3644 matches found
Exclusive — Hacker Steals Over 218 Million Zynga 'Words with Friends' Gamers Data
A Pakistani hacker who previously made headlines earlier this year for selling almost a billion user records stolen from nearly 45 popular online services has now claimed to have hacked the popular mobile social game company Zynga Inc. With a current market capitalization of over $5 billion, Zyng...
CVE-2019-14666
GLPI through 9.4.3 is prone to account takeover by abusing the ajax/autocompletion.php autocompletion feature. The lack of correct validation leads to recovery of the token generated via the password reset functionality, and thus an authenticated attacker can set an arbitrary password for any use...
CVE-2019-14666
GLPI through 9.4.3 is prone to account takeover by abusing the ajax/autocompletion.php autocompletion feature. The lack of correct validation leads to recovery of the token generated via the password reset functionality, and thus an authenticated attacker can set an arbitrary password for any use...
CVE-2019-14666
GLPI through 9.4.3 is prone to account takeover by abusing the ajax/autocompletion.php autocompletion feature. The lack of correct validation leads to recovery of the token generated via the password reset functionality, and thus an authenticated attacker can set an arbitrary password for any use...
Design/Logic Flaw
GLPI through 9.4.3 is prone to account takeover by abusing the ajax/autocompletion.php autocompletion feature. The lack of correct validation leads to recovery of the token generated via the password reset functionality, and thus an authenticated attacker can set an arbitrary password for any use...
CVE-2019-14666
GLPI through 9.4.3 is prone to account takeover by abusing the ajax/autocompletion.php autocompletion feature. The lack of correct validation leads to recovery of the token generated via the password reset functionality, and thus an authenticated attacker can set an arbitrary password for any use...
CVE-2019-14666
GLPI
CVE-2019-15088
An issue was discovered in PRiSE adAS 1.7.0. Password hashes are compared using the equality operator. Thus, under specific circumstances, it is possible to bypass login authentication...
Authentication flaw
An issue was discovered in PRiSE adAS 1.7.0. Password hashes are compared using the equality operator. Thus, under specific circumstances, it is possible to bypass login authentication...
CVE-2019-15088
PRiSE adAS 1.7.0 contains an authentication bypass vulnerability where password hashes are compared using the equality operator. This improper comparison can allow bypassing login under certain conditions, as described in CVE-2019-15088 and reflected in multiple sources (NVD, Red Hat advisory, CV...
CVE-2019-15088: Undefined Security Weakness
An issue was discovered in PRiSE adAS 1.7.0. Password hashes are compared using the equality operator. Thus, under specific circumstances, it is possible to bypass login authentication...
PT-2019-13979
Name of the Vulnerable Software and Affected Versions PRiSE adAS version 1.7.0 Description An issue was discovered where password hashes are compared using the equality operator, allowing potential bypass of login authentication under specific circumstances. Recommendations For PRiSE adAS version...
How to: Kerberoast like a boss
Kerberoasting: by default, all standard domain users can request a copy of all service accounts along with their correlating password hashes. Crack these and you could have administrative privileges. But that’s so 2014. Why write a blog post about this in 2019 then? It still works well, yet there...
PT-2019-13878 · WordPress · Easyappointments
Name of the Vulnerable Software and Affected Versions: Easy!Appointments plugin for WordPress version 1.3.2 Description: The issue allows for Sensitive Information Disclosure, specifically exposing usernames and password hashes. Recommendations: For Easy!Appointments plugin for WordPress version...
Knowage Trust Management Issues Vulnerabilities
Knowage is a suite of open source tools for modern business analytics. A security vulnerability exists in Knowage 6.1.1 and earlier versions. An attacker can exploit the vulnerability to obtain all user password hashes...
CVE-2019-13349
In Knowage through 6.1.1, an authenticated user that accesses the users page will obtain all user password hashes...
CVE-2019-13349
In Knowage through 6.1.1, an authenticated user that accesses the users page will obtain all user password hashes...
Default credentials
In Knowage through 6.1.1, an authenticated user that accesses the users page will obtain all user password hashes...
