1581 matches found
imlock2006.txt
IM Lock 2006 - Insecure Registry Permission Vulnerability --------------------------------------------------------- Application: IM Lock 2006 Vendor: www.comvigo.com Corporation: Comvigo, Inc. Version: Latest: 2 March 2006 - Home Edition, Enterprise & Professional Description: IM Lock 2006...
IM Lock 2006 - Insecure Registry Permission Vulnerability
IM Lock 2006 - Insecure Registry Permission Vulnerability --------------------------------------------------------- Application: IM Lock 2006 Vendor: www.comvigo.com Corporation: Comvigo, Inc. Version: Latest: 2 March 2006 - Home Edition, Enterprise & Professional Description: IM Lock 2006...
Fedora Directory Server Crafted IFRAME adm.conf Admin Server Password Disclosure
The remote host appears to be running Fedora Directory Server, a directory server implementation for Fedora Core. The Administration Server, which is used to manage Fedora DS, allows an unauthenticated attacker to retrieve the admin password hash through a simple GET request. %NASLMINLEVEL 70300 ...
[SA18939] Fedora Directory Server Admin Server Password Disclosure
TITLE: Fedora Directory Server Admin Server Password Disclosure SECUNIA ADVISORY ID: SA18939 VERIFY ADVISORY: http://secunia.com/advisories/18939/ CRITICAL: Moderately critical IMPACT: Exposure of sensitive information WHERE: From local network SOFTWARE: Fedora Directory Server 1.x...
ASPThai.Net Guestbook 5.5 - Authentication Bypass
!/usr/bin/perl SQL Injection Exploit for ASPThai.Net Guestbook new or die; $cookiejar = HTTP::Cookies-new; $xpl-agent'g00ns'; $xpl-cookiejar$cookiejar; $res = $xpl-post $Server.'checkuser.asp', Content = 'txtUserName' = '' or '%67%30%30%6e%73'='%67%30%30%6e%73', 'txtUserPass' = '' or...
CVE-2006-0423
BEA WebLogic Portal 8.1 through SP3 stores the password for the RDBMS Authentication provider in cleartext in the config.xml file, which allows attackers to gain privileges...
CVE-2005-4133
Sun Update Connection in Solaris 10, when configured to use a web proxy, may allow local users to obtain the proxy authentication password through an unspecified vector and proxy log files. The available sources describe the affected component and the impact (exposure of proxy credentials to loca...
IlohaMail Password Disclosure Vulnerability
The target is running at least one instance of IlohaMail version 0.6 or earlier. Such versions suffer from a potential password disclosure problem when databasae information is not saved in the session table. OpenVAS has determined the vulnerability exists on the target simply by looking at the...
BEA WebLogic Operator/Admin Password Disclosure Vulnerability
BEA WebLogic Server and WebLogic Express are prone to a vulnerability that may result in the disclosure of Operator or Admin passwords. SPDX-FileCopyrightText: 2004 Astharot Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...
BEA WebLogic Operator/Admin Password Disclosure Vulnerability
The remote web server is running WebLogic. BEA WebLogic Server and WebLogic Express are reported prone to a vulnerability that may result in the disclosure of Operator or Admin passwords. An attacker who has interactive access to the affected managed server, may potentially exploit this issue in ...
IlohaMail < 0.7.0 Password Disclosure Vulnerability
IlohaMail suffers from a potential password disclosure problem when databasae information is not saved in the session table. SPDX-FileCopyrightText: 2004 George A. Theall Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...
[SA17293] Fetchmail "fetchmailconf" Password Disclosure Vulnerability
TITLE: Fetchmail "fetchmailconf" Password Disclosure Vulnerability SECUNIA ADVISORY ID: SA17293 VERIFY ADVISORY: http://secunia.com/advisories/17293/ CRITICAL: Less critical IMPACT: Exposure of sensitive information WHERE: Local system SOFTWARE: Fetchmail 6.x http://secunia.com/product/370/...
RHEL 2.1 / 3 : openldap and nss_ldap (RHSA-2005:751)
Updated openldap and nssldap packages that correct a potential password disclosure issue are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. OpenLDAP is an open source suite of LDAP Lightweight Directory Access Protocol...
Utopia News Pro 1.1.3 SQL Injection / cross site scripting
2.56 07/10/2005 Utopia News Pro 1.1.3 SQL Injection / cross site scripting software: site: http://www.utopiasoftware.net axss: http://target/path/header.php?sitetitle=/titlescriptalertdocument.cookie/script!-- http://target/path/footer.php?version=scriptalertdocument.cookie/script...
[SA16817] LineControl Java Client Log Messages Password Disclosure
---------------------------------------------------------------------- Bist Du interessiert an einem neuen Job in IT-Sicherheit? Secunia hat zwei freie Stellen als Junior und Senior Spezialist in IT- Sicherheit: http://secunia.com/secuniavacancies/...
IMRadio-4.0-expl.txt
/================================================================ Mercora IMRadio 4.0.0.0 password disclosure local exploit by Kozan Discovered & Coded by: Kozan Credits to ATmaCA Web: www.spyinstructors.com Mail: [email protected] ===== Application...
ZipTorrent1.3.7.3.txt
/================================================================ ZipTorrent 1.3.7.3 Local Proxy Password Disclosure Exploit by Kozan Discovered & Coded by Kozan Credits to ATmaCA Web: www.spyinstructors.com Mail: [email protected] Application: -------------------- ZipTorrent 1.3.7.3 and...
Mercora IMRadio <= 4.0.0.0 Local Password Disclosure Exploit
Exploit for unknown platform in category local exploits ============================================================ Mercora IMRadio = 4.0.0.0 Local Password Disclosure Exploit ============================================================...
Mercora IMRadio <= 4.0.0.0 Local Password Disclosure Exploit
No description provided by source. /================================================================ Mercora IMRadio 4.0.0.0 password disclosure local exploit by Kozan Discovered & Coded by: Kozan Credits to ATmaCA Web: www.spyinstructors.com Mail: [email protected] ===== Application...
Mercora IMRadio 4.0.0.0 - Local Password Disclosure
Mercora IMRadio 4.0.0.0 - Local Password Disclosure /================================================================ Mercora IMRadio 4.0.0.0 password disclosure local exploit by Kozan Discovered & Coded by: Kozan Credits to ATmaCA Web: www.spyinstructors.com Mail: [email protected] =====...