earlier, WZR-450HP-UB firmware Ver. 2.00 and earlier, WZR-600DHP2 firmware Ver. 1.15 and earlier, WZR-600DHP3 firmware Ver. 2.19 and earlier, WZR-900DHP2 firmware Ver. 2.19 and earlier, WZR-AGL300NH firmware Ver. 1.55 and earlier, WZR-AMPG144NH firmware Ver. 1.49 and earlier, WZR-AMPG300NH firmware Ver. 1.51 and earlier, WZR-D1100H firmware Ver. 2.00 and earlier, WZR-G144N firmware Ver. 1.48 and earlier, WZR-G144NH firmware Ver. 1.48 and earlier, WZR-HP-G300NH firmware Ver. 1.84 and earlier, WZR-HP-G301NH firmware Ver. 1.84 and earlier, WZR-HP-G450H firmware Ver. 1.90 and earlier, WZR-S1750DHP firmware Ver. 2.32 and earlier, WZR-S600DHP firmware Ver. 2.19 and earlier, and WZR-S900DHP firmware Ver. 2.19 and earlier.

Published 2022-12-07T00:00:00.000Z Updated 2025-04-23T16:06:14.667Z CWE-287

Affected: whr-g54s-ni firmware, whr-g54s firmware

Authentication bypass CWE-287

CVSS 6.8 NVD applicability · 2 criteria EPSS 0.3% EUVD 1 Vulnrichment GHSA 1

Hidden functionality vulnerability in multiple Buffalo network devices allows a network-adjacent attacker with an administrative privilege to execute an arbitrary OS command. The affected products/versions are as follows: WCR-300 firmware Ver. 1.87 and earlier, WHR-HP-G300N firmware Ver. 2.00 and earlier, WHR-HP-GN firmware Ver. 1.87 and earlier, WPL-05G300 firmware Ver. 1.88 and earlier, WZR-300HP firmware Ver. 2.00 and earlier, WZR-450HP firmware Ver. 2.00 and earlier, WZR-600DHP firmware Ver. 2.00 and earlier, WZR-900DHP firmware Ver. 1.15 and earlier, WZR-HP-AG300H firmware Ver. 1.76 and earlier, WZR-HP-G302H firmware Ver. 1.86 and earlier, WLAE-AG300N firmware Ver. 1.86 and earlier, FS-600DHP firmware Ver. 3.40 and earlier, FS-G300N firmware Ver. 3.14 and earlier, FS-HP-G300N firmware Ver. 3.33 and earlier, FS-R600DHP firmware Ver. 3.40 and earlier, BHR-4GRV firmware Ver. 2.00 and earlier, DWR-HP-G300NH firmware Ver. 1.84 and earlier, DWR-PG firmware Ver. 1.83 and earlier, HW-450HP-ZWE firmware Ver. 2.00 and earlier, WER-A54G54 firmware Ver. 1.43 and earlier, WER-AG54 firmware Ver. 1.43 and earlier, WER-AM54G54 firmware Ver. 1.43 and earlier, WER-AMG54 firmware Ver. 1.43 and earlier, WHR-300 firmware Ver. 2.00 and earlier, WHR-300HP firmware Ver. 2.00 and earlier, WHR-AM54G54 firmware Ver. 1.43 and earlier, WHR-AMG54 firmware Ver. 1.43 and earlier, WHR-AMPG firmware Ver. 1.52 and earlier, WHR-G firmware Ver. 1.49 and earlier, WHR-G300N firmware Ver. 1.65 and earlier, WHR-G301N firmware Ver. 1.87 and earlier, WHR-G54S firmware Ver. 1.43 and earlier, WHR-G54S-NI firmware Ver. 1.24 and earlier, WHR-HP-AMPG firmware Ver. 1.43 and earlier, WHR-HP-G firmware Ver. 1.49 and earlier, WHR-HP-G54 firmware Ver. 1.43 and earlier, WLI-H4-D600 firmware Ver. 1.88 and earlier, WLI-TX4-AG300N firmware Ver. 1.53 and earlier, WS024BF firmware Ver. 1.60 and earlier, WS024BF-NW firmware Ver. 1.60 and earlier, WZR2-G108 firmware Ver. 1.33 and earlier, WZR2-G300N firmware Ver. 1.55 and earlier, WZR-450HP-CWT firmware Ver. 2.00 and earlier, WZR-450HP-UB firmware Ver. 2.00 and earlier, WZR-600DHP2 firmware Ver. 1.15 and earlier, WZR-AGL300NH firmware Ver. 1.55 and earlier, WZR-AMPG144NH firmware Ver. 1.49 and earlier, WZR-AMPG300NH firmware Ver. 1.51 and earlier, WZR-D1100H firmware Ver. 2.00 and earlier, WZR-G144N firmware Ver. 1.48 and earlier, WZR-G144NH firmware Ver. 1.48 and earlier, WZR-HP-G300NH firmware Ver. 1.84 and earlier, WZR-HP-G301NH firmware Ver. 1.84 and earlier, and WZR-HP-G450H firmware Ver. 1.90 and earlier.

Published 2022-12-07T00:00:00.000Z Updated 2025-04-23T16:07:13.452Z

Affected: whr-g54s-ni firmware, whr-g54s firmware

EPSS 0.8% EUVD 1 GHSA 1

Cross-site scripting vulnerability in WHR-G54S firmware 1.43 and earlier allows remote attackers to inject arbitrary script via a specially crafted page.

Published 2020-09-18T05:05:24.000Z Updated 2024-08-04T08:30:24.615Z

EPSS 1.1% EUVD 1 GHSA 1

Directory traversal vulnerability in WHR-G54S firmware 1.43 and earlier allows an attacker to access sensitive information such as setting values via unspecified vectors.

Published 2020-09-18T05:05:24.000Z Updated 2024-08-04T08:30:24.565Z

FBI / IC3 campaign / regional advisory intelligence — 1

57ff43de10c50b891ba950cf

Top CVEs Actively Exploited By People's Republic of China State-Sponsored Cyber Actors

Open source record

JVN / Japan campaign / regional advisory intelligence — 20

JVNDB-2005-000765

Buffalo router configuration management interface vulnerable to remote access and password leakage

Published 2008-05-21T00:00:00+09:00

Open source record

JVNDB-2011-000025

Multiple Buffalo routers vulnerable to cross-site request forgery

Published 2011-05-11T08:37:20+09:00

Open source record

JVNDB-2017-000244

Multiple vulnerabilities in multiple Buffalo broadband routers

Published 2017-12-01T16:17:55+09:00

Open source record

JVNDB-2020-000063

Multiple vulnerabilities in Buffalo AirStation WHR-G54S

Published 2020-09-11T15:57:07+09:00

Open source record

JVNDB-2022-002444

Multiple vulnerabilities in Buffalo network devices

Published 2022-10-05T17:44:41+09:00

Open source record

JVNDB-2026-000046

Multiple vulnerabilities in BUFFALO Wi-Fi routers

Published 2026-03-27T17:18:58+09:00

Open source record

JVNDB-2006-000665

TeraStation HD-HTGL series cross-site request forgery vulnerability

Published 2008-05-21T00:00:00+09:00

Open source record

JVNDB-2007-000875

AirStation series and BroadStation series vulnerable to cross-site request forgery

Published 2008-05-21T00:00:00+09:00

Open source record

JVNDB-2015-000085

Multiple Buffalo wireless LAN routers vulnerable to OS command injection

Published 2015-06-05T14:16:12+09:00

Open source record

JVNDB-2016-000005

Multiple Buffalo network devices vulnerable to cross-site request forgery

Published 2016-01-22T14:36:27+09:00

Open source record

JVNDB-2016-000006

Multiple Buffalo network devices vulnerable to cross-site scripting

Published 2016-01-22T14:36:28+09:00

Open source record

JVNDB-2016-000086

Multiple Buffalo wireless LAN routers vulnerable to directory traversal

Published 2016-05-27T13:53:53+09:00

Open source record

JVNDB-2016-000087

Multiple Buffalo wireless LAN routers vulnerable to information disclosure

Published 2016-05-27T13:53:29+09:00

Open source record

JVNDB-2016-000236

WNC01WH vulnerable to denial-of-service (DoS)

Published 2016-12-02T14:43:51+09:00

Open source record

JVNDB-2016-000237

WNC01WH vulnerable to cross-site request forgery

Published 2016-12-02T14:43:52+09:00

Open source record

JVNDB-2016-000238

WNC01WH vulnerable to stored cross-site scripting

Published 2016-12-02T14:43:54+09:00

Open source record

JVNDB-2016-000239

WNC01WH vulnerable to enabling debug option

Published 2016-12-02T14:44:34+09:00

Open source record

JVNDB-2016-000240

WNC01WH vulnerable to directory traversal due to an issue in processing commands

Published 2016-12-02T14:45:34+09:00

Open source record

JVNDB-2016-000241

WNC01WH vulnerable to directory traversal due to an issue in processing POST request

Published 2016-12-02T14:46:04+09:00

Open source record

JVNDB-2017-000072

WNC01WH vulnerable to OS command injection

Published 2017-04-21T13:44:43+09:00

Open source record

root : [blank]

Public sources document default credentials associated with this vendor or product. No login attempt was performed.

Source: scantide_default_credentials

McData

Vendor:

unknown

Administrator : password

Public sources document default credentials associated with this vendor or product. No login attempt was performed.

Source: scantide_default_credentials

References

https://github.com/danielmiessler/SecLists/blob/master/Passwords/Default-Credentials/default-passwords.csv

EA9500

Vendor: · Model: EA9500

unknown

1 campaign/advisory record

JVN / Japan campaign / regional advisory intelligence — 1

JVNDB-2011-000007

Cisco Linksys WRT54GC vulnerable to buffer overflow

Published 2011-01-21T18:22:22+09:00

Open source record

admin : admin

Public sources document default credentials associated with this vendor or product. No login attempt was performed.

Source: scantide_default_credentials

Router OS

Vendor: · Model: Router OS

telnet

40 campaign/advisory records

FBI / IC3 campaign / regional advisory intelligence — 20

9550066e70010a432e19c33e

People's Republic of China-Linked Actors Compromise Routers and IoT Devices for Botnet Operations

Open source record

FBI_IC3-260826.pdf

TLP:CLEAR Co-Authored by: ID: JCSA-20260826-01 China-Linked Hacking Group QTFY Targets Military and Critical Infrastructure with Malicious Distributed Systems To report suspicious or criminal activity related to information found in this jo

Open source record

01e9abcc28c68df5c0b4e43e

Update on SVR Cyber Operations and Vulnerability Exploitation

Open source record

1222c75ac30b8499f3f6f137

Russian Government Cyber Actors Targeting Networking Devices, Critical Infrastructure

Open source record

128e2c843960ddb289e6118e

Skip to content

Open source record

221b0868c40f7ad490c24d12

Russian Foreign Intelligence Service (SVR) Cyber Operations: Trends and Best Practices for Network Defenders

Open source record

22d54aba1c3e6e05a9d1d8d1

Common Internet of Things Devices May Expose Consumers to Cyber Exploitation

Open source record

23ecec0c3c508513e5d9a1bb

Russian State-Sponsored Cyber Actors Gain Network Access by Exploiting Default Multifactor Authentication Protocols and "PrintNightmare" Vulnerability

Open source record

244ac90198cda6caf0a3bfaa

Industry Alerts

Open source record

2738eef090f1649b23ee77e9

File A Complaint

Open source record

2becd729f39ba0f44afaf582

People's Republic of China-Linked Cyber Actors Hide in Router Firmware

Open source record

2e1c5ab51970d6ee127387c6

An APT Group Exploiting a 0-day in FatPipe WARP, MPVPN, and IPVPN Software

Open source record

478abf40a7ddc554a6378000

Return to top

Open source record

5674821068214cf1c524ebc9

File A Complaint

Open source record

60ac9b6721ef743cc70dcf29

Darkside Ransomware: Best Practices for Preventing Business Disruption from Ransomware Attacks

Open source record

64570c7afe043dabcbbfd9cf

Indicators of Compromise Associated with OnePercent Group Ransomware

Open source record

651b83264e418537fc08a7de

2023

Open source record

6b28046c1a565e2f9aae0f0b

File A Complaint

Open source record

6ba2b608dd679192fd4b5063

Cybercriminal Proxy Services Exploiting End-of-Life Routers — FBI An official website of the United States government. Here's how you know Official websites use .gov A .gov website belongs to an official government organization in the United States. Secure .gov websites use HTTPS A lock ( ) or https:// means you've safely connected to the .gov website. Share sensitive information only on official,

Open source record

7552923fc476335081e148e7

Enhanced Visibility and Hardening Guidance for Communications Infrastructure

Open source record

CERT-EU campaign / regional advisory intelligence — 20

0463bc1aca415ae34bacd02a

2021-009: Critical Vulnerabilities in Cisco Products Thursday, February 04, 2021 09:35:00 PM CET Cisco has published an advisory about several vulnerabilities affecting various Cisco Products. These vulnerabilities could lead to remote code execution, privilege escalation, directory traversal, file overwrite or denial of service. While Cisco is not aware of any malicious exploit in the wild, it is highly recommended to patch the affected products.

Open source record

07f93ac177a174d99635789b

2020-036: Critical Cisco Vulnerabilities Thursday, July 16, 2020 12:06:00 PM CEST Cisco released 31 Security Advisories for vulnerabilities affecting its products. Five of them are rated critical with CVSS Score 9.8. In particular, critical vulnerabilities affect: telnet service of firewall routers (CVE-2020-3330), web-based management interface of routers (CVE-2020-3323, CVE-2020-3144, and CVE-2020-3331), and web management interface of Cisco Prime License Manager (PLM) software (CVE-2020-3140)

Open source record

08c9ebf0229710879177a16f

2025-041: Critical Security Vulnerability in React Server Components Thursday, December 04, 2025 02:50:51 PM CET On December 3, 2025, the React Team publicly disclosed a critical security vulnerability affecting React Server Components (RSC) and related packages. The vulnerability allows for unauthenticated remote code execution (RCE) via maliciously crafted HTTP requests. It is recommended to update all affected component packages and any frameworks that integrate them.

Open source record

0a56d52387d7c2a6a62c3e2a

2020-052: Critical Cisco IOS XR Software Vulnerability Under Attack Wednesday, October 21, 2020 02:46:00 PM CEST Cisco released a warning on the 20th of October regarding the attacks that are actively targeting the CVE-2020-3118 high severity vulnerability found to affect multiple carrier-grade routers that run the company's Cisco IOS XR Software. An advisory for this vulnerability was released by Cisco in the 5th of February. It is related to the Cisco Discovery Protocol implementation for Cisc

Open source record

21958a31673113629cf825ed

2014-028: Cisco Small Business Router Password Disclosure Vulnerability Tuesday, March 11, 2014 11:24:00 AM CET A vulnerability in the web management interface of the Cisco RV110W Wireless-N VPN Firewall, the Cisco RV215W Wireless-N VPN Router, and the Cisco CVR100W Wireless-N VPN Router could allow an unauthenticated, remote attacker to gain administrative-level access to the web management interface of the affected device.

Open source record

2478e8aca48921497bf1e2c7

Cyber Security Brief 23-10 - September 2023 Wednesday, October 04, 2023 10:50:00 AM CEST Cyber Security Briefs are monthly executive reports that aim to present an overview of the most relevant developments in cyber security, based exclusively on open sources, with a view to inform political leadership and senior management in its constituency. Additional information on any item in this Brief can be provided upon request. Cyber Security Briefs are TLP:CLEAR.

Open source record

25263e6083406a0d3eb69ac7

2021-043: Multiple Vulnerabilities in Cisco Products Thursday, August 05, 2021 02:44:00 PM CEST On August 4, Cisco released multiple security updates to address several security vulnerabilities. This list includes critical and high-severity vulnerabilities affecting Cisco Small Business RV340, RV340W, RV345, and RV345P Dual WAN Gigabit VPN Routers and high-severity vulnerabilities affecting:- Cisco Small Business RV160 and RV260 Series VPN Routers.- Cisco Network Services Orchestrator CLI Secure

Open source record

321c02670655f8a44a3a02d6

2017-003: CISCO Smart Install Protocol Issues Wednesday, February 22, 2017 03:28:00 PM CET It has been reported that there exists a way to misuse the Cisco Smart Install protocol messages. The misuse is directed towards Smart Install Clients allowing an unauthenticated remote attacker to change the startup configuration, load alternative IOS versions, and execute commands on affected devices. Cisco does not consider this issue a vulnerability. However, since Cisco Smart Install is enabled by def

Open source record

37e2b0b3f3643adf445a9c1b

2020-043: Critical Vulnerabilities in Cisco Products Thursday, September 03, 2020 01:35:00 PM CEST On 29th of August and on 2nd of September, Cisco released several security advisories, updates, and workarounds to address security vulnerabilities including five high severity vulnerabilities, and one critical:* CVE-2020-3495 - Arbitrary Code Execution - CVSS score 9.9 (critical)* CVE-2020-3566 - Memory Exhaustion - CVSS score 8.6 (high)* CVE-2020-3530 - Authenticated User Privilege Escalation - C

Open source record

4d991b0325eb37eb82ddf86d

2017

Open source record

54392600b4e52529de876171

2021-053: Critical Vulnerabilities in Cisco Software Friday, September 24, 2021 06:24:00 PM CEST On Wednesday, September 22, 2021, Cisco Product Security Incident Response Team (PSIRT) has released 31 security advisories (3 Critical, 13 High, 15 Medium) to address multiple vulnerabilities in Cisco IOS XE software or products running with a specific configuration. At this time, the Cisco (PSIRT) is not aware of any public announcements or malicious use of the critical vulnerabilities CVE-2021-347

Open source record

5df53b0136a5b7d063da25a2

2019-018: Cisco Critical Vulnerability Affecting IOS XE Software Friday, August 30, 2019 11:58:00 AM CEST A major vulnerability affecting CISCO IOS XE operating system has been disclosed. The vulnerability identified as CVE-2019-12643 allows a remote user to bypass authentication and gain full control of the device that is running an outdated version of REST API virtual service container. This CVE obtain the highest severity score of 10.

Open source record

76b8f83f08353259dba25ca7

2024-065: Critical Vulnerability in Juniper Networks Products Monday, July 01, 2024 11:49:52 AM CEST On June 27, 2024, Juniper Networks issued an advisory about a critical vulnerability, CVE-2024-2973, affecting Session Smart Router (SSR), Session Smart Conductor, and WAN Assurance Router products. This vulnerability allows an attacker to bypass authentication and gain full control of the device, primarily affecting high-availability redundant configurations. It is recommended to update affected

Open source record

7bc4daefda8ed7aeb94451c2

2020-048: Critical Vulnerability in Microsoft Windows TCP/IP Stack Wednesday, October 14, 2020 02:24:00 PM CEST On 13th of October 2020, Microsoft released several security advisories to address security vulnerabilities. One of the reported vulnerabilities, affects Windows TCP/IP stack. An attacker who successfully exploits this vulnerability could gain the ability to execute code on the target server or client.

Open source record

88a3ae8ff6708ec54ff77906

2022-009: Critical Vulnerability in Cisco VPN Routers Monday, February 07, 2022 06:08:00 PM CET On January 4th, Cisco has issued advisories and software updates to address multiple vulnerabilities of which the three most serious are identified as: "CVE-2022-20699", "CVE-2022-20700", "CVE-2022-20708" with a severity score of 10 out of 10.- "CVE-2022-20699" could lead to Remote Code Execution by unauthenticated attackers with "root" privileges.- "CVE-2022-20700" could allow a remote attacker to el

Open source record

9136a85af7dac9f7b449484e

TLR 10 Years

Open source record

991800cd6ca74d40cd0cb52e

2024

Open source record

9c4326fccb64c36af04a977e

Cyber Brief 26-05 - April 2026 Monday, May 04, 2026 05:00:00 PM CEST Cyber Briefs are monthly executive reports that aim to present an overview of the most relevant developments in cyber security, based exclusively on open sources, with a view to inform political leadership and senior management in its constituency. Additional information on any item in this Brief can be provided upon request. Cyber Briefs are TLP:CLEAR.

Open source record

ae9799fa4658d0484d5adbc8

Cyber Brief 26-08 - July 2026 Monday, August 03, 2026 05:00:00 PM CEST Cyber Briefs are monthly executive reports that aim to present an overview of the most relevant developments in cyber security, based exclusively on open sources, with a view to inform political leadership and senior management in its constituency. Additional information on any item in this Brief can be provided upon request. Cyber Briefs are TLP:CLEAR.

Open source record

c54093199045ce832b2b159d

2018-009: UPDATE Cisco Smart Install Protocol Remote Code Execution Vulnerability Friday, April 06, 2018 05:10:00 PM CEST On 28th of March 2018, Cisco published a security advisory concerning a buffer overflow discovered in Smart Install feature of Cisco IOS and Cisco IOS XE software. This vulnerability allows an unauthenticated, remote attacker to execute arbitrary code on an affected device.A proof of concept for the vulnerability has been published. Also, there are already many attacks observ

Open source record

admin : [blank]

Public sources document default credentials associated with this vendor or product. No login attempt was performed.

Source: scantide_default_credentials

References

https://www.phenoelit.de/dpl/dpl.html

SPA2100

Vendor: · Model: SPA2100

unknown

[no username] : [blank]

Public sources document default credentials associated with this vendor or product. No login attempt was performed.

Source: scantide_default_credentials

IBM

Vendor:

unknown

26 campaign/advisory records

FBI / IC3 campaign / regional advisory intelligence — 1

36b4ec7d77002ad7f7aa6d7e

Guidelines for secure AI system development

Open source record

CERT-EU campaign / regional advisory intelligence — 6

5cc2ed95629003380b8e47d0

2011

Open source record

9c97832c4deff24c44466de4

Cyber Security Brief 23-08 - July 2023 Tuesday, August 01, 2023 08:30:00 PM CEST Cyber Security Briefs are monthly executive reports that aim to present an overview of the most relevant developments in cyber security, based exclusively on open sources, with a view to inform political leadership and senior management in its constituency. Additional information on any item in this Brief can be provided upon request. Cyber Security Briefs are TLP:CLEAR.

Open source record

a07ff9c64a8eaaac05972609

2012-0102: IBM WebSphere MQ File Transfer Edition Web Gateway insufficient access control Friday, August 17, 2012 03:34:00 PM CEST When using the web gateway, an authenticated user is able to access other users' files without further access control if the URL of the file is known. The URL for a file contains non guessable elements.

Open source record

decebe71a58113ba6e5f1c3b

2012

Open source record

e4d65c698fc358af977b08bd

Cyber Security Brief 24-04 - March 2024 Wednesday, April 03, 2024 12:30:00 PM CEST Cyber Security Briefs are monthly executive reports that aim to present an overview of the most relevant developments in cyber security, based exclusively on open sources, with a view to inform political leadership and senior management in its constituency. Additional information on any item in this Brief can be provided upon request. Cyber Security Briefs are TLP:CLEAR.

Open source record

ea61f1a5c038c8c69b6b9bd6

Cyber Brief 26-06 - May 2026 Tuesday, June 02, 2026 06:00:00 PM CEST Cyber Briefs are monthly executive reports that aim to present an overview of the most relevant developments in cyber security, based exclusively on open sources, with a view to inform political leadership and senior management in its constituency. Additional information on any item in this Brief can be provided upon request. Cyber Briefs are TLP:CLEAR.

Open source record

JVN / Japan campaign / regional advisory intelligence — 19

JVNDB-2005-000705

Fujitsu Java Runtime Environment reflection API vulnerability

Published 2008-05-21T00:00:00+09:00

Open source record

JVNDB-2005-000706

Fujitsu Java Runtime Environment reflection API vulnerability

Published 2008-05-21T00:00:00+09:00

Open source record

JVNDB-2005-000707

Fujitsu Java Runtime Environment reflection API vulnerability

Published 2008-05-21T00:00:00+09:00

Open source record

JVNDB-2005-000727

mod_imap cross-site scripting vulnerability

Published 2008-05-21T00:00:00+09:00

Open source record

JVNDB-2005-000776

Java Cryptography Extension 1.2.1 (JCE 1.2.1) will no longer function properly after July 28, 2005 due to the expiration of its digital certificate

Published 2008-05-21T00:00:00+09:00

Open source record

JVNDB-2007-000802

Lotus Domino cross-site scripting vulnerability

Published 2008-05-21T00:00:00+09:00

Open source record

JVNDB-2007-000819

Cross-site scripting vulnerability in Apache HTTP Server "mod_imap" and "mod_imagemap"

Published 2008-05-21T00:00:00+09:00

Open source record

JVNDB-2008-001043

X.Org Foundation X server buffer overflow vulnerability

Published 2008-06-13T17:11:26+09:00

Open source record

JVNDB-2011-000016

IBM DB2 vulnerable to denial-of-service (DoS)

Published 2011-03-04T19:29:37+09:00

Open source record

JVNDB-2011-000017

IBM WebSphere Application Server vulnerable to denial-of-service (DoS)

Published 2011-03-04T19:29:20+09:00

Open source record

JVNDB-2011-000018

IBM Lotus vulnerable to denial-of-service (DoS)

Published 2011-03-04T19:28:42+09:00

Open source record

JVNDB-2013-000004

WebSphere Application Server (WAS) vulnerable to cross-site scripting

Published 2013-01-25T12:32:36+09:00

Open source record

JVNDB-2013-000030

Lotus Domino vulnerable to denial-of-service (DoS)

Published 2013-03-28T12:32:39+09:00

Open source record

JVNDB-2013-000070

Oracle Outside In vulnerable to buffer overflow

Published 2013-07-17T13:45:49+09:00

Open source record

JVNDB-2013-000071

Oracle Outside In vulnerable to denial-of-service (DoS)

Published 2013-07-17T13:56:43+09:00

Open source record

JVNDB-2026-000038

Installer for IBM Trusteer Rapport may insecurely load Dynamic Link Libraries

Published 2026-03-17T14:57:53+09:00

Open source record

JVNDB-2007-000395

Homepage Builder sample CGI programs vulnerable to OS command injection

Published 2008-05-21T00:00:00+09:00

Open source record

JVNDB-2008-000011

Internet Scanner reporting engine vulnerable to cross-site scripting

Published 2008-05-21T00:00:00+09:00

Open source record

JVNDB-2025-000104

Multiple vulnerabilities in GNU Libmicrohttpd

Published 2025-11-10T15:07:35+09:00

Open source record

CMSBATCH : [blank]

Public sources document default credentials associated with this vendor or product. No login attempt was performed.

Source: scantide_default_credentials

References

https://github.com/danielmiessler/SecLists/blob/master/Passwords/Default-Credentials/default-passwords.csv

Fast 2444

Vendor: · Model: Fast 2444

unknown

26 campaign/advisory records

FBI / IC3 campaign / regional advisory intelligence — 20

11f725160c85af3ba01849cc

People's Republic of China State-Sponsored Cyber Actor Living off the Land to Evade Detection

Open source record

1425b84a538a19f525596083

Tech Support Scam

Open source record

1c61a673a02889c8bc6c49e0

Beware of Charitable Fraud Related to Mass Casualty and Disaster Events

Open source record

367ff75850d5d58c73369f33

Phishing Guidance: Stopping the Attack Cycle at Phase One

Open source record

3d51a0ec9f354c84621a6aba

Shifting the Balance of Cybersecurity Risk: Principles and Approaches for Security by Design and Default

Open source record

4d24213bd1443ba660e0f939

Iranian Islamic Revolutionary Guard Corps-Affiliated Cyber Actors Exploiting Vulnerabilities for Data Extortion and Disk Encryption for Ransom Operations

Open source record

5ece5005f55ce09a6e2e9df1

Technical and Customer Support Fraud

Open source record

64af8dcd0e3c1ba4ef460821

2025

Open source record

725c462d3770cd1d7ac5d167

Skip to content

Open source record

76a8ac4c31c68791b4c383d8

Defending OT Operations Against Ongoing Pro-Russia Hacktivist Activity

Open source record

789dcd21751bfcc962150abd

Advanced Persistent Threat Actors Leverage SolarWinds Vulnerabilities

Open source record

7d39457cb1eb2bc4b0d753f1

Fast Flux: A National Security Threat — FBI An official website of the United States government. Here's how you know Official websites use .gov A .gov website belongs to an official government organization in the United States. Secure .gov websites use HTTPS A lock ( ) or https:// means you've safely connected to the .gov website. Share sensitive information only on official, secure websites. Menu

Open source record

8252636e4f1918a10e064cb1

File A Complaint

Open source record

8816efd769cad69402360a97

Chinese Authority Impersonation

Open source record

93300cf254ac4337846c793d

Iranian Cyber Actors Targeting Personal Accounts to Support Operations

Open source record

FBI_IC3-260407.pdf

TLP:CLEAR Co-Authored by: Product ID: AA26-097A Iranian-Affiliated Cyber Actors Exploit Programmable Logic Controllers Across US Critical Infrastructure Publication: April 7, 2026 Federal Bureau of Investigation Cybersecurity and Infrastruc

Open source record

FLASH-20260219-01

TLP:CLEAR 19 FEBRUARY 2026 FLASH Number FLASH-20260219-001 D Increase in Malware Enabled ATM Jackpotting Incidents Across United States Summary The Federal Bureau of Investigation (FBI) is releasing this FLASH to disseminate indicators of c

Open source record

af39035f517606785f60781f

Modern Approaches to Network Access Security

Open source record

b231bb0588fb58ea25e903a9

Indictment of China-Based Cyber Actors Associated with APT 41 for Intrusion Activities

Open source record

bdaa193e0c57df253c283b91

Beware of Charitable Fraud Related to Mass Casualty and Disaster Events — FBI An official website of the United States government. Here's how you know Official websites use .gov A .gov website belongs to an official government organization in the United States. Secure .gov websites use HTTPS A lock ( ) or https:// means you've safely connected to the .gov website. Share sensitive information only

Open source record

CERT-EU campaign / regional advisory intelligence — 6

15a376060dccc646475be773

2022-050: Multiple Critical Vulnerabilities in Microsoft Products Thursday, July 14, 2022 09:15:00 AM CEST On the 12th of July, Microsoft released July's 2022 Patch Tuesday including fixes for one actively exploited zero-day vulnerability and a total of 84 flaws. A zero-day vulnerability tracked as CVE-2022-22047 concerns a Windows CSRSS elevation of privilege, allowing an attacker to gain SYSTEM privileges. Out of the 84 other security flows, four of them are classified as Critical, as they all

Open source record

45b2b6ef10b32b2b7b4504b0

2017-018: BlueBorne Attack against Bluetooth Wednesday, September 13, 2017 03:14:00 PM CEST A new attack vector endangering major mobile, desktop, and IoT operating systems and the devices using them - including Android, iOS, Windows, and Linux - has been revealed. The new attack is dubbed BlueBorne, as it spreads through the air (airborne) and attacks devices via Bluetooth.Eight related zero-day vulnerabilities, four of which are classified as critical have been also disclosed. BlueBorne allows

Open source record

8b81a463e5fe32eccbc5ed71

2017-021: KRACK - Key Reinstallation Attacks: Breaking WPA2 Tuesday, October 17, 2017 04:27:00 PM CEST Researchers in the KU Leuven University have discovered a serious weaknesses in WPA2, a protocol that secures all modern protected Wi-Fi networks. An attacker within the range of the Wi-Fi of the victim can exploit these weaknesses using key reinstallation attack (KRACK). Attackers can use this attack to read information that was previously assumed to be safely encrypted. The weakness was found

Open source record

b9a07533c216877fad1b75c8

2012-0087: UPDATED - Microsoft Security Advisory 2737111 Released on July 24, 2012 Thursday, August 23, 2012 11:27:00 AM CEST Vulnerabilities in Microsoft Exchange and FAST Search Server 2010 for SharePoint Parsing Could Allow Remote Code Execution.

Open source record

bb5954374c2e36c70c022b6d

Cyber Brief 25-01 - December 2024 Friday, January 03, 2025 04:00:00 PM CET Cyber Briefs are monthly executive reports that aim to present an overview of the most relevant developments in cyber security, based exclusively on open sources, with a view to inform political leadership and senior management in its constituency. Additional information on any item in this Brief can be provided upon request. Cyber Briefs are TLP:CLEAR.

Open source record

cb046d247df5bece2432e78f

2022-061: Reflected Amplification DoS Vulnerability in PAN-OS Thursday, August 11, 2022 01:35:00 PM CEST On August 10, 2022, PaloAlto released a security advisory regarding a Denial-of-Service (DoS) vulnerability affecting PAN-OS. Exploiting this vulnerability, a network-based attacker would be able to obfuscate its identity and implicate the vulnerable firewall as the source of an attack.While some software updates are not yet available, some mitigation and workarounds are available and should

Open source record

admin : admin

Public sources document default credentials associated with this vendor or product. No login attempt was performed.

Source: scantide_default_credentials

SAHARA

Vendor: · Model: SAHARA

multi

2 campaign/advisory records

FBI / IC3 campaign / regional advisory intelligence — 1

834bf35aec4851aade395a90

Contact FBI Cyber

Open source record

CERT-EU campaign / regional advisory intelligence — 1

2680cc37ee8f65e8e40e6ae1

Cyber Brief 24-05 - April 2024 Thursday, May 02, 2024 06:00:00 PM CEST Cyber Briefs are monthly executive reports that aim to present an overview of the most relevant developments in cyber security, based exclusively on open sources, with a view to inform political leadership and senior management in its constituency. Additional information on any item in this Brief can be provided upon request. Cyber Security Briefs are TLP:CLEAR.

Open source record

root : ascend

Public sources document default credentials associated with this vendor or product. No login attempt was performed.

Source: scantide_default_credentials

DEC-10

Vendor: · Model: DEC-10

multi

45 campaign/advisory records

FBI / IC3 campaign / regional advisory intelligence — 20

0bffb47abc37b910c5409e2d

Malicious Actors Almost Certainly Will Leverage Synthetic Content for Cyber and Foreign Influence Operations

Open source record

18ea7a6458253a663ccafb8d

Office of Public Affairs | Justice Department Announces Coordinated, Nationwide Actions to Combat North Korean Remote Information Technology Workers’ Illicit Revenue Generation Schemes | United States Department of Justice Skip to main content An official website of the United States government Here's how you know Here's how you know Official websites use .gov A .gov website belongs to an official

Open source record

22d54aba1c3e6e05a9d1d8d1

Common Internet of Things Devices May Expose Consumers to Cyber Exploitation

Open source record

2f77c75345a43a8958c70b0a

ESXiArgs Ransomware Virtual Machine Recovery Guidance

Open source record

3ef0e143169ef8b9b75a55ea

2024 U.S. Federal Elections: The Insider Threat

Open source record

4780ab778103ec39f0d8c2bb

Identification and Disruption of QakBot Infrastructure

Open source record

4d24213bd1443ba660e0f939

Iranian Islamic Revolutionary Guard Corps-Affiliated Cyber Actors Exploiting Vulnerabilities for Data Extortion and Disk Encryption for Ransom Operations

Open source record

57ff43de10c50b891ba950cf

Top CVEs Actively Exploited By People's Republic of China State-Sponsored Cyber Actors

Open source record

79fc6189212549303d80c9c5

DoppelPaymer Ransomware Attacks on Critical Infrastructure Impact Critical Services

Open source record

7b829d8a8489b953221ba12a

North Korean State-Sponsored Cyber Actors Use Maui Ransomware to Target the Healthcare and Public Health Sector

Open source record

7db4f2bef4d168d1c184f709

#StopRansomware: AvosLocker Ransomware (Update)

Open source record

8f561d81060dba1c0feb8c4d

Potential for Malicious Cyber Activities to Disrupt the 2020 Tokyo Summer Olympics

Open source record

FBI_IC3-260312.pdf

TLP:CLEAR 12 March 2026 FLASH Number 20260312-001 AVrecon Malware-Infected Routers Exploited as Residential Proxies by SocksEscort Summary The Federal Bureau of Investigation (FBI) is releasing this FLASH to disseminate indicators of compro

Open source record

FBI_IC3-260429.pdf

TLP:CLEAR Adapting Zero Trust Principles to Operational Technology Publication: April 29, 2026 Cybersecurity and Infrastructure Security Agency Department of War Department of Energy Federal Bureau of Investigation Department of State This

Open source record

FBI_IC3-260818.pdf

TLP:CLEAR Co-Authored by: Product ID: AA25-071A #StopRansomware: Medusa Ransomware Publication: March 12, 2025 Last Updated: August 18, 2026 Cybersecurity and Infrastructure Security Agency Federal Bureau of Investigation Department of Heal

Open source record

FBI_IC3-PSA260312

Internet Crime Complaint Center (IC3) | Evading Residential Proxy Networks: Protecting Your Devices from Becoming a Tool for Criminals Skip to main Alert Number: I-031226-PSA | 12 March 2026 Evading Residential Proxy Networks: Protecting Yo

Open source record

FLASH-20260219-01

TLP:CLEAR 19 FEBRUARY 2026 FLASH Number FLASH-20260219-001 D Increase in Malware Enabled ATM Jackpotting Incidents Across United States Summary The Federal Bureau of Investigation (FBI) is releasing this FLASH to disseminate indicators of c

Open source record

a1ec2d34be04b293b9297f23

#StopRansomware: LockBit 3.0 Ransomware Affiliates Exploit CVE 2023-4966 Citrix Bleed Vulnerability

Open source record

abeffa5c0d7adaf9b765ca12

Iranian Cyber Actors' Brute Force and Credential Access Activity Compromises Critical Infrastructure Organizations

Open source record

be4f66e3a788c235b296297d

Evading Residential Proxy Networks: Protecting Your Devices from Becoming a Tool for Criminals — FBI An official website of the United States government. Here's how you know Official websites use .gov A .gov website belongs to an official government organization in the United States. Secure .gov websites use HTTPS A lock ( ) or https:// means you've safely connected to the .gov website. Share sens

Open source record

CERT-EU campaign / regional advisory intelligence — 20

03b7a54ee5ce9e82f09fe828

Cyber Security Brief 23-09 - August 2023 Monday, September 04, 2023 12:20:00 PM CEST Cyber Security Briefs are monthly executive reports that aim to present an overview of the most relevant developments in cyber security, based exclusively on open sources, with a view to inform political leadership and senior management in its constituency. Additional information on any item in this Brief can be provided upon request. Cyber Security Briefs are TLP:CLEAR.

Open source record

2478e8aca48921497bf1e2c7

Cyber Security Brief 23-10 - September 2023 Wednesday, October 04, 2023 10:50:00 AM CEST Cyber Security Briefs are monthly executive reports that aim to present an overview of the most relevant developments in cyber security, based exclusively on open sources, with a view to inform political leadership and senior management in its constituency. Additional information on any item in this Brief can be provided upon request. Cyber Security Briefs are TLP:CLEAR.

Open source record

5a84a2d6ff686f88874206e7

Cyber Brief 24-06 - May 2024 Monday, June 03, 2024 06:00:00 PM CEST Cyber Briefs are monthly executive reports that aim to present an overview of the most relevant developments in cyber security, based exclusively on open sources, with a view to inform political leadership and senior management in its constituency. Additional information on any item in this Brief can be provided upon request. Cyber Security Briefs are TLP:CLEAR.

Open source record

752eab72a4e9a2505b11e760

Cyber Brief 24-09 - August 2024 Wednesday, September 04, 2024 06:00:00 PM CEST Cyber Briefs are monthly executive reports that aim to present an overview of the most relevant developments in cyber security, based exclusively on open sources, with a view to inform political leadership and senior management in its constituency. Additional information on any item in this Brief can be provided upon request. Cyber Security Briefs are TLP:CLEAR.

Open source record

7a8af3c6f57edf032a0f70fa

Cyber Security Brief - November 2022 Thursday, December 01, 2022 11:20:00 AM CET Cyber Security Briefs are monthly executive reports that aim to present an overview of the most relevant developments in cyber security, based exclusively on open sources, with a view to inform political leadership and senior management in its constituency. Additional information on any item in this Brief can be provided upon request. Cyber Security Briefs are TLP:WHITE.

Open source record

952bde419462d5f35b2804d1

Cyber Brief 25-02 - January 2025 Monday, February 03, 2025 02:00:00 PM CET Cyber Briefs are monthly executive reports that aim to present an overview of the most relevant developments in cyber security, based exclusively on open sources, with a view to inform political leadership and senior management in its constituency. Additional information on any item in this Brief can be provided upon request. Cyber Briefs are TLP:CLEAR.

Open source record

9c97832c4deff24c44466de4

Cyber Security Brief 23-08 - July 2023 Tuesday, August 01, 2023 08:30:00 PM CEST Cyber Security Briefs are monthly executive reports that aim to present an overview of the most relevant developments in cyber security, based exclusively on open sources, with a view to inform political leadership and senior management in its constituency. Additional information on any item in this Brief can be provided upon request. Cyber Security Briefs are TLP:CLEAR.

Open source record

b3384778dc49dc28ed930803

Cyber Security Brief - October 2022 Thursday, November 03, 2022 10:50:00 AM CET Cyber Security Briefs are monthly executive reports that aim to present an overview of the most relevant developments in cyber security, based exclusively on open sources, with a view to inform political leadership and senior management in its constituency. Additional information on any item in this Brief can be provided upon request. Cyber Security Briefs are TLP:WHITE.

Open source record

060783a8f0553c4295139910

Cyber Brief 25-04 - March 2025 Wednesday, April 02, 2025 04:00:00 PM CEST Cyber Briefs are monthly executive reports that aim to present an overview of the most relevant developments in cyber security, based exclusively on open sources, with a view to inform political leadership and senior management in its constituency. Additional information on any item in this Brief can be provided upon request. Cyber Briefs are TLP:CLEAR.

Open source record

08af8e105c397ab708b7e1a4

Cyber Brief 24-11 - October 2024 Monday, November 04, 2024 05:00:00 PM CET Cyber Briefs are monthly executive reports that aim to present an overview of the most relevant developments in cyber security, based exclusively on open sources, with a view to inform political leadership and senior management in its constituency. Additional information on any item in this Brief can be provided upon request. Cyber Security Briefs are TLP:CLEAR.

Open source record

11bd7cbb6e3b18cdc11ae175

Cyber Brief - September 2022 Monday, October 03, 2022 10:10:00 PM CEST Cyber Briefs are monthly executive reports that aim to present an overview of the most relevant developments in cyber security, based exclusively on open sources, with a view to inform political leadership and senior management in its constituency. Additional information on any item in this Brief can be provided upon request. Cyber Briefs are TLP:WHITE.

Open source record

164e9b5c225d1223c305e30c

Cyber Brief 25-11 - October 2025 Saturday, November 01, 2025 04:00:00 PM CET Cyber Briefs are monthly executive reports that aim to present an overview of the most relevant developments in cyber security, based exclusively on open sources, with a view to inform political leadership and senior management in its constituency. Additional information on any item in this Brief can be provided upon request. Cyber Briefs are TLP:CLEAR.

Open source record

2680cc37ee8f65e8e40e6ae1

Cyber Brief 24-05 - April 2024 Thursday, May 02, 2024 06:00:00 PM CEST Cyber Briefs are monthly executive reports that aim to present an overview of the most relevant developments in cyber security, based exclusively on open sources, with a view to inform political leadership and senior management in its constituency. Additional information on any item in this Brief can be provided upon request. Cyber Security Briefs are TLP:CLEAR.

Open source record

3149ef4d675627192800b4d0

Cyber Brief 26-04 - March 2026 Wednesday, April 01, 2026 05:00:00 PM CEST Cyber Briefs are monthly executive reports that aim to present an overview of the most relevant developments in cyber security, based exclusively on open sources, with a view to inform political leadership and senior management in its constituency. Additional information on any item in this Brief can be provided upon request. Cyber Briefs are TLP:CLEAR.

Open source record

3b7a915615df3ee8c305af0f

2012-0005: Vulnerabilities in Cisco IP Video Phone E20 and Digital Media Manager Friday, January 20, 2012 02:39:00 PM CET Cisco IP Video Phone E20 Default Root Account Cisco TelePresence Software version TE 4.1.0 contains a default account vulnerability that could allow an unauthenticated, remote attacker to take complete control of the affected device.

Open source record

40bd775e38586aabc60b91ae

Cyber Security Brief 24-01 - December 2023 Friday, January 05, 2024 04:00:00 PM CET Cyber Security Briefs are monthly executive reports that aim to present an overview of the most relevant developments in cyber security, based exclusively on open sources, with a view to inform political leadership and senior management in its constituency. Additional information on any item in this Brief can be provided upon request. Cyber Security Briefs are TLP:WHITE.

Open source record

522a288ee1b7b3f828225d33

About us

Open source record

5ae0dac2996931f7562a35de

Cyber Security Brief 24-03 - February 2024 Friday, March 01, 2024 04:00:00 PM CET Cyber Security Briefs are monthly executive reports that aim to present an overview of the most relevant developments in cyber security, based exclusively on open sources, with a view to inform political leadership and senior management in its constituency. Additional information on any item in this Brief can be provided upon request. Cyber Security Briefs are TLP:WHITE.

Open source record

5cc2ed95629003380b8e47d0

2011

Open source record

6350fe51a8e40e4f490446ae

Cyber Brief 25-08 - July 2025 Monday, August 04, 2025 11:00:00 AM CEST Cyber Briefs are monthly executive reports that aim to present an overview of the most relevant developments in cyber security, based exclusively on open sources, with a view to inform political leadership and senior management in its constituency. Additional information on any item in this Brief can be provided upon request. Cyber Briefs are TLP:CLEAR.

Open source record

Europol / EC3 campaign / regional advisory intelligence — 5

06f6f38fe5be5c14cb128258

Fraudulent shopping sites tied to cybercrime marketplace taken offline – Over 200 terabytes of digital evidence secured during investigation | Europol You need to enable JavaScript to run this app. Loading application. Please wait.

Open source record

439cdd4aa49d1261c2471d81

Europol and Capgemini Netherlands seek pioneering solutions to tackle cyber threats – Europol’s European Cybercrime Centre (EC3) signs a Memorandum of Understanding (MoU) with Capgemini, a global leader in consulting, technology services and digital transformation. Joint exercises, capacity building and prevention campaigns will be at the heart of this collaboration. | Europol You need to enable J

Open source record

d2e3e0e6b45288d01ce5a144

Europol Cybercrime Conference: Future-proofing policing in the digital age | Europol You need to enable JavaScript to run this app. Loading application. Please wait.

Open source record

f6128711b1e826962eec9db0

Cybercrime as a business: The digital underground economy – The Hague, the Netherlands | Europol You need to enable JavaScript to run this app. Loading application. Please wait.

Open source record

de68910fd2aeace6de9d6f5f

Germany and Ukraine hit two high-value ransomware targets – Forensic analysis of the seized equipment is still ongoing to determine the exact role of the suspects and their links to other accomplices | Europol You need to enable JavaScript to run this app. Loading application. Please wait.

Open source record

2 : maintain

Public sources document default credentials associated with this vendor or product. No login attempt was performed.

Source: scantide_default_credentials

RNX-N300RT

Vendor: · Model: RNX-N300RT

unknown

admin : admin

Public sources document default credentials associated with this vendor or product. No login attempt was performed.

Source: scantide_default_credentials

isscfg

Vendor: · Model: isscfg

http

admin : [blank]

Public sources document default credentials associated with this vendor or product. No login attempt was performed.

Source: scantide_default_credentials

References

http://www.tenable.com/4917.html

Barricade Router

Vendor: · Model: Barricade Router

unknown

40 campaign/advisory records

FBI / IC3 campaign / regional advisory intelligence — 20

01e9abcc28c68df5c0b4e43e

Update on SVR Cyber Operations and Vulnerability Exploitation

Open source record

1222c75ac30b8499f3f6f137

Russian Government Cyber Actors Targeting Networking Devices, Critical Infrastructure

Open source record

128e2c843960ddb289e6118e

Skip to content

Open source record

221b0868c40f7ad490c24d12

Russian Foreign Intelligence Service (SVR) Cyber Operations: Trends and Best Practices for Network Defenders

Open source record

22d54aba1c3e6e05a9d1d8d1

Common Internet of Things Devices May Expose Consumers to Cyber Exploitation

Open source record

23ecec0c3c508513e5d9a1bb

Russian State-Sponsored Cyber Actors Gain Network Access by Exploiting Default Multifactor Authentication Protocols and "PrintNightmare" Vulnerability

Open source record

244ac90198cda6caf0a3bfaa

Industry Alerts

Open source record

2738eef090f1649b23ee77e9

File A Complaint

Open source record

2becd729f39ba0f44afaf582

People's Republic of China-Linked Cyber Actors Hide in Router Firmware

Open source record

2e1c5ab51970d6ee127387c6

An APT Group Exploiting a 0-day in FatPipe WARP, MPVPN, and IPVPN Software

Open source record

478abf40a7ddc554a6378000

Return to top

Open source record

5674821068214cf1c524ebc9

File A Complaint

Open source record

60ac9b6721ef743cc70dcf29

Darkside Ransomware: Best Practices for Preventing Business Disruption from Ransomware Attacks

Open source record

64570c7afe043dabcbbfd9cf

Indicators of Compromise Associated with OnePercent Group Ransomware

Open source record

651b83264e418537fc08a7de

2023

Open source record

6b28046c1a565e2f9aae0f0b

File A Complaint

Open source record

6ba2b608dd679192fd4b5063

Cybercriminal Proxy Services Exploiting End-of-Life Routers — FBI An official website of the United States government. Here's how you know Official websites use .gov A .gov website belongs to an official government organization in the United States. Secure .gov websites use HTTPS A lock ( ) or https:// means you've safely connected to the .gov website. Share sensitive information only on official,

Open source record

7552923fc476335081e148e7

Enhanced Visibility and Hardening Guidance for Communications Infrastructure

Open source record

796ede2f89ea176be6f19e84

Threat Actors Exploit Progress Telerik Vulnerability in U.S. Government IIS Server

Open source record

956b5889b11e3315ce728d53

Secure by Design Alert: Malicious Cyber Actors Exploiting Insecure SOHO Routers

Open source record

CERT-EU campaign / regional advisory intelligence — 20

0463bc1aca415ae34bacd02a

2021-009: Critical Vulnerabilities in Cisco Products Thursday, February 04, 2021 09:35:00 PM CET Cisco has published an advisory about several vulnerabilities affecting various Cisco Products. These vulnerabilities could lead to remote code execution, privilege escalation, directory traversal, file overwrite or denial of service. While Cisco is not aware of any malicious exploit in the wild, it is highly recommended to patch the affected products.

Open source record

07f93ac177a174d99635789b

2020-036: Critical Cisco Vulnerabilities Thursday, July 16, 2020 12:06:00 PM CEST Cisco released 31 Security Advisories for vulnerabilities affecting its products. Five of them are rated critical with CVSS Score 9.8. In particular, critical vulnerabilities affect: telnet service of firewall routers (CVE-2020-3330), web-based management interface of routers (CVE-2020-3323, CVE-2020-3144, and CVE-2020-3331), and web management interface of Cisco Prime License Manager (PLM) software (CVE-2020-3140)

Open source record

08c9ebf0229710879177a16f

2025-041: Critical Security Vulnerability in React Server Components Thursday, December 04, 2025 02:50:51 PM CET On December 3, 2025, the React Team publicly disclosed a critical security vulnerability affecting React Server Components (RSC) and related packages. The vulnerability allows for unauthenticated remote code execution (RCE) via maliciously crafted HTTP requests. It is recommended to update all affected component packages and any frameworks that integrate them.

Open source record

0a56d52387d7c2a6a62c3e2a

2020-052: Critical Cisco IOS XR Software Vulnerability Under Attack Wednesday, October 21, 2020 02:46:00 PM CEST Cisco released a warning on the 20th of October regarding the attacks that are actively targeting the CVE-2020-3118 high severity vulnerability found to affect multiple carrier-grade routers that run the company's Cisco IOS XR Software. An advisory for this vulnerability was released by Cisco in the 5th of February. It is related to the Cisco Discovery Protocol implementation for Cisc

Open source record

21958a31673113629cf825ed

2014-028: Cisco Small Business Router Password Disclosure Vulnerability Tuesday, March 11, 2014 11:24:00 AM CET A vulnerability in the web management interface of the Cisco RV110W Wireless-N VPN Firewall, the Cisco RV215W Wireless-N VPN Router, and the Cisco CVR100W Wireless-N VPN Router could allow an unauthenticated, remote attacker to gain administrative-level access to the web management interface of the affected device.

Open source record

2478e8aca48921497bf1e2c7

Cyber Security Brief 23-10 - September 2023 Wednesday, October 04, 2023 10:50:00 AM CEST Cyber Security Briefs are monthly executive reports that aim to present an overview of the most relevant developments in cyber security, based exclusively on open sources, with a view to inform political leadership and senior management in its constituency. Additional information on any item in this Brief can be provided upon request. Cyber Security Briefs are TLP:CLEAR.

Open source record

25263e6083406a0d3eb69ac7

2021-043: Multiple Vulnerabilities in Cisco Products Thursday, August 05, 2021 02:44:00 PM CEST On August 4, Cisco released multiple security updates to address several security vulnerabilities. This list includes critical and high-severity vulnerabilities affecting Cisco Small Business RV340, RV340W, RV345, and RV345P Dual WAN Gigabit VPN Routers and high-severity vulnerabilities affecting:- Cisco Small Business RV160 and RV260 Series VPN Routers.- Cisco Network Services Orchestrator CLI Secure

Open source record

321c02670655f8a44a3a02d6

2017-003: CISCO Smart Install Protocol Issues Wednesday, February 22, 2017 03:28:00 PM CET It has been reported that there exists a way to misuse the Cisco Smart Install protocol messages. The misuse is directed towards Smart Install Clients allowing an unauthenticated remote attacker to change the startup configuration, load alternative IOS versions, and execute commands on affected devices. Cisco does not consider this issue a vulnerability. However, since Cisco Smart Install is enabled by def

Open source record

37e2b0b3f3643adf445a9c1b

2020-043: Critical Vulnerabilities in Cisco Products Thursday, September 03, 2020 01:35:00 PM CEST On 29th of August and on 2nd of September, Cisco released several security advisories, updates, and workarounds to address security vulnerabilities including five high severity vulnerabilities, and one critical:* CVE-2020-3495 - Arbitrary Code Execution - CVSS score 9.9 (critical)* CVE-2020-3566 - Memory Exhaustion - CVSS score 8.6 (high)* CVE-2020-3530 - Authenticated User Privilege Escalation - C

Open source record

4d991b0325eb37eb82ddf86d

2017

Open source record

54392600b4e52529de876171

2021-053: Critical Vulnerabilities in Cisco Software Friday, September 24, 2021 06:24:00 PM CEST On Wednesday, September 22, 2021, Cisco Product Security Incident Response Team (PSIRT) has released 31 security advisories (3 Critical, 13 High, 15 Medium) to address multiple vulnerabilities in Cisco IOS XE software or products running with a specific configuration. At this time, the Cisco (PSIRT) is not aware of any public announcements or malicious use of the critical vulnerabilities CVE-2021-347

Open source record

5df53b0136a5b7d063da25a2

2019-018: Cisco Critical Vulnerability Affecting IOS XE Software Friday, August 30, 2019 11:58:00 AM CEST A major vulnerability affecting CISCO IOS XE operating system has been disclosed. The vulnerability identified as CVE-2019-12643 allows a remote user to bypass authentication and gain full control of the device that is running an outdated version of REST API virtual service container. This CVE obtain the highest severity score of 10.

Open source record

76b8f83f08353259dba25ca7

2024-065: Critical Vulnerability in Juniper Networks Products Monday, July 01, 2024 11:49:52 AM CEST On June 27, 2024, Juniper Networks issued an advisory about a critical vulnerability, CVE-2024-2973, affecting Session Smart Router (SSR), Session Smart Conductor, and WAN Assurance Router products. This vulnerability allows an attacker to bypass authentication and gain full control of the device, primarily affecting high-availability redundant configurations. It is recommended to update affected

Open source record

7bc4daefda8ed7aeb94451c2

2020-048: Critical Vulnerability in Microsoft Windows TCP/IP Stack Wednesday, October 14, 2020 02:24:00 PM CEST On 13th of October 2020, Microsoft released several security advisories to address security vulnerabilities. One of the reported vulnerabilities, affects Windows TCP/IP stack. An attacker who successfully exploits this vulnerability could gain the ability to execute code on the target server or client.

Open source record

88a3ae8ff6708ec54ff77906

2022-009: Critical Vulnerability in Cisco VPN Routers Monday, February 07, 2022 06:08:00 PM CET On January 4th, Cisco has issued advisories and software updates to address multiple vulnerabilities of which the three most serious are identified as: "CVE-2022-20699", "CVE-2022-20700", "CVE-2022-20708" with a severity score of 10 out of 10.- "CVE-2022-20699" could lead to Remote Code Execution by unauthenticated attackers with "root" privileges.- "CVE-2022-20700" could allow a remote attacker to el

Open source record

9136a85af7dac9f7b449484e

TLR 10 Years

Open source record

991800cd6ca74d40cd0cb52e

2024

Open source record

9c4326fccb64c36af04a977e

Cyber Brief 26-05 - April 2026 Monday, May 04, 2026 05:00:00 PM CEST Cyber Briefs are monthly executive reports that aim to present an overview of the most relevant developments in cyber security, based exclusively on open sources, with a view to inform political leadership and senior management in its constituency. Additional information on any item in this Brief can be provided upon request. Cyber Briefs are TLP:CLEAR.

Open source record

ae9799fa4658d0484d5adbc8

Cyber Brief 26-08 - July 2026 Monday, August 03, 2026 05:00:00 PM CEST Cyber Briefs are monthly executive reports that aim to present an overview of the most relevant developments in cyber security, based exclusively on open sources, with a view to inform political leadership and senior management in its constituency. Additional information on any item in this Brief can be provided upon request. Cyber Briefs are TLP:CLEAR.

Open source record

c54093199045ce832b2b159d

2018-009: UPDATE Cisco Smart Install Protocol Remote Code Execution Vulnerability Friday, April 06, 2018 05:10:00 PM CEST On 28th of March 2018, Cisco published a security advisory concerning a buffer overflow discovered in Smart Install feature of Cisco IOS and Cisco IOS XE software. This vulnerability allows an unauthenticated, remote attacker to execute arbitrary code on an affected device.A proof of concept for the vulnerability has been published. Also, there are already many attacks observ

Open source record

[no username] : 0000

Public sources document default credentials associated with this vendor or product. No login attempt was performed.

Source: scantide_default_credentials

Default credential intelligence

Search credentials

c-010-i

BinTec

P 2602R

Netgear modem/router and SSR

Oracle

windows (RDP)

Microplex

SHDSL1421

Network cameras

NTCIP Message Sign Software

EMC

SNMP

CT-560

WHR-G54S

McData

EA9500

Router OS

SPA2100

IBM

Fast 2444

SAHARA

DEC-10

RNX-N300RT

isscfg

Barricade Router

Submit a missing product