[Full-Disclosure] SafeNet SoftRemote VPN Client Issue: Clear-text password stored in memory

SafeNet SoftRemote VPN Client Issue: Clear-text password stored in memory Summary: NTA Monitor have discovered a password disclosure issue in the SafeNet SoftRemote VPN client: The SoftRemote client stores the password in an obfuscated form in the Windows registry, but it also stores the...

CVE-2003-1078

The CVE-2003-1078 entry concerns the FTP client for Solaris 2.6, 7, and 8. When the debug (-d) flag is enabled, the client displays the user password on the screen during login, revealing the password in cleartext. The available documents confirm the affected software and the login-password expos...

DelphiTurk CodeBank 3.1 - Local Username and Password Disclosure

DelphiTurk CodeBank 3.1 - Local Username and Password Disclosure / DelphiTurk CodeBank Local Exploit Application: DelphiTurk CodeBank 3.1 and previous versions Procuder: Delphiturk.com Vulnerable Description: Delhiturk CodeBank discloses username and password to local users. Coded by: Kozan Web:...

DelphiTurk CodeBank 3.1 Local Username and Password Disclosure

Exploit for unknown platform in category local exploits ============================================================== DelphiTurk CodeBank 3.1 Local Username and Password Disclosure ============================================================== / DelphiTurk CodeBank Local Exploit Application:...

DelphiTurk CodeBank 3.1 - Local Username and Password Disclosure

/ DelphiTurk CodeBank Local Exploit Application: DelphiTurk CodeBank 3.1 and previous versions Procuder: Delphiturk.com Vulnerable Description: Delhiturk CodeBank discloses username and password to local users. Coded by: Kozan Web: www.netmagister.com Mail: kozanatnetmagisterdotcom / include...

DelphiTurk CodeBank 3.1 Local Username and Password Disclosure

No description provided by source. / DelphiTurk CodeBank Local Exploit Application: DelphiTurk CodeBank 3.1 and previous versions Procuder: Delphiturk.com Vulnerable Description: Delhiturk CodeBank discloses username and password to local users. Coded by: Kozan Web: www.netmagister.com Mail:...

Greymatter 1.3 Multiple Vulnerabilities

The remote host is running Greymatter, a web-based log and journal maintenance system implemented in Perl. The remote version of this software is vulnerable to an HTML injection attack due to a lack of filtering on user-supplied input in the file 'gm-comments.cgi'. An attacker may exploit this fl...

GLSA-200412-16 : kdelibs, kdebase: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200412-16 kdelibs, kdebase: Multiple vulnerabilities Daniel Fabian discovered that the KDE core libraries contain a flaw allowing password disclosure by making a link to a remote file. When creating this link, the resulting URL...

kdelibs, kdebase: Multiple vulnerabilities

Background KDE is a feature-rich graphical desktop environment for Linux and Unix-like Operating Systems. The KDE core libraries kdebase and kdelibs provide native support for many protocols. Konqueror is the KDE web browser and filemanager. Description Daniel Fabian discovered that the KDE core...

[Full-Disclosure] Password Disclosure for SMB Shares in KDE's Konqueror

------------------------------------------------------------------------- | Password Disclosure for SMB Shares in KDE's Konqueror | ------------------------------------------------------------------------- Date: Nov. 29, 2004 Author: Daniel Fabian Product: KDE, Konquerer Vendor: KDE e. V...

Firefox < 1.0.0 Multiple Vulnerabilities

The installed version of Firefox is earlier than 1.0.0. Such versions have multiple vulnerabilities that could result in a denial of service, local file disclosure, or password disclosure. These vulnerabilities are due to the fact that Firefox does handle the tag correctly. C Tenable Network...

Microsoft Internet Explorer 6.0 Firefox 0.x Netscape 7.x - IMG Tag Multiple Vulnerabilities

Microsoft Internet Explorer 6.0 Firefox 0.x Netscape 7.x - IMG Tag Multiple Vulnerabilities source: https://www.securityfocus.com/bid/11645/info Various browsers are reported prone to multiple vulnerabilities in the image handling functionality through the tag. These issues can allow remote...

konqueror -- Password Disclosure for SMB Shares

When browsing SMB shares with Konqueror, shares with authentication show up with hidden password in the browser bar. It is possible to store the URL as a shortcut on the desktop where the password is then available in plain text...

[SA12685] proxytunnel Username and Password Disclosure

TITLE: proxytunnel Username and Password Disclosure SECUNIA ADVISORY ID: SA12685 VERIFY ADVISORY: http://secunia.com/advisories/12685/ CRITICAL: Less critical IMPACT: Exposure of sensitive information WHERE: Local system SOFTWARE: proxytunnel 1.x http://secunia.com/product/3983/ DESCRIPTION: A...

[SA12639] Computer Associates Unicenter Common Services Password Disclosure

TITLE: Computer Associates Unicenter Common Services Password Disclosure SECUNIA ADVISORY ID: SA12639 VERIFY ADVISORY: http://secunia.com/advisories/12639/ CRITICAL: Less critical IMPACT: Exposure of sensitive information WHERE: Local system SOFTWARE: CA Unicenter ServicePlus Service Desk 6.x...

Multiple vulnerabilities in ActivePost Standard 3.1

Luigi Auriemma Application: ActivePost Standard http://www.activepost.net Versions: = 3.1 Platforms: Windows Bugs: - File-Server crash - File-server directory traversal and path disclosure - conference password disclosure Risk: critical Exploitation: remote, versus server only the third bug affec...

Remository - SQL Injection

Remository - SQL Injection source: https://www.securityfocus.com/bid/11219/info It is reported that the ReMOSitory module for Mambo is prone to an SQL injection vulnerability. This issue is due to a failure of the module to properly validate user supplied URI input. Because of this, a malicious...

Cisco VPN Concentrator HTML Source Certificate Password Disclosure (Bug ID CSCdw50657)

Binary data 2230.prm...

Cisco VPN Concentrator HTML Source Certificate Password Disclosure (Bug ID CSCdw50657)

Binary data 2228.prm...

IlohaMail Unspecified Database Password Disclosure Weakness

The target is running at least one instance of IlohaMail version 0.6 or earlier. Such versions suffer from a potential password disclosure problem when databasae information is not saved in the session table. Nessus has determined the vulnerability exists on the target simply by looking at the...