Intuit QuickBooks Desktop 2017 Credential Disclosure Vulnerability

Intuit QuickBooks Desktop 2017 suffers from an administrative credential disclosure vulnerability. + Credits: Maxim Tomashevich + Website: https://www.thegrideon.com/quickbooks-forensics.html + Details: https://www.thegrideon.com/qb-internals-2017.html Vendor: --------------------- www.intuit.com...

CVE-2016-3391

Microsoft Internet Explorer 10 and 11 and Microsoft Edge allow context-dependent attackers to discover credentials by leveraging access to a memory dump, aka "Microsoft Browser Information Disclosure Vulnerability."...

Cisco Firepower Management Console 6.0 Post Auth Report Download Directory Traversal

This module exploits a directory traversal vulnerability in Cisco Firepower Management under the context of www user. Authentication is required to exploit this vulnerability. Module Options msf use auxiliary/scanner/http/cisco/firepowerdownload msf undefinedfirepowerdownload show actions...

Apple OS X NSSecureTextField Information Disclosure Vulnerability

Apple OS X is a specialized operating system developed by Apple for Mac computers.NSSecureTextField is one of the components used to mask passwords. An information disclosure vulnerability exists in NSSecureTextField in Apple OS X versions prior to 10.12, which can be exploited by an attacker to...

PT-2016-6108

Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 10 Description The issue concerns the handling of certificates in Mail, making it easier for man-in-the-middle attackers to discover mail credentials. Recommendations For versions prior to 10, update to version 10 o...

BINOM3 Electric Power Quality Meter Sensitive Information Disclosure Vulnerability

The BINOM3 Electric Power Quality Meter is a universal multifunctional power quality monitor. BINOM3 Electric Power Quality Meter is vulnerable to sensitive information disclosure. Since the management portal is configured for HTTP by default, an attacker in the right position could sniff all log...

LogMeIn Client 1.3.2462 (64bit) Credential Disclosure

LogMeIn Client v1.3.2462 64bit Local Credentials Disclosure Tested on Windows Windows Server 2012 R2 64bit, English Vendor Homepage @ https://secure.logmein.com/home/en Date 06/09/2016 Bug Discovery by: Alexander Korznikov https://www.linkedin.com/in/nopernik http://korznikov.com/ Viktor Minin...

WIN-911 7.17.00 - Multiple Vulnerabilities

WIN-911 7.17.00 - Multiple Vulnerabilities Title: WIN-911 - Insecure File Permissions EoP CWE Class: CWE-276: Incorrect Default Permissions Date: 05/09/2016 Vendor: Win911 Product: WIN-911 Type: Alarm Notification Software Version: V7.17.00 Download URL: through Rockwell Automation downloads:...

WIN-911 7.17.00 - Multiple Vulnerabilities

Title: WIN-911 - Insecure File Permissions EoP CWE Class: CWE-276: Incorrect Default Permissions Date: 05/09/2016 Vendor: Win911 Product: WIN-911 Type: Alarm Notification Software Version: V7.17.00 Download URL: through Rockwell Automation downloads:...

Vanderbilt IP-Camera Local File Disclosure and Credential Disclosure Vulnerabilities

Vanderbilt IP-Camera is prone to local file disclosure and credential disclosure vulnerabilities SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-onl...

Honeywell IP-Camera LFI and Credential Disclosure Vulnerabilities

Honeywell IP-Camera is prone to local file disclosure and credential disclosure vulnerabilities SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Vanderbilt IP-Camera CCPW3025-IR / CVMW3025-IR Credential Disclosure

Advisory Information ======================================== Title : Vanderbilt IP-Camera CCPW3025-IR + CVMW3025-IR Remote Credentials Disclosure Vendor Homepage : https://is.spiap.com/ Remotely Exploitable : Yes Tested on Camera types : CCPW3025-IR , CVMW3025-IR Product References :...

JVC IP-Camera VN-T216VPRU Credential Disclosure

Advisory Information ======================================== Title : JVC IP-Camera VN-T216VPRU Remote Credentials Disclosure Vendor Homepage : http://pro.jvc.com/ Remotely Exploitable : Yes Tested on Camera types : VN-T216VPRU Product References :...

C2S DVR Management Credential Disclosure / Authentication Bypass

Advisory Information ======================================== Title : C2S DVR Management Remote Credentials Disclosure & Authentication Bypass Vendor Homepage : http://www.cash2s.com/en/ Remotely Exploitable : Yes Tested on Camera types : IRDOME-II-C2S, IRBOX-II-C2S, DVR Vulnerabilities :...

SIEMENS IP Cameras (Multiple Models) - Credential Disclosure / Configuration Download

Exploit for cgi platform in category web applications Multiple SIEMENS IP Cameras auth bypass configuration download Tested: SIEMENS IP Camera CCID1410-ST X.1.0.24 SIEMENS IP Camera CCMW1025 x.2.2.1798 SIEMENS IP Camera CCMS2025 x.2.2.1798 SIEMENS IP Camera CVMS2025-IR x.2.2.1798 SIEMENS IP Camer...

SIEMENS IP Cameras (Multiple Models) - Credential Disclosure Configuration Download

SIEMENS IP Cameras Multiple Models - Credential Disclosure Configuration Download Multiple SIEMENS IP Cameras auth bypass configuration download Tested: SIEMENS IP Camera CCID1410-ST X.1.0.24 SIEMENS IP Camera CCMW1025 x.2.2.1798 SIEMENS IP Camera CCMS2025 x.2.2.1798 SIEMENS IP Camera CVMS2025-IR...

SIEMENS IP Cameras (Multiple Models) - Credential Disclosure / Configuration Download

Multiple SIEMENS IP Cameras auth bypass configuration download Tested: SIEMENS IP Camera CCID1410-ST X.1.0.24 SIEMENS IP Camera CCMW1025 x.2.2.1798 SIEMENS IP Camera CCMS2025 x.2.2.1798 SIEMENS IP Camera CVMS2025-IR x.2.2.1798 SIEMENS IP Camera CVMS2025-IR CxMS2025V2458 SIEMENS IP Camera...

Siemens IP-Camera Unauthenticated Remote Credential Disclosure

Advisory Information ======================================== Title : SIEMENS IP-Camera Unauthenticated Remote Credentials Disclosure Vendor Homepage : https://www.siemens.com Remotely Exploitable : Yes Versions Affected : x.2.2.1798, CxMS2025V2458SP1, x.2.2.1798, x.2.2.1235 Tested on Camera...

CVE-2016-3312

ActiveSyncProvider in Microsoft Windows 10 Gold and 1511 allows attackers to discover credentials by leveraging failure of Universal Outlook to obtain a secure connection, aka "Universal Outlook Information Disclosure Vulnerability."...

Updated chromium-browser-stable packages fix security vulnerability

Multiple unspecified vulnerabilities in chromium before 52.0.2743.82 allow attackers to cause a denial of service or possibly have other impact via unknown vectors. CVE-2016-1705 The PPAPI implementation in Chromium before 52.0.2743.82 does not validate the origin of IPC messages to the plugin...