710 matches found
PunBB <= 1.3.4 Pun_PM <= v1.2.6 Blind SQL Injection Vulnerability
Exploit for php platform in category web applications ================================================================= PunBB 526 function punpmeditmessage global $forumdb, $forumuser, $langpunpm; $errors = array; // Verify input data $query = array 'SELECT' = 'm.id as id, m.senderid as senderid,...
rapidCMS V2 backend authentication bypass vulnerability-vulnerability warning-the black bar safety net
rapidCMS V2 background login authentication has not been strictly filtered, resulting in Universal password bypass vulnerability. Use method: User: something Pass: 'OR '1'='1 Demo : http://site/admin.php...
CVE-2010-0401: Undefined Security Weakness
OpenTTD before 1.0.1 accepts a company password for authentication in response to a request for the server password, which allows remote authenticated users to bypass intended access restrictions or cause a denial of service daemon crash by sending a company password packet...
WordPress <= 2.9.2绕过口令保护漏洞
BUGTRAQ ID: 38876 WordPress是一款免费的论坛Blog系统。 用户可以对WordPress论坛中的每个页面或帖子设置口令，这些口令可以相同，但通过口令访问的功能设置了全站点都通用的全局Cookie，因此用户只要获得了一个对页面或帖子所设置的口令，就可以看到所有受保护的页面或帖子（在请求时会自动许可访问）。 WordPress = 2.9.2 厂商补丁： WordPress --------- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://wordpress.org/...
GRUB 2 password bypass
Error in password protection allows to boot system by guessing first character of the password...
CVE-2009-2836
Race condition in Login Window in Apple Mac OS X 10.6.x before 10.6.2, when at least one account has a blank password, allows attackers to bypass password authentication and obtain login access to an arbitrary account via unspecified vectors...
CVE-2009-2836: Concurrent Execution using Shared Resource with Improper Synchronization
Race condition in Login Window in Apple Mac OS X 10.6.x before 10.6.2, when at least one account has a blank password, allows attackers to bypass password authentication and obtain login access to an arbitrary account via unspecified vectors...
CVE-2009-3525
The pyGrub boot loader in Xen 3.0.3, 3.3.0, and Xen-3.3.1 does not support the password option in grub.conf for para-virtualized guests, which allows attackers with access to the para-virtualized guest console to boot the guest or modify the guest's kernel boot parameters without providing the...
CVE-2009-3525: Undefined Security Weakness
The pyGrub boot loader in Xen 3.0.3, 3.3.0, and Xen-3.3.1 does not support the password option in grub.conf for para-virtualized guests, which allows attackers with access to the para-virtualized guest console to boot the guest or modify the guest's kernel boot parameters without providing the...
CVE-2009-1596
Ignite Realtime Openfire before 3.6.5 does not properly implement the register.password aka canChangePassword console configuration setting, which allows remote authenticated users to bypass intended policy and change their own passwords via a passwdchange IQ packet...
CVE-2009-1596
CVE-2009-1596 affects Ignite Realtime Openfire prior to 3.6.5. The register.password (canChangePassword) console setting is not properly enforced, allowing remote authenticated users to bypass the intended policy and change their own passwords via a passwd_change IQ packet. The vulnerability enab...
openfire -- Openfire No Password Changes Security Bypass
Secunia reports: A vulnerability has been reported in Openfire which can be exploited by malicious users to bypass certain security restrictions. The vulnerability is caused due to Openfire not properly respecting the no password changes setting which can be exploited to change passwords by sendi...
CVE-2008-6535
admin/settings.php in PayPal eStores allows remote attackers to bypass intended access restrictions and change the administrative password via a direct request with a modified NewAdmin parameter...
Crack the freezing point Restore Wizard（Deep Freeze of approach-vulnerability warning-the black bar safety net
Here and share with you my results, the previous is the freezing point restore screwed, and everyone else previously met the problem is: Ctrl+Shift+Alt+F6 or Shift double click the Deep Freeze icon call not the freezing point, so that only every time you restart your computer the restore, the...
CVE-2008-5103
CVE-2008-5103 affects VMBuilder 0.9 in Ubuntu 8.10, where the python-vm-builder and ubuntu-vm-builder implementations omit the -e option when calling chpasswd with a root:! argument. This results in the root account being configured with a cleartext password of !, bypassing intended login restric...
CVE-2008-4540
This CVE concerns Windows Mobile 6 on the HTC Hermes, where WLAN passwords are exposed to the auto-completion mechanism of the password field. The root cause is that the password input handling allows nearby attackers to retrieve credentials, enabling bypass of WLAN authentication and potential u...
CVE-2008-4540
Windows Mobile 6 on the HTC Hermes device makes WLAN passwords available to an auto-completion mechanism for the password input field, which allows physically proximate attackers to bypass password authentication and obtain WLAN access...
CVE-2008-3610: Improper Authentication
Race condition in Login Window in Apple Mac OS X 10.5 through 10.5.4, when a blank-password account is enabled, allows attackers to bypass password authentication and login to any account via multiple attempts to login to the blank-password account, followed by selection of an arbitrary account...