3787 matches found
appcms 2.0.101版本 密码明文泄露
No description provided by source...
Windows Post Manage WDigest Credential Caching
On Windows 8/2012 or higher, the Digest Security Provider WDIGEST is disabled by default. This module enables/disables credential caching by adding/changing the value of the UseLogonCredential DWORD under the WDIGEST provider's Registry key. Any subsequent logins will allow mimikatz to recover th...
Monkey race ray! RSA conference badge scanning application broke vulnerability-vulnerability warning-the black bar safety net
Recently, the BLUE BOX company's security researchers found: RSA 2 0 1 6 The General Assembly on the use of badge scanning APP there is a hard-coded default passwords. This year, RSA 2 0 1 6 The participants will get a unique surprise: the General Assembly, as many manufacturers offer a Samsung...
QNAP Signage Station and iArtist Lite contain multiple vulnerabilities
Overview The QNAP Signage Station prior to version 2.0.1 and the accompanying iArtist Lite application contain multiple vulnerabilities. Description CWE-434: Unrestricted Upload of File with Dangerous Type - CVE-2015-6022An authenticated attacker without administrative permissions may upload a...
Lenovo SHAREit Transfer Unencrypted Vulnerability
Lenovo SHAREit 茄子快传 is a set of file sharing software from the Chinese company Lenovo Lenovo. A transfer unencrypted vulnerability exists in Lenovo SHAREit for Windows before 3.2.0 and SHAREit for Android before 3.5.48ww, where the program transfers files in plaintext. A remote attacker can explo...
Lenovo SHAREit App Hard-Coded Password
Lenovo today has patched a number of vulnerabilities that jeopardize private data, which are largely enabled by a simple hard-coded password in a freely available file-sharing application. The flaws were found in in the Lenovo ShareIT application for Android and Windows by researchers at Core...
Medium: samba
Issue Overview: A missing access control flaw was found in Samba. A remote, authenticated attacker could use this flaw to view the current snapshot on a Samba share, despite not having DIRECTORYLIST access rights. An access flaw was found in the way Samba verified symbolic links when creating new...
Shell In A Box HTTPS fallback DNS binding vulnerability
Shell In A Box is a soft SSH terminal product for accessing remote Linux servers. A security vulnerability in the HTTPS fallback implementation of Shell In A Box allows remote attackers to perform DNS rebinding attacks using the '/plain' URL...
DEBIAN-CVE-2015-8400
The HTTPS fallback implementation in Shell In A Box aka shellinabox before 2.19 makes it easier for remote attackers to conduct DNS rebinding attacks via the "/plain" URL...
UBUNTU-CVE-2015-8400
The HTTPS fallback implementation in Shell In A Box aka shellinabox before 2.19 makes it easier for remote attackers to conduct DNS rebinding attacks via the "/plain" URL...
CVE-2015-8400: Undefined Security Weakness
The HTTPS fallback implementation in Shell In A Box aka shellinabox before 2.19 makes it easier for remote attackers to conduct DNS rebinding attacks via the "/plain" URL...
Moderate: Red Hat Security Advisory: samba security update
Updated samba packages that fix multiple security issues are now available for Red Hat Gluster Storage 3.1 for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having Moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed...
samba: client requesting encryption vulnerable to downgrade attack
A man-in-the-middle vulnerability was found in the way "connection signing" was implemented by Samba. A remote attacker could use this flaw to downgrade an existing Samba client connection and force the use of plain text...
Moderate: Red Hat Security Advisory: samba security update
Updated samba packages that fix multiple security issues are now available for Red Hat Gluster Storage 3.1 for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having Moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed...
samba: client requesting encryption vulnerable to downgrade attack
A man-in-the-middle vulnerability was found in the way "connection signing" was implemented by Samba. A remote attacker could use this flaw to downgrade an existing Samba client connection and force the use of plain text...
ACAP Cleartext Authentication
The remote Automated Content Access Protocol ACAP service supports one or more authentication mechanisms that allow credentials to be sent in the clear. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid87732; scriptversion"$Revision: 1.1 $"; scriptcvsdate"$Date:...
ZTE ZXHN H108N R1A ZXV10 W300 Routers - Multiple Vulnerabilities
ZTE ZXHN H108N R1A ZXV10 W300 Routers - Multiple Vulnerabilities Exploit Title: ZTE ZXHN H108N R1A + ZXV10 W300 routers - multiple vulnerabilities Discovered by: Karn Ganeshen CERT VU 391604 Vendor Homepage: www.zte.com.cn Versions Reported ZTE ZXHN H108N R1A - Software version ZTE.bhs.ZXHNH108NR...
IBM System Networking Switch Center DB Service Remote Elevation of Privilege Vulnerability
This vulnerability allows remote attackers to disclose information on vulnerable installations of IBM System Networking Switch Center. Authentication is not required to exploit this vulnerability. The specific flaw exists within the IBM SNSC DB Service, that listens by default on port 40999. This...
IniNet Solutions embeddedWebServer Plain Text Save Vulnerability
IniNet Solutions GmbH is a Swiss company whose product, eWebServer, is third-party Web-based server software. IniNet Solutions embeddedWebServer suffers from a plain text save vulnerability that can be exploited by an attacker to elevate privileges...
IBC Solar ServeMaster Plain Text Password Vulnerability
ServeMaster TLP+ and Danfoss TLX Pro+ are web-based SCADA systems. A plain text password vulnerability exists in ServeMaster TLP+ and Danfoss TLX Pro+. An attacker can exploit this vulnerability to obtain a plain text password by viewing the web page source code...