1976 matches found
CVE-2006-0843: Undefined Security Weakness
Leif M. Wright's Blog 3.5 stores the config file and other txt files under the web root with insufficient access control, which allows remote attackers to read the administrator's password...
Fedora Directory Server Crafted IFRAME adm.conf Admin Server Password Disclosure
The remote host appears to be running Fedora Directory Server, a directory server implementation for Fedora Core. The Administration Server, which is used to manage Fedora DS, allows an unauthenticated attacker to retrieve the admin password hash through a simple GET request. %NASLMINLEVEL 70300 ...
[SA18939] Fedora Directory Server Admin Server Password Disclosure
TITLE: Fedora Directory Server Admin Server Password Disclosure SECUNIA ADVISORY ID: SA18939 VERIFY ADVISORY: http://secunia.com/advisories/18939/ CRITICAL: Moderately critical IMPACT: Exposure of sensitive information WHERE: From local network SOFTWARE: Fedora Directory Server 1.x...
ASPThai.Net Guestbook 5.5 - Authentication Bypass
!/usr/bin/perl SQL Injection Exploit for ASPThai.Net Guestbook new or die; $cookiejar = HTTP::Cookies-new; $xpl-agent'g00ns'; $xpl-cookiejar$cookiejar; $res = $xpl-post $Server.'checkuser.asp', Content = 'txtUserName' = '' or '%67%30%30%6e%73'='%67%30%30%6e%73', 'txtUserPass' = '' or...
CVE-2006-0423
BEA WebLogic Portal 8.1 through SP3 stores the password for the RDBMS Authentication provider in cleartext in the config.xml file, which allows attackers to gain privileges...
CVE-2005-4175: Undefined Security Weakness
Insyde BIOS V190 does not clear the keyboard buffer after reading the BIOS password during system startup, which allows local administrators or users to read the password directly from physical memory...
CVE-2005-4133
Sun Update Connection in Solaris 10, when configured to use a web proxy, may allow local users to obtain the proxy authentication password through an unspecified vector and proxy log files. The available sources describe the affected component and the impact (exposure of proxy credentials to loca...
BEA WebLogic Operator/Admin Password Disclosure Vulnerability
BEA WebLogic Server and WebLogic Express are prone to a vulnerability that may result in the disclosure of Operator or Admin passwords. SPDX-FileCopyrightText: 2004 Astharot Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...
BEA WebLogic Operator/Admin Password Disclosure Vulnerability
The remote web server is running WebLogic. BEA WebLogic Server and WebLogic Express are reported prone to a vulnerability that may result in the disclosure of Operator or Admin passwords. An attacker who has interactive access to the affected managed server, may potentially exploit this issue in ...
IlohaMail Password Disclosure Vulnerability
The target is running at least one instance of IlohaMail version 0.6 or earlier. Such versions suffer from a potential password disclosure problem when databasae information is not saved in the session table. OpenVAS has determined the vulnerability exists on the target simply by looking at the...
IlohaMail < 0.7.0 Password Disclosure Vulnerability
IlohaMail suffers from a potential password disclosure problem when databasae information is not saved in the session table. SPDX-FileCopyrightText: 2004 George A. Theall Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...
[SA17293] Fetchmail "fetchmailconf" Password Disclosure Vulnerability
TITLE: Fetchmail "fetchmailconf" Password Disclosure Vulnerability SECUNIA ADVISORY ID: SA17293 VERIFY ADVISORY: http://secunia.com/advisories/17293/ CRITICAL: Less critical IMPACT: Exposure of sensitive information WHERE: Local system SOFTWARE: Fetchmail 6.x http://secunia.com/product/370/...
RHEL 2.1 / 3 : openldap and nss_ldap (RHSA-2005:751)
Updated openldap and nssldap packages that correct a potential password disclosure issue are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. OpenLDAP is an open source suite of LDAP Lightweight Directory Access Protocol...
Utopia News Pro 1.1.3 SQL Injection / cross site scripting
2.56 07/10/2005 Utopia News Pro 1.1.3 SQL Injection / cross site scripting software: site: http://www.utopiasoftware.net axss: http://target/path/header.php?sitetitle=/titlescriptalertdocument.cookie/script!-- http://target/path/footer.php?version=scriptalertdocument.cookie/script...
CVE-2005-2962: Undefined Security Weakness
The post-installation script for ntlmaps before 0.9.9 sets world-readable permissions for the configuration file, which allows local users to obtain the username and password...
[SA16817] LineControl Java Client Log Messages Password Disclosure
---------------------------------------------------------------------- Bist Du interessiert an einem neuen Job in IT-Sicherheit? Secunia hat zwei freie Stellen als Junior und Senior Spezialist in IT- Sicherheit: http://secunia.com/secuniavacancies/...
ZipTorrent1.3.7.3.txt
/================================================================ ZipTorrent 1.3.7.3 Local Proxy Password Disclosure Exploit by Kozan Discovered & Coded by Kozan Credits to ATmaCA Web: www.spyinstructors.com Mail: [email protected] Application: -------------------- ZipTorrent 1.3.7.3 and...
IMRadio-4.0-expl.txt
/================================================================ Mercora IMRadio 4.0.0.0 password disclosure local exploit by Kozan Discovered & Coded by: Kozan Credits to ATmaCA Web: www.spyinstructors.com Mail: [email protected] ===== Application...
Mercora IMRadio <= 4.0.0.0 Local Password Disclosure Exploit
No description provided by source. /================================================================ Mercora IMRadio 4.0.0.0 password disclosure local exploit by Kozan Discovered & Coded by: Kozan Credits to ATmaCA Web: www.spyinstructors.com Mail: [email protected] ===== Application...
ZipTorrent <= 1.3.7.3 Local Proxy Password Disclosure Exploit
Exploit for unknown platform in category local exploits ============================================================= ZipTorrent include int GetOffsetchar FilePath, char Str char kr; int Sa...