1923 matches found
CMS NetCat 3.0/3.12 - Blind SQL Injection Exploit
No description provided by source. ? / AIST NetCat Blind SQL Injection exploit by s4avrd0w [email protected] Versions affected = 3.12 More info: http://www.netcat.ru/ tested on version 3.0, 3.12 usage: ./NetCatblindSQLexploit.php -s=NetCatserver -u=UserID The options are required: -u The user...
Qbik WinGate 3.0 Registry Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/511/info WinGate stores encrypted passwords in the registry, in a subkey where Everyone has Read access by default. The encryption scheme is weak, and therefore anyone can get and decrypt them. include stdafx.h include...
TeamHelpdesk Customer Web Service (CWS) 8.3.5 & Technician Web Access (TWA) 8.3.5 - Remote User Credential Dump
No description provided by source. Exploit Title: Team Helpdesk Customer Web Service CWS Remote User Credential Dump exploit Exploit Title: Team Helpdesk Technician Web Access TWA Remote User Credential Dump exploit Date: May 5, 2014 Exploit Author: bhamb [email protected] Vendor Homepage:...
Computer Associates eTrust Intrusion Detection 1.4.1 .13 Weak Encryption Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/1341/info A weak encryption scheme exists in Computer Associates eTrust Intrusion Detection System formerly known as SessionWall-3 password which authorizes users to view and configure the application's registry settings...
openssl: SSL/TLS MITM vulnerability
It was found that OpenSSL clients and servers could be forced, via a specially crafted handshake packet, to use weak keying material for communication. A man-in-the-middle attacker could use this flaw to decrypt and modify traffic between a client and a server...
OpenSSL and then blast a serious security vulnerability -- CCS injection-vulnerability warning-the black bar safety net
OpenSSL's ChangeCipherSpec processing and then reported a serious security vulnerability that an attacker can intercept the malicious intermediate node to encrypt and decrypt data,while forcing the use of weak key for SSL client exposed to the malicious nodes. When the software uses the OpenSSL...
Ubuntu 14.04 LTS : OpenSSL vulnerabilities (USN-2232-1)
The remote Ubuntu 14.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-2232-1 advisory. Jri Aedla discovered that OpenSSL incorrectly handled invalid DTLS fragments. A remote attacker could use this issue to cause OpenSSL to crash, resulting...
openssl: SSL/TLS MITM vulnerability
It was found that OpenSSL clients and servers could be forced, via a specially crafted handshake packet, to use weak keying material for communication. A man-in-the-middle attacker could use this flaw to decrypt and modify traffic between a client and a server...
openssl: SSL/TLS MITM vulnerability
It was found that OpenSSL clients and servers could be forced, via a specially crafted handshake packet, to use weak keying material for communication. A man-in-the-middle attacker could use this flaw to decrypt and modify traffic between a client and a server...
openssl: SSL/TLS MITM vulnerability
It was found that OpenSSL clients and servers could be forced, via a specially crafted handshake packet, to use weak keying material for communication. A man-in-the-middle attacker could use this flaw to decrypt and modify traffic between a client and a server...
openssl: SSL/TLS MITM vulnerability
It was found that OpenSSL clients and servers could be forced, via a specially crafted handshake packet, to use weak keying material for communication. A man-in-the-middle attacker could use this flaw to decrypt and modify traffic between a client and a server...
openssl: SSL/TLS MITM vulnerability
It was found that OpenSSL clients and servers could be forced, via a specially crafted handshake packet, to use weak keying material for communication. A man-in-the-middle attacker could use this flaw to decrypt and modify traffic between a client and a server...
New OpenSSL MITM Flaw Affects All Clients, Some Server Versions
There is a new, remotely exploitable vulnerability in OpenSSL that could enable an attacker to intercept and decrypt traffic between vulnerable clients and servers. The flaw affects all versions of the OpenSSL client and versions 1.0.1 and 1.0.2-beta1 of the server software. The new vulnerability...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in the iMember360 plugin 3.8.012 through 3.9.001 for WordPress allow remote attackers to inject arbitrary web script or HTML via the 1 decrypt or 2 encrypt parameter...
PT-2014-5544
Name of the Vulnerable Software and Affected Versions iMember360 plugin versions 3.8.012 through 3.9.001 Description The issue allows remote attackers to inject arbitrary web script or HTML via the decrypt or encrypt parameter, potentially leading to cross-site scripting XSS attacks...
CVE-2014-3842: Improper Neutralization of Input During Web Page Generation
Multiple cross-site scripting XSS vulnerabilities in the iMember360 plugin 3.8.012 through 3.9.001 for WordPress allow remote attackers to inject arbitrary web script or HTML via the 1 decrypt or 2 encrypt parameter...
PT-2016-7840
Name of the Vulnerable Software and Affected Versions phpMyAdmin versions 4.0.0 through 4.0.10.17 phpMyAdmin versions 4.4.0 through 4.4.15.8 phpMyAdmin versions 4.6.0 through 4.6.4 Description An issue in phpMyAdmin allows an attacker to potentially determine the user's blowfish secret and decryp...
TeamHelpdesk Customer Web Service (CWS) 8.3.5 & Technician Web Access (TWA) 8.3.5 - Remote User Credential Dump
Exploit Title: Team Helpdesk Customer Web Service CWS Remote User Credential Dump exploit Exploit Title: Team Helpdesk Technician Web Access TWA Remote User Credential Dump exploit Date: May 5, 2014 Exploit Author: bhamb [email protected] Vendor Homepage: http://www.assistmyteam.net/TeamHelpdesk/...
OpenSSL 'Heartbleed' Vulnerability
A vulnerability in OpenSSL could allow a remote attacker to expose sensitive data, possibly including user authentication credentials and secret keys, through incorrect memory handling in the TLS heartbeat extension. This may allow an attacker to decrypt traffic or perform other attacks. OpenSSL...
Fraudulent SSL Certificates Man-In-The-Middle
Fake SSL certificates may be used to carry out man-in-the-middle attacks against affected targets. Successful attacks would allow attackers to decrypt legitimate online traffic...