Cyberoam UTM Multiiple Vulnerabilities

Exploit for hardware platform in category web applications Affected Software: Cyberoam CR50ia 10.01.0 build 678 Vulnerability: OS Command Execution Severity: High Release Date: Unreleased I. Background "Cyberoam Unified Threat Management appliances offer assured security, connectivity and...

Cyberoam UTM Credential Disclosure

SECURITY ADVISORY: cyberoam-utm-insecure-password-handling Affected Software: Cyberoam CR50ia 10.01.0 build 678 Vulnerability: Insecure Password Handling Severity: High Release Date: Unreleased I. Background "Cyberoam Unified Threat Management appliances offer assured security, connectivity and...

MyStore Tienda Virtual SQL Injection

======================================================================================== | Title : SQL Injection MyStore Tienda Virtual | | Author : Arturo Zamora | | email : [email protected] | | DAte : 02/01/2012 | | Verified : yes | | Risk : High | | Published: | | Script : MyStore...

Dienstplan Predictable Random Password Generation Vulnerability

Dienstplan is prone to an insecure random password generation vulnerability. Successfully exploiting this issue may allow an attacker to guess randomly generated passwords. Versions prior to Dienstplan 2.3 are vulnerable. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be...

Podcast: Culture of Lax Security Prevails Among Medical Device Makers

The news last week was that the U.S. House Energy & Commerce Committee has asked the Government Accountability Office to investigate the security of the software that runs medical devices. But a prominent researcher says that security flaws in such devices are common, and that more federal...

CVE-2008-6993

Siemens Gigaset WLAN Camera 1.27 has an insecure default password, which allows remote attackers to conduct unauthorized activities. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2008-6993

CVE-2008-6993 affects Siemens Gigaset WLAN Camera 1.27 and is based on an insecure default password that enables remote unauthorized activity. The connected Red Hat advisory and NVD entry corroborate the same description. Affected component is the device firmware on version 1.27; root cause is de...

Typo <= 5.1.3 Multiple Vulnerabilities

====================================================================== Typo = 5.1.3 Multiple Vulnerabilities ====================================================================== Author: L4teral l4teral at gmail com Impact: Cross Site Scripting SQL Injection Insecure password hash salt Status:...

typo-sqlxss.txt

====================================================================== Typo Impact: Cross Site Scripting SQL Injection Insecure password hash salt Status: patch not available ------------------------------ Affected software description: ------------------------------ Application: Typo Version: =...

CVE-2007-5024

EMC VMware Server before 1.0.4 Build 56528 writes passwords in cleartext to unspecified log files, which allows local users to obtain sensitive information by reading these files, a different vulnerability than CVE-2005-3620...

CVE-2007-0163

SecureKit Steganography 1.7.1 and 1.8 embeds password information in the carrier file, which allows remote attackers to bypass authentication requirements and decrypt embedded steganography by replacing the last 20 bytes of the JPEG image with alternate password information...

CVE-2006-5474

The CVE-2006-5474 entry concerns OneOrZero Helpdesk versions before 1.6.5.4. Root cause: the forgot-password function generates passwords by concatenating the current timestamp with the username, enabling remote attackers to gain access to an arbitrary user via a password reset request. Impact: u...

PSWD.JS - Insecure Password Hash

PSWD.JS - Insecure Password Hash / source: https://www.securityfocus.com/bid/19333/info Applications running pswd.js are prone to an insecure password-hash weakness. This issue is due to a design flaw that results in password hashes being created in an insecure manner. This issue allows attackers...

Dayfox Blog Insecure Password Storage

------------------------------------------------------------------ - Dayfox Blog Insecure Password Storage - -= http://colander.altervista.org/advisory/DayfoxBlog.txt =- ------------------------------------------------------------------ -= Dayfox Blog =- Omnipresent May 19, 2006 Vunerabilitys:...

CANews Remote Multiple Vulnerability

------------------------------------------------------------------ - Dayfox Blog Insecure Password Storage - -= http://colander.altervista.org/advisory/DayfoxBlog.txt =- ------------------------------------------------------------------ -= Dayfox Blog =- Omnipresent May 19, 2006 Vunerabilitys:...

Dayfox Blog Insecure Password Storage

Hi, I found a vulnerability in DayFox Blog. You can see my original advisory here: http://colander.altervista.org/advisory/DayfoxBlog.txt Let me know if you wanna to post it up! Best Regards, Omni -- Email.it, the professional e-mail, gratis per te: http://www.email.it/f Sponsor: Crea il tuo sito...

phpsurveyor Multiple Vulnerabilities

------------------------------------------------------------------ - phpsurveyor Multiple Vulnerabilities - -= http://colander.altervista.org/advisory/phpsurveyor.txt =- ------------------------------------------------------------------ -= phpsurveyor =- Omnipresent April 18, 2006 Vunerabilitys:...

AppServ Open Project Remote Insecure Default Password

Binary data 2429.prm...

Vulnerability in Sawmill for Solaris v. 6.2.14

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 = Warped Force Advisory 2 = Subject: Vulnerability in Sawmill for Solaris v. 6.2.14 Author: darky0da [email protected] Discovered: 2.8.02 Announced to BugTraq: 2.11.02 Vendor Status: Vendor notified on 2.9.02 and verified issue. Upgrade v. 6.2.15...

Apple Open Firmware 4.1.74.1.8 - Insecure Password

Apple Open Firmware 4.1.74.1.8 - Insecure Password source: https://www.securityfocus.com/bid/3186/info A user who has set an Open Firmware password on their Apple system believes it to be safe when powered down. There is a tool that any user with access to the Finder can run in order to reveal th...