British Man Indicted for Hacking U.S. Governement

The United States District Court in New Jersey is accusing British citizen Lauri Love, and others not named, of conspiring to and illegally accessing various government and military networks. The purpose of these attacks, prosecutors said, was to steal vast stores of personally identifiable and...

Adobe Hackers Hit Other Companies

The attackers behind the Adobe hack and breaches against data brokers such as LexisNexis have also been linked to similar intrusions against other unnamed organizations. Security expert Alex Holden, who along with security blogger Brian Krebs uncovered the data lost in the Adobe breach, said thos...

Adobe Gets Hacked; Hackers Steal 2.9 million Adobe Customers accounts

Hackers broke into Adobe Systems' internal network on Thursday, stealing personal information on 2.9 million customers and the source code for several of Adobe's most popular products. This an absolutely massive blow to Adobe, especially their reputation. Adobe, which makes Photoshop and other...

Adobe Gets Hacked; Hackers Steal 2.9 million Adobe Customers accounts

Hackers broke into Adobe Systems’ internal network on Thursday, stealing personal information on 2.9 million customers and the source code for several of Adobe’s most popular products. This an absolutely massive blow to Adobe, especially their reputation. Adobe, which makes Photoshop and other...

Adobe Acrobat, ColdFusion Source Code, Customer Data Stolen

Attackers accessed customer IDs, encrypted passwords as well as source code for a number of Adobe products, Adobe chief security officer Brad Arkin announced. Arkin said Adobe is working with law enforcement on the breach in which attackers accessed source code for Adobe Acrobat, ColdFusion,...

Adobe JRun Detection

The remote host has Adobe JRun installed. JRun is an application server for Java applications. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid70175; scriptversion"1.8"; scriptsetattributeattribute:"pluginmodificationdate", value:"2023/02/06"; scriptnameenglish:"Adobe...

CVE-2010-5290

The authentication process in Adobe ColdFusion before 10 does not require knowledge of the cleartext password if the password hash is known, which makes it easier for context-dependent attackers to obtain administrative privileges by leveraging read access to the configuration file, a different...

Design/Logic Flaw

The authentication process in Adobe ColdFusion before 10 does not require knowledge of the cleartext password if the password hash is known, which makes it easier for context-dependent attackers to obtain administrative privileges by leveraging read access to the configuration file, a different...

CVE-2010-5290

Technical details for CVE-2010-5290 are not publicly available in the provided documents; none of the connected items describe affected products, versions, vectors, or remediation. Monitor for updates.

CVE-2010-5290

The authentication process in Adobe ColdFusion before 10 does not require knowledge of the cleartext password if the password hash is known, which makes it easier for context-dependent attackers to obtain administrative privileges by leveraging read access to the configuration file, a different...

PT-2013-1384

Name of the Vulnerable Software and Affected Versions Adobe ColdFusion versions prior to 10 Description The authentication process in Adobe ColdFusion does not require knowledge of the cleartext password if the password hash is known. This makes it easier for attackers to obtain administrative...

CVE-2010-5290: Undefined Security Weakness

The authentication process in Adobe ColdFusion before 10 does not require knowledge of the cleartext password if the password hash is known, which makes it easier for context-dependent attackers to obtain administrative privileges by leveraging read access to the configuration file, a different...

Adobe ColdFusion 9 Administrative Login Bypass Vulnerability

Exploit for windows platform in category web applications +------------------------------------------------------------------------------+ | Title: Adobe ColdFusion 9 Administrative Login Bypass | +--------------------+---------------------------------------------------------+ | Release Date |...

Adobe ColdFusion 9 - Administrative Authentication Bypass

Adobe ColdFusion 9 - Administrative Authentication Bypass -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 +------------------------------------------------------------------------------+ | Packet Storm Advisory 2013-0819-2 | | http://packetstormsecurity.com/ |...

Adobe ColdFusion 9 - Administrative Authentication Bypass

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 +------------------------------------------------------------------------------+ | Packet Storm Advisory 2013-0819-2 | | http://packetstormsecurity.com/ | +------------------------------------------------------------------------------+ | Title: Adobe...

Adobe ColdFusion Authentication Bypass Vulnerability (APSA13-01)

Adobe ColdFusion is prone to a remote authentication bypass vulnerability. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Packet Storm Advisory 2013-0819-2 - Adobe ColdFusion 9 Administrative Login Bypass

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 +------------------------------------------------------------------------------+ | Packet Storm Advisory 2013-0819-2 | | http://packetstormsecurity.com/ | +------------------------------------------------------------------------------+ | Title: Adobe...

Adobe ColdFusion RDS Authentication Bypass

Adobe ColdFusion 9.0, 9.0.1, 9.0.2, and 10 allows remote attackers to bypass authentication using the RDS component. Due to default settings or misconfiguration, its password can be set to an empty value. This allows an attacker to create a session via the RDS login that can be carried over to th...

Adobe ColdFusion all versions LFD exploit (without Metasploit)

This code exploit a Local FIle Disclosure vulnerability in ColdFusion that allows attackers to dump administrator passwords and log into the admin panel. !/usr/bin/perl ColdFusion Locale File Disclosure exploit without Metasploit Google Dork: intitle:"Index of /CFIDE/" administrator Date:...

Adobe ColdFusion 9/9.0.1/9.0.2 On JRun DoS (APSB13-19) (credentialed check)

The remote Windows host is running a version of ColdFusion that is affected by an unspecified denial of service vulnerability. A remote attacker can exploit this without authentication. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid68929; scriptversion"1.10";...