2209 matches found
When you open the nworks Web UI in a browser, you see a blank screen.
When you open the nworks Web UI in a browser, you see a blank screen instead of the logon screen/management screen. You may also see a Java exception stating that you need to add the site to the Trusted Sites zone...
THC-HYDRA v6.4 - Fast network logon cracker
THC-HYDRA v6.4 - Fast network logon cracker THC-HYDRA is a very fast network logon cracker which support many different services. This tool is a proof of concept code, to give researchers and security consultants the possibility to show how easy it would be to gain unauthorized access from remote...
THC-HYDRA v6.4 - Fast network logon cracker
THC-HYDRA v6.4 - Fast network logon cracker THC-HYDRA is a very fast network logon cracker which support many different services. This tool is a proof of concept code, to give researchers and security consultants the possibility to show how easy it would be to gain unauthorized access from remote...
Cisco AnyConnect Secure Mobility Client < 2.3.254 Multiple Vulnerabilities
The version of Cisco AnyConnect Secure Mobility Client installed on the remote host is earlier than 2.3.254 and may have the following vulnerabilities : - When the client is obtained from the VPN headend using a web browser, a helper application performs the download and installation. This helper...
PT-2011-3562
Name of the Vulnerable Software and Affected Versions Cisco AnyConnect Secure Mobility Client versions prior to 2.3.254 Description The issue concerns the Start Before Logon SBL functionality, which allows local users to gain privileges through unspecified user-interface interaction...
Hydra v6.3 Released with oracle & snmp-enum modules !
Hydra v6.3 Released with oracle & snmp-enum modules ! A very fast network logon cracker which support many different services. Have a look at the feature sets and services coverage page - including a speed comparison against ncrack and medusa! Number one of the biggest security holes are password...
Hydra v6.2 with a password bruteforcing mode, xmpp and irc modules, MD5/SHA1/ Support !
Hydra v6.2 with a password bruteforcing mode, xmpp and irc modules, MD5/SHA1/ Support ! A very fast network logon cracker which support many different services. Have a look at the feature sets and services coverage page - including a speed comparison against ncrack and medusa! CHANGELOG for 6.2...
PT-2011-2027
Name of the Vulnerable Software and Affected Versions Microsoft Windows XP versions SP2 through SP3 Microsoft Windows Server 2003 version SP2 Description An issue exists in the way the Windows Client/Server Run-time Subsystem CSRSS terminates a process when a user logs off, allowing local users t...
THC-HYDRA v6.1 brute force tool Released !
One of the most famous network logon cracker - THC-HYDRA, has been updated! We now have THC-HYDRA version 6.1 in less than a fortnight! "THC-HYDRA is a very fast network logon cracker which support many different services. This tool is a proof of concept code, to give researchers and security...
CVE-2011-0738: Improper Input Validation
MyProxy 5.0 through 5.2, as used in Globus Toolkit 5.0.0 through 5.0.2, does not properly verify the 1 hostname or 2 identity in the X.509 certificate for the myproxy-server, which allows remote attackers to spoof the server and conduct man-in-the-middle MITM attacks via a crafted certificate whe...
PT-2011-2599
Name of the Vulnerable Software and Affected Versions MyProxy versions 5.0 through 5.2 Globus Toolkit versions 5.0.0 through 5.0.2 Description The issue allows remote attackers to conduct man-in-the-middle MITM attacks by spoofing the server, due to improper verification of the hostname or identi...
MS10-098: Vulnerabilities in Windows Kernel-Mode Drivers Could Allow Elevation of Privilege (2436673)
The remote host is running a version of Windows that contains a flaw in the kernel that may lead to a privilege escalation by running a specially crafted application. To exploit this vulnerability an attacker must have valid logon credentials and be able to log on locally. C Tenable Network...
Juniper VPN client rdesktop clickhack
Juniper VPN client rdesktop clickhack ================================ discovered by [email protected] PRODUCT: Juniper VPN client + Windows remote desktop or console access VERSION AFFECTED: Win Vista/7 + Juniper VPN client all versions EXPOSURE: Remote code execution SYSTEM privileges SYNOPSIS...
Juniper VPN Client rdesktop Click Hack
Juniper VPN client rdesktop clickhack ================================ discovered by [email protected] PRODUCT: Juniper VPN client + Windows remote desktop or console access VERSION AFFECTED: Win Vista/7 + Juniper VPN client all versions EXPOSURE: Remote code execution SYSTEM privileges SYNOPSIS...
Hydra v5.9 - new release download
"THC-Hydra is a very fast network logon cracker which support many different services. Currently this tool supports – TELNET, FTP, HTTP, HTTPS, HTTP-PROXY, SMB, SMBNT, MS-SQL, MYSQL, REXEC, RSH, RLOGIN, CVS, SNMP, SMTP-AUTH, SOCKS5, VNC, POP3, IMAP, NNTP, PCNFS, ICQ, SAP/R3, LDAP2, LDAP3, Postgre...
Design/Logic Flaw
Unspecified vulnerability in the Perl component in Oracle Database Server 11.2.0.1, 11.1.0.7, 10.2.0.3, 10.2.0.4, and 10.1.0.5; and Fusion Middleware 11.1.1.1.0 and 11.1.1.2.0; allows local users to affect integrity via unknown vectors related to Local Logon...
CVE-2010-2389
Unspecified vulnerability in the Perl component in Oracle Database Server 11.2.0.1, 11.1.0.7, 10.2.0.3, 10.2.0.4, and 10.1.0.5; and Fusion Middleware 11.1.1.1.0 and 11.1.1.2.0; allows local users to affect integrity via unknown vectors related to Local Logon...
Microsoft Security Bulletin MS10-073 - Important Vulnerabilities in Windows Kernel-Mode Drivers Could Allow Elevation of Privilege (981957)
Microsoft Security Bulletin MS10-073 - Important Vulnerabilities in Windows Kernel-Mode Drivers Could Allow Elevation of Privilege 981957 Published: October 12, 2010 Version: 1.0 General Information Executive Summary This security update resolves several publicly disclosed vulnerabilities in the...
CVE-2010-2389: Undefined Security Weakness
Unspecified vulnerability in the Perl component in Oracle Database Server 11.2.0.1, 11.1.0.7, 10.2.0.3, 10.2.0.4, and 10.1.0.5; and Fusion Middleware 11.1.1.1.0 and 11.1.1.2.0; allows local users to affect integrity via unknown vectors related to Local Logon...
PT-2010-3973
Name of the Vulnerable Software and Affected Versions Oracle Database Server versions 10.1.0.5 through 11.2.0.1 Fusion Middleware versions 11.1.1.1.0 through 11.1.1.2.0 Description The issue allows local users to affect integrity via unknown vectors related to Local Logon. Recommendations For...