569 matches found
Philips VOIP841 (Firmware <= 1.0.4.800) Multiple Vulnerabilities
Exploit for hardware platform in category remote exploits ================================================================ Philips VOIP841 Firmware alert"XSS"; HTTP/1.0 d Insecure Storage Skype credentials, web management console passwords, ... /var/jffs2/data/save.dat /tmp/apply.log 0day.today...
Philips VOIP841 Firmware 1.0.4.800 - Multiple Vulnerabilities
.: Philips VOIP841 Multiple Vulnerabilities :. Luca "ikki" Carettoni - [email protected] Systems affected: Philips VOIP841, Firmware Version 1.0.4.50 and 1.0.4.80, Web Server Version 1.5 simple httpd Systems not affected: n/a a Hidden Administration Account web management console...
philipsvoip-multi.txt
Secure Network - Security Research Advisory Vuln name: Philips VOIP841 Multiple Vulnerabilities Systems affected: Philips VOIP841, Firmware Version 1.0.4.50 and 1.0.4.80, Web Server Version 1.5 simple httpd Systems not affected: n/a Severity: High Local/Remote: Remote Vendor URL:...
CVE-2007-0077
lblog stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for a certain file in admin/db/newFolder/...
[SA21742] microforum "members.dat" Exposure of User Credentials
---------------------------------------------------------------------- Want to work within IT-Security? Secunia is expanding its team of highly skilled security experts. We will help with relocation and obtaining a work permit. Currently the following type of positions are available:...
Sybase EAServer information leak
Security credentials are stored insecurely in connection cache...
CVE-2003-1226
BEA WebLogic Server and Express 7.0 and 7.0.0.1 stores certain secrets concerning password encryption insecurely in config.xml, filerealm.properties, and weblogic-rar.xml, which allows local users to learn those secrets and decrypt passwords...
CVE-2003-1213
MaxWebPortal 1.30 stores its portal database under the web document root with insecure access control, allowing remote retrieval of database/db2000.mdb via a direct request. This causes partial confidentiality impact (CVSS: AV:N/AC:L/Au:N/C:P/I:P/A:P). The CVE entry provides no exploitation detai...
Visible Systems Razor 4.1 - Password File (1)
// source: https://www.securityfocus.com/bid/1424/info The Razor Configuration Management program stores passwords in an insecure manner. A local attacker can obtain the Razor passwords, and either seize control of the software and relevant databases or use those passwords to access other users'...