CVE-2007-0163

SecureKit Steganography 1.7.1 and 1.8 embeds password information in the carrier file, which allows remote attackers to bypass authentication requirements and decrypt embedded steganography by replacing the last 20 bytes of the JPEG image with alternate password information...

Mac OS X 10.4.x < 10.4.6 Firmware Unspecified Password Bypass

The remote host is running a version of Mac OS X 10.4.x that is prior to 10.4.6. Mac OS X 10.4.6 contains a security fix for a local authentication bypass vulnerability. A malicious local user may exploit this vulnerability to bypass the firmware password and gain access to Single User mode. This...

CVE-2005-4688

PunBB 1.2.9 does not require password entry when changing the e-mail address in an account's profile, which might allow an attacker to make an address change via a hijacked login session...

DEBIAN-CVE-2005-3538

hfaxd in HylaFAX 4.2.3, when PAM support is disabled, accepts arbitrary passwords, which allows remote attackers to gain privileges...

Fusion SBX Password Bypass and Command Execution

The remote host is running Fusion SBX, a guest book written in PHP. A vulnerability in the remote version of this software allows remote attackers to modify the product SPDX-FileCopyrightText: 2005 Noam Rathaus Some text descriptions might be excerpted from a referenced sources, and are Copyright...

CVE-2005-2879

Advansysperu Software USB Lock Auto-Protect AP 1.5 uses a weak encryption scheme to encrypt passwords, which allows local users to gain sensitive information and bypass USB interface protection...

CVE-2004-2258

Xconfig in Hummingbird Exceed before 9.0.0.1, when the Screen Definition is password-protected, allows local users to access certain options by switching to another tab, then switching back to the original tab...

Acrowave AAP-3100AR wireless router unauthorized access

It's possible to acces device without password...

[Full-disclosure] MSN Plus Password Change Security Bypass Vulnerability

Title: MSN Plus Password Change Security Bypass Vulnerability Risk: Medium Date: 07.04.2005 Publisher: m0fo editor at sec.org.il Source: http://sec.org.il/articles.php?a=187 Vendor: http://www.msgplus.net MSN Plus is additional application for the MSN Messenger. Msn Plus is adding a lot of option...

[SA13302] BNC IRC proxy Incorrect Password Authentication Bypass Vulnerability

TITLE: BNC IRC proxy Incorrect Password Authentication Bypass Vulnerability SECUNIA ADVISORY ID: SA13302 VERIFY ADVISORY: http://secunia.com/advisories/13302/ CRITICAL: Moderately critical IMPACT: Security Bypass WHERE: From remote SOFTWARE: BNC IRC proxy 2.x http://secunia.com/product/1622/...

CVE-2002-1541

BadBlue 1.7 allows remote attackers to bypass password protections for directories and files via an HTTP request containing an extra / slash...

Mandrake Linux Security Advisory : MySQL (MDKSA-2002:087)

Two vulnerabilities were discovered in all versions of MySQL prior to 3.23.53a and 4.0.5a by Stefan Esser. The first can be used by any valid MySQL user to crash the MySQL server, the other allows anyone to bypass the MySQL password check or execute arbitrary code with the privilege of the user...

not_so_smartether.txt

There is a vulnerability within the OS that this and other samsung managed switches. The problem resides in the way that the admin user is authenticated when trying to login using telnet remote or from console local. Now just so everyone who reads this knows, I am not that up to date on all of...

Cisco Security Advisory: Cisco Personal Assistant User Password Bypass Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: Cisco Personal Assistant User Password Bypass Vulnerability Document ID: 47765 Revision 1.0 FINAL For Public Release 2004 January 8 17:00 UTC GMT - ----------------------------------------------------------------------- Conten...

Cisco Personal Assistant User Password Bypass Vulnerability

...

MDaemon protection bypass

Empty password allows to bypass SMTP authentication...

Cisco IOS 12.x/11.x - HTTP Remote Integer Overflow

/ ..--== Phenoelit ==--.. / \ | CISCO CASUM EST | .. ../ ---==MMIII==--- Cisco IOS 12.x/11.x remote exploit for HTTP integer overflow in URL using IOS 11.x UDP Echo memory leak for shellcode placing and address calculation. This code does support exploitation of any 11.x Cisco 1600 and 2500 serie...

ICQ Pro 2003a - 'ca1-icq.asm' Password Bypass

; ; CUT HERE - CUTE HERE - ca1-icq.asm - CUT HERE - CUT HERE BOF ; ------------------------------------------------------------------------- ; ; 07/02/2003 - ca1-icq.asm ; ICQ Password Bypass exploit. ; written by Caua Moura Prado aka ca1 ; ; This exploit allows you to login to ICQ server using a...

ICQ Pro 2003a Password Bypass exploit (ca1-icq.asm)

No description provided by source. ; ; CUT HERE - CUTE HERE - ca1-icq.asm - CUT HERE - CUT HERE BOF ; ------------------------------------------------------------------------- ; ; 07/02/2003 - ca1-icq.asm ; ICQ Password Bypass exploit. ; written by Caua Moura Prado aka ca1 ; ; This exploit allows...

ICQ Pro 2003a - ca1-icq.asm Password Bypass

ICQ Pro 2003a - ca1-icq.asm Password Bypass ; ; CUT HERE - CUTE HERE - ca1-icq.asm - CUT HERE - CUT HERE BOF ; ------------------------------------------------------------------------- ; ; 07/02/2003 - ca1-icq.asm ; ICQ Password Bypass exploit. ; written by Caua Moura Prado aka ca1 ; ; This explo...