PHP <= 4.3.9 & phpBB 2.x with unserialize() Remote Exploit (compiled)

Exploit for unknown platform in category web applications ===================================================================== PHP tested : phpbbmemorydump.exe "http://site.com/phpbb/" 30000 -cookiename=phpbb2support a.txt result: - string detected : /home/virtual/site.com/phpBB/config.php -...

POP3 Cleartext Logins Permitted

The remote host is running a POP3 daemon that allows cleartext logins over unencrypted connections. An attacker can uncover user names and passwords by sniffing traffic to the POP3 daemon if a less secure authentication mechanism eg, USER command, AUTH PLAIN, AUTH LOGIN is used. Note: This plugin...

GLSA-200403-04 : Multiple security vulnerabilities in Apache 2

The remote host is affected by the vulnerability described in GLSA-200403-04 Multiple security vulnerabilities in Apache 2 Three vulnerabilities were found: A memory leak in sslengineio.c for modssl in Apache 2.0.48 and below allows remote attackers to cause a denial of service attack via plain...

[SA12366] iChain Multiple Vulnerabilities

TITLE: iChain Multiple Vulnerabilities SECUNIA ADVISORY ID: SA12366 VERIFY ADVISORY: http://secunia.com/advisories/12366/ CRITICAL: Moderately critical IMPACT: Security Bypass, Cross Site Scripting, Exposure of system information, DoS WHERE: From remote SOFTWARE: Novell iChain 2.x...

SquirrelMail 1.2.x - From Email Header HTML Injection

source: https://www.securityfocus.com/bid/10450/info SquirrelMail is reported to be prone to a 'from' field email header HTML injection vulnerability. This issue is due to a failure of the application to properly sanitize user-supplied email header strings. An attacker can exploit this issue to...

X-News Password MD5 Hash Authentication Bypass

X-News is a news management system, written in PHP. X-News uses a flat-file database to store information. It will run on most Unix and Linux variants, as well as Microsoft Windows operating systems. X-News stores user ids and passwords, as MD5 hashes, in a world- readable file, 'db/users.txt'...

DCP-Portal 5.5 - advertiser.php?Password SQL Injection

DCP-Portal 5.5 - advertiser.php?Password SQL Injection source: https://www.securityfocus.com/bid/8739/info Multiple SQL Injection vulnerabilities have been discovered that affect DCP-Portal scripts. These issues are likely due to a lack of sufficient sanitization performed on user supplied URI...

Pablo Software Solutions FTP Service 1.2 - Plaintext Password

Pablo Software Solutions FTP Service 1.2 - Plaintext Password source: https://www.securityfocus.com/bid/7801/info It has been reported that Pablo FTP Service stores FTP User account passwords in plaintext format. As a result, these credentials could be exposed to other users. It should be noted...

D-Link DSL Broadband Modem SNMP Cleartext ISP Credential Disclosure

This script uses SNMP to obtain the account and password of the remote ADSL connection. D-Link DSL Broadband routers uses a default community string and stores the ISP credentials in cleartext. C Tenable Network Security, Inc. Ref: Date: 27 Mar 2003 15:31:41 -0000 From: Arhont Information Securit...

iDEFENSE Security Advisory 01.28.03: SSH2 Clients Insecurely Store Passwords

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 iDEFENSE Security Advisory 01.28.03: SSH2 Clients Insecurely Store Passwords AbsoluteTelnet, SecureCRT, Entunnel, SecureFx, and PuTTY http://www.idefense.com/advisory/01.28.03.txt January 28, 2003 I. BACKGROUND PuTTY is a free implementation of Telnet...

CuteCast 1.2 - User Credential Disclosure

source: https://www.securityfocus.com/bid/6127/info It has been reported that the default configuration of CuteCast is insecure. According to the report, CuteCast stores user information in a publicly accessible directory. This includes plaintext credentials...

SurfControl SuperScout Email Filter 3.5 - User Credential Disclosure

source: https://www.securityfocus.com/bid/5929/info SurfControl SuperScout Email Filter comes with a web-based interface to provide remote access to administrative facilities. One of the files userlist.asp that comes with the web interface contains a listing of administrative usernames/passwords...

Cacti security issues

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Name: Cacti security issues Original: http://www.knights-of-the-routing-table.org /advisories/krt00120020903cacti.txt - - General info - As quoted from http://www.rrdtool.org: "Cacti's goal is to be a complete frondend to rrdtool, storing all of the...

CVE-2001-1403

Bugzilla before 2.14 includes the username and password in URLs, which could allow attackers to gain privileges by reading the information from the web server logs, or by "shoulder-surfing" and observing the web browser's location bar...

Ipswitch WhatsUp Gold Default Admin Account

This WhatsUp Gold server still has the default password for the admin user account. An attacker can use this account to probe other systems on the network and obtain sensitive information about the monitored systems. %NASLMINLEVEL 70300 Copyright 2001 by H D Moore See the Nessus Scripts License f...

CVE-2001-1110

CVE-2001-1110 (EFTP 2.0.7.337) is documented as a remote-attack vulnerability where an attacker can obtain NETBIOS credentials by requesting information on a file in a network share, causing the server to send credentials to the share owner’s host and enabling the attacker to sniff the connection...

Microsoft Windows Server 2000 - RunAs Service Named Pipe Hijacking

// source: https://www.securityfocus.com/bid/3185/info The Windows 2000 RunAs service allows an application or service to be executed as a different user. It is accessed by holding down the shift key and right mouse clicking on an icon, then selecting 'Run as...' from the context menu. When the...

Respondus for WebCT 1.1.2 - Weak Password Encryption

Respondus for WebCT 1.1.2 - Weak Password Encryption source: https://www.securityfocus.com/bid/3228/info Respondus is an application designed to add functionality to WebCT's quiz, self-test and survey tools. WebCT is a commercial e-learning solution. When a user opts to have Respondus remember th...

Respondus for WebCT 1.1.2 - Weak Password Encryption

source: https://www.securityfocus.com/bid/3228/info Respondus is an application designed to add functionality to WebCT's quiz, self-test and survey tools. WebCT is a commercial e-learning solution. When a user opts to have Respondus remember the username/password for WebCT access, the information...

Trlinux Postaci Webmail 1.1.3 - Password Disclosure

source: https://www.securityfocus.com/bid/2029/info Postaci Webmail is a database-driven web e-mail system. PostACI contains a vulnerability in its default configuration that may allow a remote attacker to gain access to the underlying database. Webmail stores database username and password...