Linux: Unique primary groups for user accounts

The password file stores information about users such like username, UID, GID, etc. Users with same group can access and unintentionally or maliciously modify another user Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyrig...

Cross site request forgery (csrf)

In TopManage OLK 2020, login CSRF can be chained with another vulnerability in order to takeover admin and user accounts...

CVE-2020-6844

Summary: CVE-2020-6844 concerns TopManage OLK 2020 with a/login CSRF vulnerability that can be chained with another vulnerability to takeover admin and user accounts. The combined effect is the potential takeover of accounts due to cross-site request forgery weaknesses in the login flow. What is ...

CVE-2020-6844

In TopManage OLK 2020, login CSRF can be chained with another vulnerability in order to takeover admin and user accounts...

ThemeREX Addons - Remote Code Execution

"This flaw allows attackers to remotely execute code on a site with the plugin installed, including the ability to execute code that can inject administrative user accounts." Note WPScanTeam: There are major version inconsistencies in the trxaddons shipped with the affected themes. As a result, a...

The vulnerability of the IBM Security Identity Manager software lies in the lack of requirements for complexity of user passwords, which allows a perpetrator to gain access to user accounts.

The vulnerability of the IBM Security Identity Manager software is related to the lack of requirements regarding the complexity of user passwords. Exploiting this vulnerability can allow a malicious actor to gain access to user accounts remotely...

FTPShell Server 6.85 Buffer Overflow

!/usr/bin/python Exploit Title: FTPShell Server 6.85 - Add Account Buffer Overflow Date: December 2nd, 2019 Exploit Author: boku Vendor Homepage: http://www.ftpshell.com/index.htm SOftware Link: http://www.ftpshell.com/downloadserver.htm Program Name: FTPShell Server Secure Plus edition Version:...

CVE-2013-6362

Xerox ColorCube and WorkCenter devices in 2013 had hardcoded FTP and shell user accounts...

Hardcoded credentials

Xerox ColorCube and WorkCenter devices in 2013 had hardcoded FTP and shell user accounts...

CVE-2013-6362

Xerox ColorCube and WorkCenter devices in 2013 had hardcoded FTP and shell user accounts...

CVE-2013-6362

Xerox ColorCube and WorkCenter devices (2013) are affected by a vulnerability due to hardcoded FTP and shell user accounts. The issue arises from embedded credentials that cannot be changed, enabling potential unauthorized access or abuse of these services on affected models. The connected record...

Siemens SIPORT MP

1. EXECUTIVE SUMMARY CVSS v3 6.5 ATTENTION: Exploitable remotely/low skill level to exploit Vendor: Siemens Equipment: SIPORT MP Vulnerability: Insufficient logging 2. RISK EVALUATION Successful exploitation of this vulnerability could allow the attacker to create special accounts with...

CVE-2019-19662

A CSRF vulnerability exists in the Web File Manager's Create/Delete Accounts functionality of Rumpus FTP Server 8.2.9.1. By exploiting it, an attacker can Create and Delete accounts via RAPR/TriggerServerFunction.html...

Cross site request forgery (csrf)

A CSRF vulnerability exists in the Web File Manager's Create/Delete Accounts functionality of Rumpus FTP Server 8.2.9.1. By exploiting it, an attacker can Create and Delete accounts via RAPR/TriggerServerFunction.html...

CVE-2019-19662

A CSRF vulnerability exists in the Web File Manager's Create/Delete Accounts functionality of Rumpus FTP Server 8.2.9.1. By exploiting it, an attacker can Create and Delete accounts via RAPR/TriggerServerFunction.html...

CVE-2019-19659

A CSRF vulnerability exists in the Web File Manager's Edit Accounts functionality of Rumpus FTP Server 8.2.9.1. By exploiting it, an attacker can take over a user account by changing the password, update users' details, and escalate privileges via RAPR/DefineUsersSet.html...

CVE-2019-19659

A CSRF vulnerability exists in the Web File Manager's Edit Accounts functionality of Rumpus FTP Server 8.2.9.1. By exploiting it, an attacker can take over a user account by changing the password, update users' details, and escalate privileges via RAPR/DefineUsersSet.html...

CVE-2019-19659

A CSRF vulnerability exists in the Web File Manager's Edit Accounts functionality of Rumpus FTP Server 8.2.9.1. By exploiting it, an attacker can take over a user account by changing the password, update users' details, and escalate privileges via RAPR/DefineUsersSet.html...

CVE-2020-8771

The Time Capsule plugin before 1.21.16 for WordPress has an authentication bypass. Any request containing IWPJSONPREFIX causes the client to be logged in as the first account on the list of administrator accounts...

Kronos WebTA 4.0 - Authenticated Remote Privilege Escalation Exploit

Exploit for java platform in category web applications Exploit Title: Kronos WebTA 4.0 - Authenticated Remote Privilege Escalation Discovered by: Elwood Buck & Nolan B. Kennedy of Mindpoint Group Exploit Author: Nolan B. Kennedy nxkennedy Discovery date: 2019-09-20 Vendor Homepage:...