3COM Wireless router (3CRADSL72) information disclosure

The router gives you a web page with user name, password, primary and secondary DNS, default gateway, etc, if you access http://routerIP/appsta.stm without athentification of any kind. Router details: Runtime Code Version 1.05 Jan 27 2004 14:58:25 Boot Code Version V1.3d Hardware Version 01A ADSL...

Debian DSA-338-1 : proftpd - SQL injection

runlevel [email protected] reported that ProFTPD's PostgreSQL authentication module is vulnerable to a SQL injection attack. This vulnerability could be exploited by a remote, unauthenticated attacker to execute arbitrary SQL statements, potentially exposing the passwords of other users, or t...

CVE-2001-1098

Cisco PIX firewall manager PFM 4.32g logs the enable password in plaintext in the pfm.log file, which could allow local users to obtain the password by reading the file...

WS_FTP Pro Client Weak Password Encrypted

The version of WSFTP client installed on the remote host uses a weak encryption method to store password information. A local attacker could exploit this to discover FTP passwords. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid14597; scriptversion"1.15";...

CVE-2004-0412

Mailman before 2.1.5 allows remote attackers to obtain user passwords via a crafted email request to the Mailman server...

CVE-2004-0706

Bugzilla 2.17.5 through 2.17.7 embeds the password in an image URL, which could allow local users to view the password in the web server log files...

CVE-2004-0706

Bugzilla 2.17.5 through 2.17.7 embeds the password in an image URL, which could allow local users to view the password in the web server log files...

CVE-2004-0652

BEA WebLogic Server and WebLogic Express 7.0 through 7.0 Service Pack 4, and 8.1 through 8.1 Service Pack 2, allows attackers to obtain the username and password for booting the server by directly accessing certain internal methods...

Mac OS X stores login/Keychain/FileVault passwords on disk

It seems that Mac OS X 10.3.4 tested doesn't bother clearing memory containing sensitive data, or using mlock to avoid swapping. A quick grep of the swapfiles will show up various morsels: rez: sudo strings -8 /var/vm/swapfile0 |grep -A 4 -i longname longname password user's password here /bin/zs...

ZWS Newsletter & Mailing List Manager

hello , i'm a frenchy boy and excuse me for my bad english... i decover a bug in the newsletter ZWS , http://www.target.com/newsletter/admin.php?f=listuser&uname=test&ulevel=1 with this , you can list all user register in the newsletter with respective password. after u log with a account Admin ,...

CVE-2004-0412

Removed by vendor...

BEA WebLogic Server stores database password in clear text in "config.xml"

Overview WebLogic Server contains a vulnerability that may expose the database username and password in clear text in the config.xml file. Description BEA Systems describes WebLogic Server as "an industrial-strength application infrastructure for developing, integrating, securing, and managing...

eCommerce Corporation Online Store Kit 3.0 - shop.php?cat SQL Injection

eCommerce Corporation Online Store Kit 3.0 - shop.php?cat SQL Injection source: https://www.securityfocus.com/bid/9687/info It has been reported that Online Store Kit is prone to multiple SQL injection vulnerabilities. These issues arise due to insufficient sanitation of user-supplied input via t...

PHP setting leaks from .htaccess files on virtual hosts

Background PHP is a widely-used general-purpose scripting language that is especially suited for Web development and can be embedded into HTML. Description If the server configuration "php.ini" file has "registerglobals = on" and a request is made to one virtual host which has "phpadminflag...

CVE-2003-1224

Weblogic.admin for BEA WebLogic Server and Express 7.0 and 7.0.0.1 displays the JDBCConnectionPoolRuntimeMBean password to the screen in cleartext, which allows attackers to read a user's password by physically observing "shoulder surfing" the screen...

Множество уязвимостей в MailList from BulletScript

Множество уязвимостей в MailList from BulletScript Программа: MailList from BulletScript Сайт производителя: http://jas.da.ru Опасность: Средняя Наличие эксплоита: Да Найдено: MORPFEY Дата: 20.12.2003 Описание: Пароль для получения доступа к панели управления в незашифрованном виде хранится в:...

BNCweb File Disclosure Vulnerability

BNCweb is a set of CGI scripts developed at the University of Zьrich as a user-friendly query interface to the British National Corpus. It allows linguists to retrieve lexical, grammatical and textual data from this 100 million word collection of english texts using a web browser. For more...

Planet switches - 2 серия

Добрый день. Если помните, http://www.security.nnov.ru/search/news.asp?binid=3174 Та же "закладка" присутствует в Planet WSW-2401. Тот же пользователь, тот же пароль. Проблема усугубляется тем, что управляющий IP-интерфейс доступен через ЛЮБОЙ 802.1q-VLAN, присутствующий в свитче. Это касается и...

GuppY 2.4 - Remote File Access

GuppY 2.4 - Remote File Access source: https://www.securityfocus.com/bid/8769/info GuppY is prone to an issue that could allow a remote attacker to read or write to files on the vulnerable server. This issue presents itself in the tinymsg.php component of the software. The attacker could only...

FTGate Pro Server - Multiple Vulnerabilities

Release Date: 09/01/2003 TITLE ===== FTGate Pro - Multiple Vulnerabilities DESCRIPTION ============ “FTGate is a professional, award winning family of mail server applications that offer you exceptional performance, comprehensive features, ease of use and advanced security features in a cost...