CVE-2011-0720

Unspecified vulnerability in Plone 2.5 through 4.0, as used in Conga, luci, and possibly other products, allows remote attackers to obtain administrative access, read or create arbitrary content, and change the site skin via unknown vectors...

Cisco Tandberg E, EX, and C Series default root credentials

Overview Cisco's Tandberg C series endpoints and E/EX personal video units that run software versions prior to TC4.0.0 have a root administrator account enabled by default with no password. Description Cisco Advisory cisco-sa-20110202-tandberg states:"This vulnerability affects Tandberg C Series...

Government, Military Sites Hacked, Data and Access for Sale

The Web site of the U.S. military’s Communications-Electronics Command CECOM was off line on Monday after reports that access to the site was among those being fenced by hackers in an underground forum. The CECOM home page, cecom.army.mil displayed a message saying the site was “temporarily...

CruxCMS Multiple Input Validation Vulnerabilities

CruxCMS is prone to multiple input-validation vulnerabilities, including multiple security-bypass issues, multiple arbitrary-file- upload issues, multiple SQL-injection issues, a local file-include issue, a cross-site-scripting issue and multiple information- disclosure issues. These issues occur...

Pandora FMS Console Default Credentials

It is possible to log into the remote Pandora FMS console by providing the default credentials admin / pandora. A remote attacker can exploit this to gain administrative control of the Pandora FMS installation. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc';...

Alguest 1.1 - Multiple Cookie Authentication Bypass Vulnerabilities

Alguest 1.1 - Multiple Cookie Authentication Bypass Vulnerabilities source: https://www.securityfocus.com/bid/45175/info Alguest is prone to multiple authentication-bypass vulnerabilities. Attackers can exploit this issue to gain administrative control of the affected application. Alguest...

Alguest 1.1 - Multiple Cookie Authentication Bypass Vulnerabilities

source: https://www.securityfocus.com/bid/45175/info Alguest is prone to multiple authentication-bypass vulnerabilities. Attackers can exploit this issue to gain administrative control of the affected application. Alguest 1.1c-patched is vulnerable; other versions may also be affected. The...

HP Systems Insight Control Detection

HP Systems Insight Control implements infrastructure management and has the ability to deploy, migrate, monitor, control, and optimize IT infrastructure through a management console. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid50539; scriptversion"1.7";...

CVE-2010-3122

The DevonIT thin-client management tool relies on a shared secret for authentication but transmits the secret in cleartext, which makes it easier for remote attackers to discover the secret value, and consequently obtain administrative control over client machines, by sniffing the network...

Authentication flaw

The DevonIT thin-client management tool relies on a shared secret for authentication but transmits the secret in cleartext, which makes it easier for remote attackers to discover the secret value, and consequently obtain administrative control over client machines, by sniffing the network...

CVE-2010-3122

The DevonIT thin-client management tool relies on a shared secret for authentication but transmits the secret in cleartext, which makes it easier for remote attackers to discover the secret value, and consequently obtain administrative control over client machines, by sniffing the network...

Pre Classified Listing SQL Injection

1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site : Inj3ct0r.com 0 1 + Support e-mail :...

ManageEngine ADAudit Plus Default Credentials

It is possible to log into the remote ADAudit Plus installation by providing the default credentials. A remote attacker could exploit this to gain administrative control of the ADAudit Plus installation. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc';...

Apache Axis2 Default Credentials

The installation of Apache Axis2 hosted on the remote web server uses a default set of credentials to control access to its administrative console. A remote attacker can exploit this to gain administrative control. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...

NolaPro Default Credentials

The installation of NolaPro on the remote web server uses the default username and password to control access to its administrative console. Knowing these, an attacker can gain administrative control of the affected application. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...

TaskFreak! Default Credentials

The installation of TaskFreak! hosted on the remote web server uses the default username and password to control access to its administrative console. Knowing these, an attacker can gain control of the affected application. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...

Hyperic HQ Web GUI Default Credentials

It is possible to log into the remote Hyperic HQ installation using its default credentials. A remote attacker could exploit this to gain administrative control of the application. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if...

Oracle eBusiness Suite Cross Site Scripting / Bypass

Hacktics Research Group Security Advisory http://www.hacktics.com/details=;view=Resources%7CAdvisory By Shay Chen, Hacktics. 14-Dec-2009 =========== I. Overview =========== During a penetration test performed by Hacktics' experts, certain vulnerabilities were identified in the Oracle eBusiness...

Droid Smartphone Hacked for Jailbreaking

A hacker has unleashed an exploit that lets a user wrest administrative root control of a Motorola Droid smartphone. Read the full article. Dark Reading...

Request Tracker Default Credentials

It is possible to log into the Best Practical Solutions Request Tracker RT application by providing default credentials. A remote attacker can exploit this to gain administrative control. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; i...