CVE-2005-2508: Undefined Security Weakness

dsidentity in Directory Services in Mac OS X 10.4.2 allows local users to add or remove user accounts...

Windows Execute net user /ADD

Create a new user and add them to local administration group. Note: The specified password is checked for common complexity requirements to prevent the target machine rejecting the user for failing to meet policy requirements. Complexity check: 8-14 chars 1 UPPER, 1 lower, 1 digit/special This...

Default Password (public) for 'public' Account

The account 'public' on the remote host has the password 'public'. An attacker may use this to gain further privileges on this system. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. account = "public"; password = "public"; include'deprecatednasllevel.inc'; include'compat.inc'; if descriptio...

Debian DSA-422-1 : cvs - remote vulnerability

The account management of the CVS pserver which is used to give remote access to CVS repositories uses a CVSROOT/passwd file in each repository which contains the accounts and their authentication information as well as the name of the local unix account to use when a pserver account is used. Sin...

Netegrity IdentityMinder Web Edition 5.6 - Null Byte Cross-Site Scripting

source: https://www.securityfocus.com/bid/10645/info Netegrity IdentityMinder is a tool designed for the Microsoft Windows platform to manage and maintain users and user accounts. The tool supports a web based interface for creating and removing users in multi-user environments. It has been...

Netegrity IdentityMinder Web Edition 5.6 - Management Interface Cross-Site Scripting

Netegrity IdentityMinder Web Edition 5.6 - Management Interface Cross-Site Scripting source: https://www.securityfocus.com/bid/10645/info Netegrity IdentityMinder is a tool designed for the Microsoft Windows platform to manage and maintain users and user accounts. The tool supports a web based...

[SECURITY] [DSA-422-1] multiple CVS improvements

------------------------------------------------------------------------ Debian Security Advisory DSA-422-1 [email protected] http://www.debian.org/security/ Wichert Akkerman January 13, 2004 - ------------------------------------------------------------------------ Package : cvs Vulnerability...

DSA-422 cvs - remote vulnerability

Bulletin has no description...

Unpassworded 'jill' Account

The account 'jill' has no password set. An attacker may use this to gain further privileges on this system. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. account = "jill"; include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid11266; scriptversion"1.34";...

Unpassworded 'toor' Account

The account 'toor' has no password set. An attacker may use this to gain further privileges on this system. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. account = "toor"; include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid11252; scriptversion"1.35";...

Microsoft Windows - Local Users Information : Automatically Disabled Accounts

Using the supplied credentials, Nessus was able to list local user accounts that have been automatically disabled. These accounts may have been disabled for security reasons or due to brute-force attack attempts. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid10911;...

Microsoft Windows - Users Information : Disabled Accounts

Using the supplied credentials, Nessus was able to list user accounts that have been disabled. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid10897; scriptversion"1.19"; scriptcvsdate"Date: 2018/08/13 14:32:39"; scriptnameenglish:"Microsoft Windows - Users Informatio...

Microsoft IIS /iisadmpwd/aexp2.htr Password Policy Bypass

Microsoft IIS installs the 'aexp2.htr', 'aexp2b.htr', 'aexp3.htr', or 'aexp4.htr' files in the '/iisadmpwd' directory by default. These fiels can be used by an attacker to brute-force a valid username/password. A valid user may also use it to change his password on a locked account, bypassing...