1581 matches found
CVE-2008-6055
PreProjects Pre Classified Listings stores pclasp.mdb under the web root with insufficient access control, which allows remote attackers to obtain passwords via a direct request...
RedHat Security Advisory RHSA-2009:0205
The remote host is missing updates to Dovecot announced in advisory RHSA-2009:0205. A flaw was found in Dovecot's ACL plug-in. The ACL plug-in treated negative access rights as positive rights, which could allow an attacker to bypass intended access restrictions. CVE-2008-4577 A password disclosu...
RedHat Security Advisory RHSA-2009:0205
The remote host is missing updates to Dovecot announced in advisory RHSA-2009:0205. A flaw was found in Dovecot SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifie...
EPOLL SYSTEM 3.1 - Password.dat Disclosure
EPOLL SYSTEM 3.1 - Password.dat Disclosure !/usr/bin/python Portal Name: EPOLL SYSTEM Version : All version 'Google Dork : Powered by Egorix Exploit Coded by: PouyaServer Exploit Discovered by: PouyaServer Contact Me : [email protected] Epoll system login page = www.site.com/Path/admin.php...
EPOLL SYSTEM 3.1 - 'Password.dat' Disclosure
!/usr/bin/python Portal Name: EPOLL SYSTEM Version : All version 'Google Dork : Powered by Egorix Exploit Coded by: PouyaServer Exploit Discovered by: PouyaServer Contact Me : [email protected] Epoll system login page = www.site.com/Path/admin.php import urllib import sys import parser...
ECOUNT System password.dat Disclosure
!/usr/bin/python Portal Name: ECOUNT SYSTEM version : 2.1 'Google Dork : ECOUNT SYSTEM v2.1 Exploit Coded by: PouyaServer Exploit Discovered by: PouyaServer Contact Me : [email protected] Ecount system login page = www.site.com/Path/admin.php import urllib import sys import parser...
EPOLL System password.dat Disclosure
!/usr/bin/python Portal Name: EPOLL SYSTEM Version : All version 'Google Dork : Powered by Egorix Exploit Coded by: PouyaServer Exploit Discovered by: PouyaServer Contact Me : [email protected] Epoll system login page = www.site.com/Path/admin.php import urllib import sys import parser...
TikiWiki Information Disclosure
A vulnerability has been reported in Tikiwiki, which can be exploited by an anonymous user to dump the MySQL user & passwd just by creating a mysql error with the "sortmode" var. The vulnerability was reported in Tikiwiki version 1.9.5. This module requires Metasploit:...
Gallery Kys 1.0 Password Disclosure / XSS
START 0x01 Informations: Script : Gallery Kys 1.0 Download : http://www.advancescripts.com/djump.php?ID=6285 Vulnerability : Admin Password Disclosure / Permanent XSS Author : Osirys Contact : osirysatlivedotit Website : http://osirys.org 0x02 Bug: Admin Password Disclosure Bugged file is:...
RHEL 5 : dovecot (RHSA-2009:0205)
An updated dovecot package that corrects two security flaws and various bugs is now available for Red Hat Enterprise Linux 5. This update has been rated as having low security impact by the Red Hat Security Response Team. Dovecot is an IMAP server for Linux and UNIX-like systems, primarily writte...
CVE-2008-2367
Red Hat Certificate System 7.2 uses world-readable permissions for password.conf and unspecified other configuration files, which allows local users to discover passwords by reading these files...
Low: Red Hat Security Advisory: dovecot security and bug fix update
An updated dovecot package that corrects two security flaws and various bugs is now available for Red Hat Enterprise Linux 5. This update has been rated as having low security impact by the Red Hat Security Response Team. Dovecot is an IMAP server for Linux and UNIX-like systems, primarily writte...
Gallery Kys 1.0 Admin Password Disclosure / Permanent XSS Vulns
No description provided by source. START 0x01 Informations: Script : Gallery Kys 1.0 Download : http://www.advancescripts.com/djump.php?ID=6285 Vulnerability : Admin Password Disclosure / Permanent XSS Author : Osirys Contact : osirysatlivedotit Website : http://osirys.org 0x02 Bug: Admin Passwor...
Gallery Kys 1.0 - Admin Password Disclosure Persistent Cross-Site Scripting
Gallery Kys 1.0 - Admin Password Disclosure Persistent Cross-Site Scripting START 0x01 Informations: Script : Gallery Kys 1.0 Download : http://www.advancescripts.com/djump.php?ID=6285 Vulnerability : Admin Password Disclosure / Permanent XSS Author : Osirys Contact : osirysatlivedotit Website :...
Gallery Kys 1.0 - Admin Password Disclosure / Persistent Cross-Site Scripting
START 0x01 Informations: Script : Gallery Kys 1.0 Download : http://www.advancescripts.com/djump.php?ID=6285 Vulnerability : Admin Password Disclosure / Permanent XSS Author : Osirys Contact : osirysatlivedotit Website : http://osirys.org 0x02 Bug: Admin Password Disclosure Bugged file is:...
CVE-2009-0170
Sun Java System Access Manager 6.3 2005Q1, 7 2005Q4, and 7.1 allows remote authenticated users with console privileges to discover passwords, and obtain unspecified other "access to resources," by visiting the Configuration Items component in the console...
Comersus Cart < 7.099 Remote Password Disclosure
Binary data 4812.prm...
Oempro index.php FormValue_Email Parameter SQL Injection Authentication Bypass
The remote host is running Oempro, a commercial list management and email marketing application written in PHP. The installed version of Oempro fails to sanitize user-supplied input to the 'FormValueEmail' parameter of the 'index.php' script before using it in a database query. An unauthenticated...
Altiris Deployment Solution Server < 6.9.355 Password Disclosure (SYM08-020) (deprecated)
Binary data 4772.prm...
Altiris Deployment Solution Server < 6.9.355 Password Disclosure (SYM08-020)
The version of the Altiris Deployment Solution installed on the remote host reportedly is affected by a password disclosure vulnerability. Altiris Deployment Solution Server reportedly stores 'Application Identity Account password' in the system memory in plain-text. It may be possible for an...