PLC Wireless Router GPN2.4P21-C-CN - Arbitrary File Disclosure

Exploit Title: PLC Wireless Router GPN2.4P21-C-CN Authorised Arbitrary File Disclosure Date: 28/08/2016 Exploit Author: Rahul Raz Affected Model : GPN2.4P21-C-CNFrimware- W2001EN-00 Vendor: ChinaMobile Tested on: Ubuntu Linux GET...

3Com Router Password Disclosure

Remote password disclosure Vulnerability Type: File Disclosure For the exploit source code contact DSquare Security sales team...

C2S DVR Management Password Disclosure

C2S DVR allows an unauthenticated user to disclose the username & password by requesting the javascript page 'read.cgi?page=2'. This may also work on some cameras including IRDOME-II-C2S, IRBOX-II-C2S. Module Options msf use auxiliary/gather/c2s/dvrpassworddisclosure msf...

JVC IP Camera VN-T216VPRU - Credentials Disclosure

Exploit for cgi platform in category web applications 1. Advisory Information ======================================== Title : JVC IP-Camera VN-T216VPRU Remote Credentials Disclosure Vendor Homepage : http://pro.jvc.com/ Remotely Exploitable : Yes Tested on Camera types : VN-T216VPRU Product...

IBM BigFix WebReports Password Disclosure Vulnerability

IBM BigFix formerly known as IBM Endpoint Manager, Tivoli Endpoint Manager is a suite of system management software from IBM in the United States. The software provides remote control, patch management, software distribution, operating system deployment, network access protection, etc. BigFix...

JVC/Siemens/Vanderbilt IP-Camera Readfile Password Disclosure

SIEMENS IP-Camera CVMS2025-IR + CCMS2025, JVC IP-Camera VN-T216VPRU, and Vanderbilt IP-Camera CCPW3025-IR + CVMW3025-IR allow an unauthenticated user to disclose the username & password by requesting the javascript page 'readfile.cgi?query=ADMINID'. Siemens firmwares affected: x.2.2.1798,...

CVE-2016-3059

IBM Tivoli Storage Manager for Databases: Data Protection for Microsoft SQL Server aka IBM Spectrum Protect for Databases 6.3 before 6.3.1.7 and 6.4 before 6.4.1.9 and Tivoli Storage FlashCopy Manager for Microsoft SQL Server aka IBM Spectrum Protect Snapshot 3.1 before 3.1.1.7 and 3.2 before...

Apple OS X Safari Login AutoFill Information Disclosure Vulnerability

Apple OS X is a specialized operating system developed by Apple for Mac computers.Safari Login AutoFill is one of the Safari Login AutoFill components. An information disclosure vulnerability exists in Safari Login AutoFill in Apple OS X versions prior to 10.11.6. An attacker could exploit this...

CVE-2016-4595

CVE-2016-4595 concerns Safari Login AutoFill on OS X El Capitan (prior to 10.11.6). The connected Apple security content confirms the issue affects Safari AutoFill form-field matching, enabling a physically proximate attacker to view passwords during login. The vulnerability is mitigated by the O...

NewsP Free News Script 1.4.7 - User Credentials Disclosure

Exploit for php platform in category web applications Exploit Title: Free News Script User Password Download File Date: 2016-07-18 Exploit Author: Meisam Monsef email protected or email protected Vendor Homepage: http://www.newsp.eu/index.php?pt=ns Version: All Version Download Link :...

newsp.eu PHP Calendar Script 1.0 - User Credentials Disclosure

Exploit Title: PHP calendar script Password Download File Date: 2016-07-18 Exploit Author: Meisam Monsef [email protected] or [email protected] Vendor Homepage: http://www.newsp.eu/calendarscript.php?pt=st Version: All Version Download Link : http://www.newsp.eu/calendar.zip Exploit :...

CVE-2016-0321

IBM Personal Communications aka PCOMM 6.x before 6.0.17 and 12.x before 12.0.0.1 does not properly restrict credential extraction, which allows local users to discover passwords by leveraging access to the victim account and executing a PowerShell script...

Netgear device web interface login password disclosure vulnerability

Netgear is a global leader in enterprise networking solutions and a champion of digital home networking applications. A web interface login password disclosure vulnerability exists in several Netgear devices. When password recovery is disabled, an attacker with access to the internal network or...

Netgear D6000 and D3600 Password Disclosure Vulnerability

The Netgear D6000 and D3600 are both wireless router products from Netgear, Inc. A password disclosure vulnerability exists in the password-recovery feature of the Netgear D6000 and D3600 using firmware version 1.0.0.49. A remote attacker can exploit the vulnerability by opening the source code o...

SG8000 large rotating machine monitoring system /app/sg8k_rs/config/defaultuser.xml the system Super administrator account password information disclosure

No description provided by source...

Meteocontrol WEB’log - Admin Password Disclosure

No description provided by source...

Zoho OpManager Cross Site Request Forgery / Cross Site Scripting

Reported these 27/08/2015 these were eventually fixed in version 12 because the entire application is based on emberjs now. There are no CVEs for these issues assigned nor is there any acknowledgement of the issues in any patches. Therefore only version 12 fixes these. Multiple stored and reflect...

CVE-2016-0876

CVE-2016-0876 affects Moxa EDR-G903 Secure Router (versions prior to 3.4.12). The vulnerability stems from plaintext storage of passwords in configuration files, enabling remote attackers to read cleartext passwords. Impact is remote exposure of credentials; CVSS v3 base score 7.5 (HIGH). Mitigat...

Multiple Black Box AlertWerks ServSensor Products Information Disclosure Vulnerabilities

Black Box AlertWerks ServSensor and so on are the products of American Black Box Company, AlertWerks ServSensor is a core product for environmental monitoring system; AlertWerks ServSensor Junior is a remote environmental monitoring host product. A security vulnerability exists in multiple Black...

Design/Logic Flaw

Jenkins before 2.3 and LTS before 1.651.2 allow remote authenticated users with extended read access to obtain sensitive password information by reading a job configuration...