Maxwebportal 1.36 - 'Password.asp' Change Password (3)

!/usr/bin/perl T r a p - S e t U n d e r g r o u n d H a c k i n g T e a m EXPLOIT FOR - MAX Portal All Versions Exploit By : A l p h a P r o g r a m m e r Sirus-v ; E-Mail : [email protected] This Xpl Change Admin's Pass in This Portal !! Discovered by: s d Gr33tz To == mhp0rtal ,...

Messenger Plus! instant messanger password protection bypass

It's possible to change password without entering old one...

Avaya P330 Stackable Switch Default Password

The remote host appears to be an Avaya P330 Stackable Switch with its default password set. An attacker could use this default password to gain remote access to the affected switch. This password could also be potentially used to gain other sensitive information about the remote network from the...

Thomson TCW690 - POST Password Validation

/ Thomson TCW690 POST Password Validation exploit Tested with hardware version 2.1 and software version ST42.03.0a Bug found by: MurDoK Date: 02.19.2005 sh-3.00$ gcc mdktcw690.c -o tcw690 sh-3.00$ ./tcw690 192.168.0.1 123 Thomson TCW690 POST Password Validation Change password exploit coded by...

CVE-2005-0288

CVE-2005-0288 concerns the Bottomline Webseries Payment Application. The change-password function does not require the old password when setting a new one, which could allow an authenticated user to change other users’ passwords. The description provided does not specify affected versions/builds ...

[SA12649] Baal Smart Forms "Admin Change Password" Security Bypass

TITLE: Baal Smart Forms "Admin Change Password" Security Bypass SECUNIA ADVISORY ID: SA12649 VERIFY ADVISORY: http://secunia.com/advisories/12649/ CRITICAL: Moderately critical IMPACT: Security Bypass WHERE: From remote SOFTWARE: Baal Smart Forms 3.x http://secunia.com/product/3949/ DESCRIPTION: ...

PT-2004-2554 · Unknown · Password Protect

Name of the Vulnerable Software and Affected Versions: Password Protect affected versions not specified Description: The issue is related to a cross-site scripting XSS vulnerability. This vulnerability allows remote attackers to inject arbitrary web script or HTML via the ShowMsg parameter in...

PT-2004-2553 · Unknown · Password Protect

Name of the Vulnerable Software and Affected Versions: Password Protect affected versions not specified Description: The issue allows remote attackers to execute arbitrary SQL statements and bypass authentication. This can be achieved through various parameters and files, including 1 admin or Pas...

Linux User Account Activity Change Password (via Splunk): usermod, plain

Binary data 710015.prm...

Pirelli AGE mB Router Default Password (microbusiness) for 'admin' Account

The remote host is a Pirelli AGE mB microBusiness router with its default password set admin/microbusiness. An attacker could telnet to it and reconfigure it to lock the owner out and to prevent him from using his Internet connection, and do bad things. Changes by Tenable: - only attempt to login...

Microsoft Windows - Users Information : Can't Change Password

Using the supplied credentials, Nessus was able to list users who can not change their own passwords. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid10896; scriptversion"1.20"; scriptcvsdate"Date: 2018/08/13 14:32:39"; scriptnameenglish:"Microsoft Windows - Users...

NT user (who is locked changing his/her password by administrator ) can bypass the security policy and Change the password.

Hi, Our PT team found the following vulnerability in security policy implementation with NT Server and IIS 4.0. NT user who is locked changing his/her password by administrator can bypass the security policy and Change the password. Vulnerable: Microsoft Windows NT Server 4.0 + IIS 4.0 + Service...

Oracle Database Listener Program (tnslsnr) Service Blank Password

The remote Oracle Listener Program tnslsnr has no password assigned. An attacker may use this fact to shut it down arbitrarily, thus preventing legitimate users from using it. %NASLMINLEVEL 70300 oracletnslsnrsecurity.nasl - NASL script to do a TNS STATUS command against the Oracle tnslsnr and gr...

Shiva Integrator Default Password

The remote Shiva router uses the default password. This means that anyone who has downloaded a user manual can telnet to it and reconfigure it to lock you out of it, and to prevent you to use your internet connection. This script was written by Stefaan Van Dooren See the Nessus Scripts License fo...

McMurtrey/Whitaker & Associates Cart32 2.6/3.0 - Remote Administration Password

source: https://www.securityfocus.com/bid/1153/info Within cart32.exe, entering any password by way of http://target/scripts/cart32.exe/cart32clientlist, a remote user could obtain vital client information such as username, password, credit card numbers, and other crucial details. Passwords will...

Security Advisory

--------------------------------------------------------------------- Red Hat, Inc. Security Advisory Synopsis: Piranha web GUI exposure Advisory ID: RHSA-2000:014-10 Issue date: 2000-04-18 Updated on: 2000-04-24 Product: Red Hat Linux Keywords: piranha remote CGI command Cross references: php -...

webramp-M3-entre.txt

Date: Thu, 21 Jan 1999 15:20:56 -0500 From: James Egelhof To: [email protected] Subject: Re: WebRamp M3 remote network access bug On Thu, 21 Jan 1999, John Stanley wrote: If you are using this box, and you see this bug, and you have NOT changed the admin password from the default, DO SO...