Default Password (admin) for 'admin' Account

The account 'admin' on the remote host has the password 'admin'. An attacker may leverage this issue to gain access to the affected system and launch further attacks against it. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. account = "admin"; password = "admin";...

Default Password (bank) for 'bank' Account

The account 'bank' on the remote host has the default password 'bank'. An attacker may leverage this issue to gain access to the affected system and launch further attacks against it. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. account = "bank"; password = "bank";...

ClassSystem 2.02.3 - MessageReply.php?teacher_id SQL Injection

ClassSystem 2.02.3 - MessageReply.php?teacherid SQL Injection source: https://www.securityfocus.com/bid/29372/info ClassSystem is prone to multiple input-validation vulnerabilities because it fails to sufficiently sanitize user-supplied data. These issues include multiple SQL-injection...

digitalhive-sql.txt

body margin:3%; font-size:10px; color:FFFFFF; font-family:Verdana,Arial; background-color:1a1a1a; text-align: center; input background:303030; color:FFFFFF; font-family:Verdana,Arial; font-size:10px; vertical-align:middle; border-left:1px solid 5d5d5d; border-right:1px solid 121212;...

CVE-2007-5264

The CVE-2007-5264 issue affects Battlefront Dropteam 1.3.3 and earlier. The vulnerability is that the game client sends the user’s online account name and password to the game server, allowing malicious servers to steal credentials (partial confidentiality impact). The NVD entry cites a base scor...

When the hack is actually very simple to find out the password, only need 1 seconds-vulnerability warning-the black bar safety net

Every day passwords, please! Tired! This is not a“dig pit, 掭 level, then dig pit”? The point of the“remember password”! Let the computer remember, I believe it won't betray me!” If you think this way could be dangerous! The following look at the computer how would betray you! By means of a small...

Default Password (informix) for 'informix' Account

The password for the account 'informix' on the remote host is 'informix'. An attacker may leverage this issue to gain access to the affected system and launch further attacks against it. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. account = "informix"; password = "informix";...

The reproduction of social engineering-vulnerability warning-the black bar safety net

Article author: withered Ling roseN. C. P. H Information source: evil octal information security teamwww.eviloctal.com to This is my osmosis in the process of a real experience,I would have thought after two days of time to get to the master server,the Master Station program on the Master Station...

Cyber thieves ten trick-vulnerability warning-the black bar safety net

Peeping five formula One, you enter the account number when not found behind the eye, someone secretly took down your account. Second, you in the cafe Internet, after the Internet leaves a record, someone with the decryption tool will be your password to unscramble it. Third, you go to repair...

Easy File Sharing Web Server protection bypass

By using alternative NTFS-streams it's possible to retrieve protected data, including accounts and passwords...

Collateral: the use of tools to crack Foxmail password-vulnerability warning-the black bar safety net

Foxmail in the country has a large number of users due to various reasons, many users need to Foxmail inside of email messages, email account settings, etc. transferred to other E-mail software, or forgot the account password, email password and put your own lock on the door. However, due to the...

CVE-2006-0947

CVE-2006-0947 affects Thomson SpeedTouch modem firmware 5.3.2.6.0. Affected component is the NewUser function where the 31 parameter can create accounts that the administrator cannot delete, due to filtering/cleansing in the admin interface. The issue allows remote attackers to create non-deletab...

Design/Logic Flaw

PunBB 1.2.10 and earlier allows remote attackers to conduct brute force guessing attacks for an account's password, which may be as short as 4 characters...

CVE-2006-0569

Papoo 2.1.4 and earlier contain a Cross-site scripting (XSS) vulnerability in user_class.php that allows remote attackers to inject arbitrary web script or HTML via the username field during new account registration. The flaw is documented across multiple sources (NVD, CVE list, and related recor...

CVE-2006-0100

CVE-2006-0100 describes a buffer overflow in NicoFTP 3.0.1.19 and earlier. The vulnerability could allow local users to execute arbitrary code by supplying a long string in the "Name of site" field of an FTP account. The program runs with the invoking user’s privileges, so exploitation would not ...

Windows password weakness

Added: 12/19/2005 CVE: CVE-1999-0503 Background Passwords are the most commonly used method of authenticating users to a server. The combination of a login name and password is used to verify the identity of a user requesting access, and to determine what parts of the server the user has permissi...

CVE-2004-2532

Serv-U FTP server before 5.1.0.0 has a default account and password for local administration, which allows local users to execute arbitrary commands by connecting to the server using the default administrator account, creating a new user, logging in as that new user, and then using the SITE EXEC...

Debian GNU/Linux Sendmail Default SASL Password

The remote host is running a Sendmail server with a default SASL password of 'sendmail' / 'sendmailpwd'. A spammer may use this account to use the remote server as a spam relay for the internet. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid14832; scriptversion"1.16...

CVE-2004-0082

CVE-2004-0082 affects Samba 3.0.0 and 3.0.1. When creating an account with the account marked as disabled, the mksmbpasswd.sh script may overwrite the user password with data from an uninitialized buffer, potentially allowing the account to be accessed with a guessable password. The issue arises ...

sambar.txt

Sambar Proxy Multible Vulnerabilities ===================================== I found some vulnerabilitites in Sambar Webproxy www.sambar.com, which allow the sambar admin access to files outside of the application directories. Since Sambar comes with no password for admin as default, it might be a...