6975 matches found
Hewlett-Packard LeftHand Virtual SAN Appliance Password Hash Disclosure Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of HP LeftHand Virtual SAN Appliance. Authentication is not required to exploit this vulnerability. The flaw exists within the hydra component which listens by default on TCP port 13841. The hydra...
Anonymous hack 30000 accounts and Social Security Numbers from 'Telecom Italy'
"Please don't mind, its 5th of November" slogan for today ! Anonymous Hackers hacked into "Telecom Italy" www.telecomitalia.it and dump Social Security Number, Social Insurance Number, 30000 credentials and lots of vulnerabilities exposed. In a blog post hackers said,"Telecom Italy boasts 3000 XS...
Firefox < 10.0.6 Multiple Vulnerabilities (Mac OS X)
The installed version of Firefox is earlier than 10.0.6 and thus, is potentially affected by the following security issues : - Several memory safety issues exist, some of which could potentially allow arbitrary code execution. CVE-2012-1948 - An error related to drag and drop can allow incorrect...
WellinTech KingSCADA 3.1 < 2012-04-16 user.db Base-64 Encoding Local Credentials Disclosure
Binary data scadakingscada312012-04-16.nbin...
CA ARCserve D2D r15 Credentials Disclosure
Credentials disclosure vulnerability in CA ARCserve Vulnerability Type: File Disclosure For the exploit source code contact DSquare Security sales team...
Secunia Research: RealNetworks Helix Server Credentials Disclosure Security Issue
====================================================================== Secunia Research 09/04/2012 - RealNetworks Helix Server Credentials Disclosure Security Issue - ====================================================================== Table of Contents Affected...
CA ARCserve D2D GWT RPC Request Credentials Disclosure (CVE-2011-3011)
A credentials disclosure vulnerability has been reported in CA ARCserve D2D. The vulnerability is due to an error while processing Google Web Toolkit GWT RPC requests. A remote attacker can exploit this vulnerability by sending a specially crafted RPC request to an affected server. Successful...
CA ARCserve D2D r15 GWT RPC Multiple Vulnerabilities
Exploit for jsp platform in category web applications Exploit Title:CA ARCserve D2D r15 GWT RPC Request Auth Bypass / Credentials Disclosure and Commands Execution Google Dork: / Date: 25 July 2011 Author: rgod Software Link: / Version: r15.0 Tested on: Microsoft Windows Server 2003 r2 sp2 CVE :...
CA ARCserve D2D r15 GWT RPC - Multiple Vulnerabilities
CA ARCserve D2D r15 GWT RPC - Multiple Vulnerabilities Exploit Title:CA ARCserve D2D r15 GWT RPC Request Auth Bypass / Credentials Disclosure and Commands Execution Google Dork: / Date: 25 July 2011 Author: rgod Software Link: / Version: r15.0 Tested on: Microsoft Windows Server 2003 r2 sp2 CVE :...
CVE-2011-2153
Login.aspx in the SmarterTools SmarterStats 6.0 web server supports URLs containing txtUser and txtPass parameters in the query string, which makes it easier for context-dependent attackers to discover credentials by reading 1 web-server access logs, 2 web-server Referer logs, or 3 the browser...
phpMyBitTorrent 2.0.4 - SQL Injection
phpMyBitTorrent 2.0.4 - SQL Injection Exploit Title: phpMyBitTorrent 2.0.4 SQL injection Google Dork: inurl:"user.php?op=register" Date: 14/FEB/2011 Author: [email protected] Software Link: http://sourceforge.net/projects/phpmybittorrent/ Version: 2.0.4 Tested on: nix...
(TAD-2011-001) Vulnerability in HTC Peep: Twitter Credentials Disclosure
Vulnerability in HTC Peep: Twitter Credentials Disclosure http://blog.taddong.com/2011/02/vulnerability-in-htc-peep-twitter.html Title: Twitter credentials disclosure in HTC Peep mobile app default HTC Twitter client Vulnerability ID: TAD-2011-001 Credits: This vulnerability was discovered by...
PHPvidz Administrative Credentials Disclosure Vulnerability
This host is running PHPvidz and is prone to administrative credentials disclosure vulnerability. OpenVAS Vulnerability Test $Id: gbphpvidzinfodiscvuln.nasl 5794 2017-03-30 13:52:29Z cfi $ PHPvidz Administrative Credentials Disclosure Vulnerability Authors: Antu Sanadi Copyright: Copyright c 2010...
GetSimple CMS 2.01 / 2.02 Credential Disclosure
Researcher: Michael Brooks Affecting: GetSimple CMS 2.01 and 2.02 Fixed:2.03 Vulnerability: Administrative Credentials Disclosure Vendor's Homepage: http://code.google.com/p/get-simple-cms download url for 2.01: http://www.box.net/get-simple/1/30435008/399754548 download svn for 2.02beta: svn...
phpvidz 0.9.5 - Administrative Credentials Disclosure
phpvidz 0.9.5 - Administrative Credentials Disclosure Researcher: Michael Brooks Affecting: phpvidz 0.9.5 Vulnerability: Administrative Credentials Disclosure Vendor's Homepage: http://sourceforge.net/projects/phpvidz/ phpvidz does not use a SQL database. Instead it uses a system of flat files to...
Getsimple CMS 2.01 < 2.02 - Administrative Credentials Disclosure
Researcher: Michael Brooks Affecting: GetSimple CMS 2.01 and 2.02 Fixed:2.03 Vulnerability: Administrative Credentials Disclosure Vendor's Homepage: http://code.google.com/p/get-simple-cms download url for 2.01: http://www.box.net/get-simple/1/30435008/399754548 download svn for 2.02beta: svn...
n.runs-SA-2010.001 - Alcatel-Lucent - unauthenticated administrative access to CTI CCA Server
n.runs AG http://www.nruns.com/ securityatnruns.com n.runs-SA-2010.001 20-September-2010 Vendor: Alcatel Affected Products: Versions before 9.0.8.4 of the CCAgent option of OmniTouch Contact Center Standard Edition Vulnerability: unauthenticated administrative access to CTI CCA Server Risk: High...
ECShop2. 5. x&2.6. x injection exploit-vulnerability warning-the black bar safety net
ECShop2. 5. x&2.6. x goodsscript.php no initialization SQL, leading to injection vulnerabilities Effect 2. 5. x and 2. 6. x,other versions not tested goodsscript. php44 line:injection / admin credentials disclosure exploit if emptyempty$GET'type' ... elseif $GET'type' == 'collection' ... $sql .=...
Callisto <= 1.1.5 pl5 SQL Injection / Credentials Disclosure Exploit
Exploit for php platform in category web applications ==================================================================== Callisto = 1.1.5 pl5 SQL Injection / Credentials Disclosure Exploit ==================================================================== ?php Exploit Title: Callisto = 1.1.5...
CVE-2010-0556
CVE-2010-0556 describes a cross-origin weakness in Google Chrome’s Password Manager where credentials stored for one site could be populated into an authentication dialog triggered by a third-party page (demonstrated via IMG src). Affected versions include Chrome 3.0.195.38 and 4.0.249.78; Chrome...