[SA12685] proxytunnel Username and Password Disclosure

TITLE: proxytunnel Username and Password Disclosure SECUNIA ADVISORY ID: SA12685 VERIFY ADVISORY: http://secunia.com/advisories/12685/ CRITICAL: Less critical IMPACT: Exposure of sensitive information WHERE: Local system SOFTWARE: proxytunnel 1.x http://secunia.com/product/3983/ DESCRIPTION: A...

[SA12639] Computer Associates Unicenter Common Services Password Disclosure

TITLE: Computer Associates Unicenter Common Services Password Disclosure SECUNIA ADVISORY ID: SA12639 VERIFY ADVISORY: http://secunia.com/advisories/12639/ CRITICAL: Less critical IMPACT: Exposure of sensitive information WHERE: Local system SOFTWARE: CA Unicenter ServicePlus Service Desk 6.x...

Multiple vulnerabilities in ActivePost Standard 3.1

Luigi Auriemma Application: ActivePost Standard http://www.activepost.net Versions: = 3.1 Platforms: Windows Bugs: - File-Server crash - File-server directory traversal and path disclosure - conference password disclosure Risk: critical Exploitation: remote, versus server only the third bug affec...

Remository - SQL Injection

Remository - SQL Injection source: https://www.securityfocus.com/bid/11219/info It is reported that the ReMOSitory module for Mambo is prone to an SQL injection vulnerability. This issue is due to a failure of the module to properly validate user supplied URI input. Because of this, a malicious...

Cisco VPN Concentrator HTML Source Certificate Password Disclosure (Bug ID CSCdw50657)

Binary data 2228.prm...

Cisco VPN Concentrator HTML Source Certificate Password Disclosure (Bug ID CSCdw50657)

Binary data 2230.prm...

IlohaMail Unspecified Database Password Disclosure Weakness

The target is running at least one instance of IlohaMail version 0.6 or earlier. Such versions suffer from a potential password disclosure problem when databasae information is not saved in the session table. Nessus has determined the vulnerability exists on the target simply by looking at the...

GLSA-200406-04 : Mailman: Member password disclosure vulnerability

The remote host is affected by the vulnerability described in GLSA-200406-04 Mailman: Member password disclosure vulnerability Mailman contains an unspecified vulnerability in the handling of request emails. Impact : By sending a carefully crafted email request to the mailman server an attacker...

Excite for Web Servers (EWS) AT-admin.cgi Remote Password Disclosure

Binary data 1634.prm...

NETGEAR ProSafe Router Password Disclosure / Port Filtering Bypass

Binary data 1573.prm...

Super Guestbook superguestconfig Admin Password Disclosure

Binary data 1564.prm...

PostNuke Install Script Admin Password Disclosure

The remote host is running the PostNuke content management system. The installation script of the remote PostNuke CMS install.php is accessible. An attacker may access it to reconfigure the remote PostNuke installation and obtain the password of the remote database and PostNuke installation...

[UNIX] Singapore MD5 Administrative Password Disclosure

The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion The SecuriTeam alerts list - Free, Accurate, Independent. Get your security news from a reliable source...

US Robotics Broadband Router 8003 menu.htm Admin Password Disclosure

The remote host appears to be a US Robotics Broadband router. The device's administrator password is stored as plaintext in a JavaScript function in the file '/menu.htm', which can be viewed by anyone. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. Ref: Date: Tue, 8 Jun 2004 13:41:11 +0200...

Mailman: Member password disclosure vulnerability

Background Mailman is a python-based mailing list server with an extensive web interface. Description Mailman contains an unspecified vulnerability in the handling of request emails. Impact By sending a carefully crafted email request to the mailman server an attacker could obtain member password...

[Full-Disclosure] [ GLSA 200406-04 ] Mailman: Member password disclosure vulnerability

Gentoo Linux Security Advisory GLSA 200406-04 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - http://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity:...

Mailman Crated Email Remote User Password Disclosure

The target is running a version of the Mailman mailing list software that allows a list subscriber to retrieve the mailman password of any other subscriber by means of a specially crafted mail message to the server. That is, a message sent to $listname-request@$target containing the lines :...

mailman -- password disclosure

Barry Warsaw reports: Today I am releasing Mailman 2.1.5, a bug fix release ... This version also contains a fix for an exploit that could allow 3rd parties to retrieve member passwords. It is thus highly recommended that all existing sites upgrade to the latest version...

ICUII 7.0 Local Password Disclosure Exploit

Exploit for unknown platform in category local exploits =========================================== ICUII 7.0 Local Password Disclosure Exploit =========================================== / ICUII 7.0 Local Password Disclosure Exploit by Kozan Application: ICUII 7.0 and probably prior versions...

FilePocket 1.2 Local Proxy Password Disclosure Exploit

Exploit for unknown platform in category local exploits ====================================================== FilePocket 1.2 Local Proxy Password Disclosure Exploit ====================================================== / FilePocket v1.2 Local Proxy Password Disclosure Exploit by Kozan...