CVE-2006-4493

xbiff2 1.9 creates $HOME/.xbiff2rc in a user's home directory with insecure file permissions, which allows local users to obtain sensitive information such as login credentials. NOTE: the provenance of this information is unknown; the details are obtained from third party information...

CVE-2006-4493

xbiff2 1.9 creates $HOME/.xbiff2rc in a user's home directory with insecure file permissions, which allows local users to obtain sensitive information such as login credentials. NOTE: the provenance of this information is unknown; the details are obtained from third party information...

CVE-2006-4493

The affected component is xbiff2 1.9. It creates $HOME/.xbiff2rc in the user’s home directory with insecure permissions, enabling local users to access sensitive information such as login credentials. This summary relies on the CVE description and notes the provenance is unknown (third‑party info...

TinyPHPForum 3.6 - error.php Information Disclosure

TinyPHPForum 3.6 - error.php Information Disclosure source: https://www.securityfocus.com/bid/19278/info TinyPHPForum is prone to an information-disclosure vulnerability. This issue arises when a script allows a remote untrusted source to change a victim user's email address, and have their login...

TinyPHPForum 3.6 - 'error.php' Information Disclosure

source: https://www.securityfocus.com/bid/19278/info TinyPHPForum is prone to an information-disclosure vulnerability. This issue arises when a script allows a remote untrusted source to change a victim user's email address, and have their login credentials returned to an attacker. Information th...

Windows RASMAN registry corruption vulnerability

Added: 07/28/2006 CVE: CVE-2006-2371 BID: 18358 OSVDB: 26436 Background The Routing and Remote Access Service RRAS allows a Windows computer to act as a router, dial-up access server, VPN server, or network address translator. The Remote Access Connection Manager RASMAN service handles the detail...

Windows RASMAN registry corruption vulnerability

Added: 07/28/2006 CVE: CVE-2006-2371 BID: 18358 OSVDB: 26436 Background The Routing and Remote Access Service RRAS allows a Windows computer to act as a router, dial-up access server, VPN server, or network address translator. The Remote Access Connection Manager RASMAN service handles the detail...

Design/Logic Flaw

The default configuration of Fluffington FLog 1.01 installs users.0.dat under the web document root with insufficient access control, which might allow remote attackers to obtain sensitive information login credentials via a direct request. NOTE: It was later reported that 1.1.2 is also affected...

CVE-2004-2580

Cross-site scripting XSS vulnerability in Novell iChain 2.3 allows remote attackers to obtain login credentials via unspecified vectors...

CVE-2004-2580: Undefined Security Weakness

Cross-site scripting XSS vulnerability in Novell iChain 2.3 allows remote attackers to obtain login credentials via unspecified vectors...

CVE-2005-3800

The CVE concerns Macromedia Contribute Publishing Server (CPS) prior to version 1.11 that uses a weak algorithm to encrypt user passwords within connection keys that rely on shared FTP login credentials. The underlying issue enables disclosure of sensitive information by an attacker who can acces...

CVE-2005-3800: Undefined Security Weakness

Macromedia Contribute Publishing Server CPS before 1.11 uses a weak algorithm to encrypt user password in connection keys that use shared FTP login credentials, which allows attackers to obtain sensitive information...

CVE-2001-1536

Autogalaxy stores usernames and passwords in cleartext in cookies, which makes it easier for remote attackers to obtain authentication information and gain unauthorized access via sniffing or a cross-site scripting attack...

wwwguestbook.txt

To search guestbook's : pastle in google or yahoo "inurl:/gbok/login.asp" http://www15.brinkster.com/caffepaglia2003/gbok/login.asp Login : h4ck Password : ' or ''=' Have fun MAJKI [email protected]...

HP-UX FTPD 1.1.214.4 - REST Remote Brute Force

HP-UX FTPD 1.1.214.4 - REST Remote Brute Force / Author: phased /str0ke / include include include include include include include int main int argc, char argv int sock, rc; long int i; struct sockaddrin saddr; struct hostent h; char buf256; printf"DMhpux FTPd - REST bug brute forcer\n"; printf"by...

[VulnWatch] OpenBSD radius authentication vulnerability

Title: OpenBSD radius authentication vulnerability Summary: Authentication can be bypassed when radius-authentication is used on OpenBSD. Impact: Unauthorized access to the system Software: OpenBSD 3.2 and OpenBSD 3.5 confirmed vulnerable. Workarounds: 1 Place the Radius server on an isolated lan...

Motorola WR850G v4.03 Credentials

Login credentials to the Motorola WR850G router with firmware v4.03 can be obtained via a simple GET request if issued while the administrator is logged in. A lot more information is available through this request, but you can get it all and more after logging in. Module Options msf use...

RhinoSoft Serv-U FTP Server 3.x 5.x - Local Privilege Escalation

RhinoSoft Serv-U FTP Server 3.x 5.x - Local Privilege Escalation / Hax0rcitos proudly presents Serv-u Local Exploit v3.x. tested also against last version 5.1.0.0 All Serv-u Versions have default Login/password for local Administration. This account is only available to connect in the loopback...

CVE-2004-2089

Matrix FTP Server allows remote attackers to cause a denial of service crash by logging in using four spaces as the username and password and then issuing a LIST command...

Несколько уязвимостей в Sad Raven's Guestbook

Несколько уязвимостей в Sad Raven's Guestbook Программа: Sad Raven's Guestbook Сайт производителя: www.sad-raven.ru Уязвимая версия: 1.1 Опасность: низкая Найдено: MORPFEY Наличие эксплоита: Да Дата: 20.12.2003 Описание: В гостевой книге возможно отвечать от имени Администратора. Экплоит: В поле...