Jenkins SSH Plugin Insecure Password Storage Information Disclosure Vulnerability

Jenkins is the open source automation server . Jenkins provides numerous plug-ins that support building, deploying and automating projects. An information disclosure vulnerability exists in the Jenkins SSH plugin. An attacker can exploit the vulnerability to obtain sensitive information and launc...

CVE-2017-13701: Exposure of Sensitive Information to an Unauthorized Actor

An issue was discovered on MOXA EDS-G512E 5.1 build 16072215 devices. The backup file contains sensitive information in a insecure way. There is no salt for password hashing. Indeed passwords are stored without being ciphered with a timestamped ciphering method...

Infogram: Bypass insecure password validation

Hi Team, Summary: Registration is checking the password creation if the password is insecure , but the password reset page was not doing the same validation, so when i input an insecure password using the password reset, the validation on the password creation can be bypass because the password...

Insecure Password Updates

openmeetings-db does not securely update passwords. When updating a password for a user, it does not check that the Crypt is up to date, resulting in the password not being saved securely...

Default credentials

Apache OpenMeetings 1.0.0 updates user password in insecure manner...

CVE-2017-7688: Undefined Security Weakness

Apache OpenMeetings 1.0.0 updates user password in insecure manner...

Default credentials

A vulnerability in Cisco Ultra Services Framework Element Manager could allow an authenticated, remote attacker with access to the management network to log in to the affected device using default credentials present on the system, aka an Insecure Default Password Vulnerability. More Information:...

Cisco Ultra Services Framework Element Manager Insecure Default Password Vulnerability

A vulnerability in Cisco Ultra Services Framework Element Manager could allow an authenticated, remote attacker with access to the management network to log in to the affected device using default credentials present on the system. The vulnerability is due to weak, hard-coded credentials present ...

USB Pratirodh Insecure Password Storage Information Disclosure Vulnerability

USB Pratirodh is a free security tool from CDAC to control the use of removable USB storage media. USB Pratirodh insecure password storage information disclosure vulnerability. The vulnerability is caused due to USB Pratirodh storing sensitive information, such as usernames and passwords, in a...

dnaLIMS Code Execution / XSS / Traversal / Session Hijacking

Title: Multiple vulnerabilities discovered in dnaLIMS DNA sequencing web-application Advisory URL: https://www.shorebreaksecurity.com/blog/product-security-advisory-psa0002-dnalims/ Date published: Mar 08, 2017 Vendor: dnaTools, Inc. CVE IDs: 2017-6526, 2017-6527, 2017-6528, 2017-6529 USCERT VU:...

dnaLIMS DNA Sequencing - Directory Traversal / Session Hijacking / Cross-Site Scripting

Title: Multiple vulnerabilities discovered in dnaLIMS DNA sequencing web-application Advisory URL: https://www.shorebreaksecurity.com/blog/product-security-advisory-psa0002-dnalims/ Date published: Mar 08, 2017 Vendor: dnaTools, Inc. CVE IDs: 2017-6526, 2017-6527, 2017-6528, 2017-6529 USCERT VU:...

CVE-2016-8372

An issue was discovered in Moxa ioLogik E1210, firmware Version V2.4 and prior, ioLogik E1211, firmware Version V2.3 and prior, ioLogik E1212, firmware Version V2.4 and prior, ioLogik E1213, firmware Version V2.5 and prior, ioLogik E1214, firmware Version V2.4 and prior, ioLogik E1240, firmware...

phpMyAdmin Insecure Password Vulnerability

phpMyAdmin is a free, web-based MySQL database management tool developed by the phpMyAdmin team. The tool is capable of creating and deleting databases, creating, deleting, and modifying database tables, executing SQL script commands, and more. phpMyAdmin has a security vulnerability. Allowing an...

Crowbar Openstack Insecure Default Password Vulnerability

An insecure default password vulnerability exists in Crowbar Openstack. A remote attacker could exploit this vulnerability to gain unauthorized access and perform unauthorized actions...

xguest weak password vulnerability

xguest is an account creation component for Linux systems. A weak password vulnerability exists in xguest that stems from the program using an insecure password. An attacker could exploit this vulnerability to guess the password...

Multiple vulnerabilities in extension phpMyAdmin (phpmyadmin)

It has been discovered that the extension "phpMyAdmin" phpmyadmin is susceptible to unsafe comparison of XSRF/CSRF token, multiple full path disclosure vulnerabilities, multiple XSS vulnerabilities, insecure password generation in JavaScript. Release Date: March 10, 2016 Component Type: Third par...

openSUSE Security Update : phpMyAdmin 4.4.15.4 (openSUSE-2016-168)

Security update to phpMyAdmin 4.4.15.4 The followinng vulnerabilities were fixed: boo964024 - CVE-2016-2038: Multiple full path disclosure vulnerabilities - CVE-2016-2039: Unsafe generation of XSRF/CSRF token - CVE-2016-2040: Multiple XSS vulnerabilities - CVE-2016-1927: Insecure password...

PHP 7.0.x < 7.0.1 Multiple Vulnerabilities

Binary data 9064.prm...

phpmyadmin -- Insecure password generation in JavaScript

The phpMyAdmin development team reports: Password suggestion functionality uses Math.random which does not provide cryptographically secure random numbers. We consider this vulnerability to be non-critical...

XMB - eXtreme Message Board 1.9.11.13 Weak Crypto / Insecure Password Storage

Credits: hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/XMB-WEAK-CRYPTO.txt Vendor: ============== xmbforum2.com Product: ====================================== XMB - eXtreme Message Board v1.9.11.13 XMB forum software is open source and runs...