123 Flashchat Directory Traversal / Cross Site Scripting

|------------------------------------------------------------------| | | | / / / / | | / / / / / / / \ / / / / \ | | / // // / / / / / // / / / / / // / // / / / / / / | | /// //,// // //,// // // | | | | http://www.corelan.be:8800 | | [email protected] | | |...

123 Flashchat version 7.8 Multiple Remote Vulnerabilities

Exploit for windows platform in category remote exploits ========================================================= 123 Flashchat version 7.8 Multiple Remote Vulnerabilities ========================================================= |-----------------------------------------------------------------...

123 FlashChat 7.8 - Multiple Vulnerabilities

123 FlashChat 7.8 - Multiple Vulnerabilities |------------------------------------------------------------------| | | | / / / / | | / / / / / / / \ / / / / \ | | / // // / / / / / // / / / / / // / // / / / / / / | | /// //,// // //,// // // | | | | http://www.corelan.be:8800 | |...

123 FlashChat 7.8 - Multiple Vulnerabilities

|------------------------------------------------------------------| | | | / / / / | | / / / / / / / \ / / / / \ | | / // // / / / / / // / / / / / // / // / / / / / / | | /// //,// // //,// // // | | | | http://www.corelan.be:8800 | | [email protected] | | |...

Drupal 6.15 Twitter module v 6.x-2.6 clear text Vulnerability

Exploit for unknown platform in category web applications ====================================================================================== Drupal 6.15 Twitter module version 6.x-2.6 clear text credential storage vulnerability...

Huawei MT882 Modem/Router Multiple Vulnerabilities

0 Version: V100R002B020 ARG-T Firmware Release: 3.7.9.98 Greets to my bests friends: DeepLook, R00T, systemfailure, Ciber34, ANDSQLiTor, LaPeke Greets to friend: Scuarplex, Crl, KiKoArg, ZeRO, DNSX, PunkiD DecodeX01atgmaildotcom Target device ip 10.0.0.2:80 default ip:port Server information...

3COM OfficeConnect routers multiple security vulnerabilities

Backdoor accounts, password stored in clear text, code execution...

Clear Text Storage of Password in CS-MARS v6.0.4 and Earlier

First after logging onto the console either pnlog mailto, or pnlog scpto will send the logs off of the box to a destination you specify, you can also display the logs using pnlog show. pnadmin$ pnlog scpto [email protected]:/home/ryan scp /tmp/error-logs.tar.gz...

Camfrog.com SQL Injection

Camfrog.com suffers from a remote SQL injection vulnerability Millions of accounts are exposed Vulnerable parameter: popular.php?orderby=&st=dir&r=&cg= Available database: informationschema, cf, cfgift, cfimage, cfonline Users password are in CLEAR TEXT !!! More on...

Comtrend HG536+ Privilege Escalation

Comtrend HG536+ vulnerabilities Vendor url:www.comtrend.com Advisore Url:http://lostmon.blogspot.com/2009/04/ comtrend-hg536-vulnerabilities.html Vendor notify: NO Description By vendor The HG536+ is an 802.11g 54Mbps wireless and wired Local Area Network WLAN ADSL router. Four 10/100 Base-T...

Ubuntu Update for elinks vulnerability USN-519-1

Ubuntu Update for Linux kernel vulnerabilities USN-519-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN5191.nasl 7969 2017-12-01 09:23:16Z santu $ Ubuntu Update for elinks vulnerability USN-519-1 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH,...

Fedora Update for krb5 FEDORA-2007-034

Check for the Version of krb5 OpenVAS Vulnerability Test Fedora Update for krb5 FEDORA-2007-034 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of...

Default credentials

Red Hat Certificate System 7.2 stores passwords in cleartext in the UserDirEnrollment log, the RA wizard installer log, and unspecified other debug log files, and uses weak permissions for these files, which allows local users to discover passwords by reading the files...

COMTREND CT-536/HG-536+ XSS / Denial Of Service

============================================= INTERNET SECURITY AUDITORS ALERT 2007-002 - Original release date: 31st January, 2007 - Last revised: 22th December, 2008 - Discovered by: Daniel Fernandez Bleda - Severity: 5/5 ============================================= I. VULNERABILITY...

Symantec Altiris Deployment Solution Elevation of Privilege Clear Text Password in Memory

SUMMARY An elevation of privilege issue via a privileged access password stored in memory has been identified and resolved in the Symantec Altiris Deployment Solution. Successful exploitation could potentially allow a non-privileged user with authorized access to the system hosting the Deployment...

Risky Chrome (The perfect cleartext password offering )

Google Chrome : The perfect password offering Tested on pair.com Webmail, might work on others as well with Google Chrome 0.2.149.27 Chrome stores saves passwords in CLEAR TEXT. 1 Goto webmail.pair.com Pair Webmail provides https and doesn't have any option on its page to save password. 2 Enter...

googlechrome-cleartext.txt

Google Chrome : The perfect password offering Tested on pair.com Webmail, might work on others as well with Google Chrome 0.2.149.27 Chrome stores saves passwords in CLEAR TEXT. 1 Goto webmail.pair.com Pair Webmail provides https and doesn't have any option on its page to save password. 2 Enter...

Default credentials

EMC Dantz Retrospect Backup Client 7.5.116 sends the password hash in cleartext at an unspecified point, which allows remote attackers to obtain sensitive information via a crafted packet...

CVE-2008-2881

CVE-2008-2881 affects Relative Real Estate Systems 3.0 and earlier. The vulnerability arises because passwords are stored in cleartext in a MySQL database, enabling context-dependent attackers to obtain sensitive information. The provided documents do not specify exploitation details, affected ve...

PolyPager <= 1.0rc2 (SQL/XSS) Multiple Remote Vulnerabilities

Exploit for unknown platform in category web applications ============================================================= PolyPager = 1.0rc2 SQL/XSS Multiple Remote Vulnerabilities ============================================================= ,--^----------,--------,-----,-------^--, | |||||||||...