1686 matches found
Default credentials
SGI Tempo, as used on SGI ICE-X systems, uses weak permissions for certain files, which allows local users to obtain password hashes and possibly other unspecified sensitive information by reading /etc/odapw...
CVE-2014-7303
SGI Tempo, as used on SGI ICE-X systems, uses weak permissions for certain files, which allows local users to obtain password hashes and possibly other unspecified sensitive information by reading etc/dbdump.db...
CVE-2014-7303
SGI Tempo on SGI ICE-X systems stored backups of the system configuration database with insecure file permissions (world-readable) on /etc/dbdump.db, enabling local users to read password hashes and other sensitive data. Affected components/requisites include the database dumps produced by Tempo ...
CVE-2014-7302
The CVE-2014-7302 entry concerns SGI Tempo on SGI ICE-X systems where the /opt/sgi/sgimc/bin/vx binary has insecure SUID root permissions (example: -rwsr-sr-x 1 root root). This allows low-privileged local users to escalate to root by executing vx and applying its permission-changing capabilities...
CVE-2014-7302
SGI Tempo, as used on SGI ICE-X systems, uses weak permissions for certain files, which allows local users to change the permissions of arbitrary files by executing /opt/sgi/sgimc/bin/vx...
CVE-2014-7301
SGI Tempo (SGI ICE-X) is affected by CVE-2014-7301 due to insecurely set permissions on /etc/odapw, allowing local users to read the file and access password data for the system database (oscar). Root cause is world-readable permissions on the /etc/odapw file, enabling read access to sensitive cr...
CVE-2014-7301
SGI Tempo, as used on SGI ICE-X systems, uses weak permissions for certain files, which allows local users to obtain password hashes and possibly other unspecified sensitive information by reading /etc/odapw...
ice-empire.com Improper Access Control vulnerability
Security Researcher geeknik Helped patch 8594 vulnerabilities Received 8 Coordinated Disclosure badges Received 20 recommendations , a holder of 8 badges for responsible and coordinated disclosure, found a security vulnerability affecting ice-empire.com website and its users. Following coordinate...
Police Surveillance Tools from Special Services Group
Special Services Group, a company that sells surveillance tools to the FBI, DEA, ICE, and other US government agencies, has had its secret sales brochure published. Motherboard received the brochure as part of a FOIA request to the Irvine Police Department in California. "The Tombstone Cam is our...
XMind has a dll hijacking vulnerability
XMind is a mind mapping software developed by Shenzhen Ice Software Technology Co., Ltd. and millions of users around the world are using XMind. XMind has a dll hijacking vulnerability that can be exploited by attackers to load a malicious dll and execute malicious code...
A History of Plans to Nuke Hurricanes (and Other Stuff Too)
If you think dropping a nuclear bomb into the eye of a hurricane is a bad idea, wait'll you see what they had in mind for the polar ice caps...
SQL Injection Vulnerability in Ice Point Ordering System of Chongqing Ice Dazzle Technology Co.
Ice point ordering treasure is used for unit internal canteen management system software, the main function is through the computer, cell phone and other mobile devices for ordering, reporting, cell phone ordering function. Ltd. There are SQL injection vulnerabilities in the system, which can be...
SQL Injection Vulnerability in Pur*** File of Ice Ordering Po
Ice point ordering treasure is a unit enterprise internal canteen ordering management software, through the cell phone APP wechat ordering, for canteen ordering consumption management. SQL injection vulnerability exists in the Pur file of Ice Point Ordering Treasure, which can be exploited by...
ICE HRM 23.0 - Multiple Vulnerabilities
Exploit for php platform in category web applications =========================================================================================== Exploit Title: ICE HRM - ’ob’ SQL Inj. Dork: N/A Date: 14-03-2019 Exploit Author: Mehmet EMIROGLU Vendor Homepage: http://icehrm.org Software Link:...
ICE HRM 23.0 - Multiple Vulnerabilities
=========================================================================================== Exploit Title: ICE HRM - ’ob’ SQL Inj. Dork: N/A Date: 14-03-2019 Exploit Author: Mehmet EMIROGLU Vendor Homepage: http://icehrm.org Software Link: https://sourceforge.net/projects/icehrm/ Version: v23.0...
ICE HRM 23.0 SQL / Iframe Injection
=========================================================================================== Exploit Title: ICE HRM - aoba SQL Inj. Dork: N/A Date: 14-03-2019 Exploit Author: Mehmet EMIROGLU Vendor Homepage: http://icehrm.org Software Link: https://sourceforge.net/projects/icehrm/ Version: v23.0...
ICE HRM 23.0 - Multiple Vulnerabilities
ICE HRM 23.0 - Multiple Vulnerabilities =========================================================================================== Exploit Title: ICE HRM - ’ob’ SQL Inj. Dork: N/A Date: 14-03-2019 Exploit Author: Mehmet EMIROGLU Vendor Homepage: http://icehrm.org Software Link:...
Internal Docs Show How ICE Gets Surveillance Help From Local Cops
Documents obtained by the ACLU show how ICE uses unofficial channels to access billions of license plate location data points—including some sanctuary cities...
File Upload Vulnerability in Ice OrderBox System
Ice point ordering treasure system is unit enterprise internal canteen ordering management software, through the cell phone APP WeChat ordering, for canteen ordering consumption management. A file upload vulnerability exists in Freezing Point Ordering System, which allows an attacker to upload a...
The vulnerability of the ICE data exchange library X11 libICE, related to the use of a weak entropy source for key generation, allows a hacker to intercept sessions.
The vulnerability of the ICE data exchange library X11 libICE is related to the use of a weak entropy source for key generation. Exploiting this vulnerability allows an attacker to intercept sessions by using information from the process list...