x-news 1.1 - 'users.txt' Remote Password Disclosure

x-news 1.1 Password Disclosure Vulnerability Affected Software: x-news 1.1 x-news Website: http://xqus.com Bugfounder: bd0rk Website: www.soh-crew.it.tt Contact: bd0rkathackermail.com Greetings: str0ke, Perle, TheJT, ajann +Exploit: http://target/xnewspath/news/db/users.txt Showexample:...

Voodoo chat 1.0RC1b - 'users.dat' Password Disclosure

Voodoo chat 1.0RC1b Password Disclosure Vulnerability Affected Software: Voodoo chat 1.0RC1b Download: http://switch.dl.sourceforge.net/sourceforge/voc/voc-1.0RC1b.zip Found3R: bd0rk Website: www.soh-crew.it.tt Contact: bd0rkathackermail.com Greetings: str0ke, Perle, TheJT, Shizoe +Exploit:...

EasyNews PRO News Publishing 4.0 - Password Disclosure

= EasyNews PRO News Publishing 4.0 Remote Password Disclosure Vulnerability Affected Software: Easy News 4.0 PRO = Risk: Critical = Download: http://www.stphp.com/scripts/EasyNewsPRO40.zip = Bugfounder: bd0rk = Contact: bd0rkathackermail.com = Greets: str0ke, crashovernight, TheJT, Kacper Usage:...

EasyNews PRO News Publishing 4.0 Password Disclosure Vulnerability

Exploit for unknown platform in category web applications ================================================================== EasyNews PRO News Publishing 4.0 Password Disclosure Vulnerability ================================================================== = Affected Software: Easy News 4.0 PRO...

EasyNews PRO News Publishing 4.0 - Password Disclosure

EasyNews PRO News Publishing 4.0 - Password Disclosure = EasyNews PRO News Publishing 4.0 Remote Password Disclosure Vulnerability Affected Software: Easy News 4.0 PRO = Risk: Critical = Download: http://www.stphp.com/scripts/EasyNewsPRO40.zip = Bugfounder: bd0rk = Contact: bd0rkathackermail.com ...

CVE-2006-6617

projectserver/logon/pdsrequest.asp in Microsoft Project Server 2003 allows remote authenticated users to obtain the MSProjectUser password for a SQL database via a GetInitializationData request, which includes the information in the UserName and Password tags of the response...

ashp20.txt

AnnonceScriptHP V2.0 -------------------- Vendor site: http://www.scripthp.com/ Product: AnnonceScriptHP V2.0 Vulnerability: XSS & SQL Injection Vulnerability Credits: MrKaLiMaN Reported to Vendor: 02/12/06 Public disclosure: 09/12/06 Description: ------------ Password disclosure all members:...

AnnonceScriptHP V2.0 Multiple Vulnerabilities

AnnonceScriptHP V2.0 -------------------- Vendor site: http://www.scripthp.com/ Product: AnnonceScriptHP V2.0 Vulnerability: XSS & SQL Injection Vulnerability Credits: MrKaLiMaN Reported to Vendor: 02/12/06 Public disclosure: 09/12/06 Description: ------------ Password disclosure all members:...

P-News v2 (user.txt) Remote Password Disclosure Vulnerability

No description provided by source. P-News V² - user.txt Information Disclosure Vulnerability Critical Level : Dangerous Script Download: http://download.planerd.net/dir/php Bugfounder: Lu7k Contact Me : www.school-of-hack.de or [email protected]...

P-News 2.0 - user.txt Remote Password Disclosure

P-News 2.0 - user.txt Remote Password Disclosure P-News V² - user.txt Information Disclosure Vulnerability Critical Level : Dangerous Script Download: http://download.planerd.net/dir/php Bugfounder: Lu7k Contact Me : www.school-of-hack.de or [email protected]...

CVE-2006-5659

PAMextern before 0.2 sends a password as a command line argument, which allows local users to obtain the password by listing the command line arguments, such as ps. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

tikiwiki 1.9.5 mysql password disclosure & xss

/==========================================/ //tikiwiki version 1.9.5 CVS -Sirius- PoC // Product: Tikiwiki // URL: http://tikiwiki.org/ // RISK: critical /==========================================/ there's a critical security bug in tikiwiki version 1.9.5 CVS -Sirius- a anonymous user , can dum...

Netref 4 - 'cat_for_aff.php' Source Code Disclosure

option.php Reader 'Script Name: Netref 4 catforaff.php Source Code Disclosure 'Coded by : ajann 'Author : ajann 'Contact : : 'ExploitName: exploit4.asp 'Note : exploit file name =exploit4.asp 'Note : http://target/path/script/catforaff.php?addirect=../etc/passwd |etc... 'Using : Write Target afte...

ContentKeeper Authenticated Access Password Disclosure

aushack.com - Vulnerability Advisory ----------------------------------------------- Release Date: 22-Sep-2006 Software: ContentKeeper Technologies - ContentKeeper http://www.contentkeeper.com/ "ContentKeeper is an industry leading Internet content filter that allows organisations to monitor,...

Netopia SNMP Password Disclosure

Binary data 3747.prm...

[SA21997] Amazing Little Poll "lp_settings.inc" Password Disclosure

TITLE: Amazing Little Poll "lpsettings.inc" Password Disclosure SECUNIA ADVISORY ID: SA21997 VERIFY ADVISORY: http://secunia.com/advisories/21997/ CRITICAL: Moderately critical IMPACT: Exposure of sensitive information WHERE: From remote SOFTWARE: Amazing Little Poll 1.x...

[SA21988] CMtextS admin.txt Password Disclosure

TITLE: CMtextS admin.txt Password Disclosure SECUNIA ADVISORY ID: SA21988 VERIFY ADVISORY: http://secunia.com/advisories/21988/ CRITICAL: Moderately critical IMPACT: Exposure of sensitive information WHERE: From remote SOFTWARE: CMtextS 1.x http://secunia.com/product/11994/ DESCRIPTION: Kacper ha...

CVE-2006-4798

SQL-Ledger before 2.4.4 stores a password in a query string, which might allow context-dependent attackers to obtain the password via a Referer field or browser history...

[SA21705] OpenVMS Session Control Password Disclosure Security Issue

---------------------------------------------------------------------- Want to work within IT-Security? Secunia is expanding its team of highly skilled security experts. We will help with relocation and obtaining a work permit. Currently the following type of positions are available:...

Corsaire Security Advisory - VMware ESX Server Password Disclosure in Cookie issue

-- Corsaire Security Advisory -- Title: VMware ESX Server Password Disclosure in Cookie issue Date: 12.05.06 Application: VMware ESX prior to 2.5.2 patch 4 VMware ESX prior to 2.0.2 Environment: VMware ESX Author: Martin O'Neal [email protected] Audience: General distribution Reference:...