TYPO3 < 4.0.12/4.1.10/4.2.6 - 'jumpUrl' Remote File Disclosure

!/usr/bin/env python ------------------------------------------------------------------------------ TYPO3-SA-2009-002 exploit by Lolek of TK53 date: 2009/02/10 vendor url: http://typo3.org vulnerable versions: TYPO3 defaults to typo3conf/localconf.php if people fixed their installations but did n...

CVE-2009-0250

Ryneezy phoSheezy 0.2 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the file containing the administrator's password hash via a direct request for config/password...

RCBlog v1.03 Authentication Bypass Vulnerability

Exploit for unknown platform in category web applications ================================================ RCBlog v1.03 Authentication Bypass Vulnerability ================================================ Vendor: http://noahmedling.com Versions: RCBlog 1.03 May also affect earlier versions Credit...

RCBlog v1.03 Authentication Bypass Vulnerability

No description provided by source. Vendor: http://noahmedling.com Versions: RCBlog 1.03 May also affect earlier versions Credit: Danny Moules Critical: Yes See PUSH 55 Advisory at https://www.push55.co.uk/index.php?s=ad&id=4 ---- By default, the application provides public access to the text file...

RCBlog 1.03 - Authentication Bypass

RCBlog 1.03 - Authentication Bypass Vendor: http://noahmedling.com Versions: RCBlog 1.03 May also affect earlier versions Credit: Danny Moules Critical: Yes See PUSH 55 Advisory at https://www.push55.co.uk/index.php?s=ad&id=4 ---- By default, the application provides public access to the text fil...

RCBlog 1.03 - Authentication Bypass

Vendor: http://noahmedling.com Versions: RCBlog 1.03 May also affect earlier versions Credit: Danny Moules Critical: Yes See PUSH 55 Advisory at https://www.push55.co.uk/index.php?s=ad&id=4 ---- By default, the application provides public access to the text file which stores the MD5 hashes of the...

Cain & Abel 4.9.25 (Cisco IOS-MD5) Local Buffer Overflow Exploit

No description provided by source. !perl -w Simple overflow for Cain & Abel v4.9.25 and below? This script will output a file; import this file as a config file under Cracker - Cisco IOS-MD5 Hashes If Cain crashes but calc.exe isn't run, change $eip to reflect your system. send9 /at/ chiseclabs.c...

CVE-2008-5855

myPHPscripts Login Session 2.0 stores sensitive information under the web root with insufficient access control, which allows remote attackers to discover usernames, e-mail addresses, and password hashes via a direct request for users.txt...

Improper access control

myPHPscripts Login Session 2.0 stores sensitive information under the web root with insufficient access control, which allows remote attackers to discover usernames, e-mail addresses, and password hashes via a direct request for users.txt...

CVE-2008-5855

myPHPscripts Login Session 2.0 stores sensitive information under the web root with insufficient access control, which allows remote attackers to discover usernames, e-mail addresses, and password hashes via a direct request for users.txt...

RiotPix 0.61 - 'forumid' Blind SQL Injection

\n\n", $argv0; exit; list$sploit, $target, $username, $topicid = $argv; $charsArr = array48, 49, 50, 51, 52, 53, 54, 55, 56, 57, 97, 98, 99, 100, 101, 102; $pos = 1; echo " Password Hash : "; while$pos != 33 for$i = 0; $i = count$charsArr; $i++ $query =...

CVE-2008-4905

Typo 5.1.3 and earlier uses a hard-coded salt for calculating password hashes, which makes it easier for attackers to guess passwords via a brute force attack...

Hardcoded credentials

Typo 5.1.3 and earlier uses a hard-coded salt for calculating password hashes, which makes it easier for attackers to guess passwords via a brute force attack...

CVE-2008-4905

CVE-2008-4905 affects Typo (versions 5.1.3 and earlier) and is caused by a hard-coded salt used to hash passwords. This weakens brute-force resistance, making password guessing easier for attackers. Connected sources (NVD, UBUNTU, CVE listings) confirm the condition, but none provide a concrete f...

PT-2008-6083 · Typo · Typo

Name of the Vulnerable Software and Affected Versions: Typo versions 5.1.3 and earlier Description: The issue allows attackers to more easily guess passwords via a brute force attack because it uses a hard-coded salt for calculating password hashes. Recommendations: For Typo versions 5.1.3 and...

CVE-2008-4905

Typo 5.1.3 and earlier uses a hard-coded salt for calculating password hashes, which makes it easier for attackers to guess passwords via a brute force attack...

CMME Multiple Information disclosure vulnerabilities

WwW.BugReport.ir AmnPardaz Security Research & Penetration Testing Group Title: CMME Multiple Information disclosure vulnerabilities Vendor: http://cmme.oesterholt.net Bug: Information Disclosure Vulnerable Version: 1.19 prior versions also may be affected Exploitation: Remote with browser Exploi...

CVE-2008-3924

The "Make a backup" functionality in Content Management Made Easy CMME 1.12 stores sensitive information under the web root with insufficient access control, which allows remote attackers to discover 1 account names and 2 password hashes via a direct request for a backup/cmmedata.zip or b...

CVE-2008-3924

Content Management Made Easy (CMME) 1.12 exposes sensitive data under the web root via its Make a backup feature, allowing remote attackers to directly request backup/cmme_data.zip or backup/cmme_cmme.zip to discover account names and password hashes. Vector a reportedly also affects CMME 1.19. T...

K-Links Directory Blind SQL Injection Exploit

!/usr/bin/perl K-Links Directory Blind SQL Injection Exploit ..::virangar security team::.. www.virangar.net C0d3d BY:virangar security team hadihadi special tnx to: MR.nosrati,black.shadowes,MR.hesy,Ali007,Zahra & all virangar members & all hackerz my lovely friends hadiaryaie2004 & arashimm02ta...