1913 matches found
polypager 1.0rc2 - SQL Injection / Cross-Site Scripting
================================================================= PolyPager = 1.0rc2 SQL/XSS Multiple Remote Vulnerabilities ================================================================= ,--^----------,--------,-----,-------^--, | ||||||||| --------' | O .. CWH Underground Hacking Team...
MyPHP CMS 0.3.1 - 'pid' SQL Injection
=============================================================== MyPHP CMS page.php pid Remote SQL Injection Vulnerability =============================================================== ,--^----------,--------,-----,-------^--, | ||||||||| --------' | O .. CWH Underground Hacking Team...
IBM WebSphere Application Server < 6.1.0.15 Multiple Vulnerabilities
Binary data 4424.prm...
[CSNC] OKI C5510MFP Printer Password Disclosure
COMPASS SECURITY ADVISORY http://www.csnc.ch/ Product: OKI C5510MFP Printer Vendor: OKI Printing Solutions http://www.okiprintingsolutions.com/ Subject: Printer Reveals Password / Password and the configuration can be altered without authentication Risk: High Effect: Remotely exploitable Author:...
Command injection
Cisco Adaptive Security Appliance ASA running PIX 7.0 before 7.0.7.1, 7.1 before 7.1.2.61, 7.2 before 7.2.2.34, and 8.0 before 8.0.2.11, when AAA is enabled, composes %ASA-5-111008 messages from the "test aaa" command with cleartext passwords and sends them over the network to a remote syslog...
Steganos Encrypted Safe NOT so safe
Sometimes greed can be the downfall of the greatest people and nations but in this case it's software. Steganos Encrypted File safe for Windows is one of the most commonly used file security systems in the world. They boast how excellent their encryption and how uncrackable they are. This is...
solaris/sparc connect-back (with XNOR encoded session) 600 bytes
No description provided by source. / black-RXenc-con-back-SOLARIS.c MIPS This is a relitivly small 600 byte shellcode that encodes all network trafic between the exploited process and the attacker. All clear-text shell i/o is encoded using a simple NOT algo before being transmitted on the wire...
CVE-2006-2185
PORTAL.NLM in Novell Netware 6.5 SP5 writes the username and password in cleartext to the abend.log log file when the groupOperationsMethod function fails, which allows context-dependent attackers to gain privileges...
CVE-2005-4777
Tashcom ASPEdit 2.9 stores the administration password aka the FTP password in cleartext in the registry, which might allow local users to view the password...
[SA19455] Samba Exposure of Machine Account Credentials
TITLE: Samba Exposure of Machine Account Credentials SECUNIA ADVISORY ID: SA19455 VERIFY ADVISORY: http://secunia.com/advisories/19455/ CRITICAL: Less critical IMPACT: Exposure of sensitive information WHERE: Local system SOFTWARE: Samba 3.x http://secunia.com/product/2999/ DESCRIPTION: A securit...
Cheops NG clear text authentication
A Cheops NG agent is running on the remote host. Users with a valid account on this machine can connect to this service and use it to map the network, port scan machines and identify running services. Passwords are transmitted in clear text and could be sniffed. More, using this Cheops agent, it ...
Cheops NG clear text authentication
A Cheops NG agent is running on the remote host. Description : Cheops NG is running on this port. Users with a valid account on this machine can connect to this service and use it to map your network, port scan machines and identify running services. Passwords are transmitted in clear text and...
CVE-2005-4828
Kolab Server 2.0.0 and 2.0.1 does not properly handle when a large email is sent with a "." in the wrong place, which causes kolabfilter to add another ".", which might break clear-text signatures and attachments. NOTE: it is not clear whether this issue crosses privilege boundaries, so this migh...
CVE-2005-4777
Tashcom ASPEdit 2.9 stores the administration password aka the FTP password in cleartext in the registry, which might allow local users to view the password...
TheServer clear text password
We were able to read the server.ini file It may contain sensitive information like clear text passwords. This flaw is known to affect TheServer. OpenVAS Vulnerability Test $Id: theservercleartext.nasl 8023 2017-12-07 08:36:26Z teissa $ Description: TheServer clear text password Authors: Michel...
TheServer clear text password
We were able to read the server.ini file It may contain sensitive information like clear text passwords. This flaw is known to affect TheServer. SPDX-FileCopyrightText: 2003 Michel Arboi Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective rig...
[SA17117] aeNovo Cross-Site Scripting and SQL Injection Vulnerabilities
TITLE: aeNovo Cross-Site Scripting and SQL Injection Vulnerabilities SECUNIA ADVISORY ID: SA17117 VERIFY ADVISORY: http://secunia.com/advisories/17117/ CRITICAL: Moderately critical IMPACT: Cross Site Scripting, Manipulation of data WHERE: From remote SOFTWARE: aeNovo...
Macromedia Breeze information leak
"reset password" feature stores password in clear text...
Local LiveUpdate server username / password information revealed by client
SUMMARY Risk Impact Medium Remote Access | Yes ---|--- Local Access | Yes Authentication Required | Yes Exploit publicly available | No AFFECTED PRODUCTS Product | Version | Build | Solution ---|---|---|--- LiveUpdate Client | 2.7 | 34 | LiveUpdate Client Update ADDITIONAL PRODUCT INFORMATION...
[Full-disclosure] ELSA Lancom Router Discloses the Administrator Password to Remote Users
It is reported that the default configuration allows a remote user to connect to the router via port 80 with a web browser and obtain the remote access password, which is apparently stored in clear text. The remote user can also change the router's configuration and can remotely upgrade the...