CVE-2017-5496

Sawmill Enterprise 8.7.9 allows remote attackers to gain login access by leveraging knowledge of a password hash...

CVE-2017-5496

Affected software : Sawmill Enterprise 8.7.9. Vulnerability : remote authentication bypass by leveraging knowledge of a password hash (pass-the-hash). Root cause / mechanics : attacker who gains access to hashed user credentials can authenticate to the Sawmill interface without the actual plainte...

CVE-2017-5496

Sawmill Enterprise 8.7.9 allows remote attackers to gain login access by leveraging knowledge of a password hash...

Cambium ePMP 1000 'ping' Password Hash Extractor (up to v2.5)

This module exploits an OS Command Injection vulnerability in Cambium ePMP 1000 Authors Karn Ganeshen This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule "Cambium ePMP 1000 'ping' Password Hash...

CVE-2016-6866

slock allows attackers to bypass the screen lock via vectors involving an invalid password hash, which triggers a NULL pointer dereference and crash...

CVE-2016-6866

slock allows attackers to bypass the screen lock via vectors involving an invalid password hash, which triggers a NULL pointer dereference and crash...

CVE-2016-6866

slock allows attackers to bypass the screen lock via vectors involving an invalid password hash, which triggers a NULL pointer dereference and crash...

DEBIAN-CVE-2016-6866

slock allows attackers to bypass the screen lock via vectors involving an invalid password hash, which triggers a NULL pointer dereference and crash...

UBUNTU-CVE-2016-6866

slock allows attackers to bypass the screen lock via vectors involving an invalid password hash, which triggers a NULL pointer dereference and crash...

CVE-2016-6866

slock allows attackers to bypass the screen lock via vectors involving an invalid password hash, which triggers a NULL pointer dereference and crash...

CVE-2016-6866

slock allows attackers to bypass the screen lock via vectors involving an invalid password hash, which triggers a NULL pointer dereference and crash...

CVE-2016-6866

CVE-2016-6866 affects the screen-locker slock. A null pointer dereference can occur when verifying a password for a user with an invalid shadow hash entry, caused by calling crypt(3) and using its return value in strcmp(3) without checking for NULL. This can lead to a crash and potential local im...

CVE-2016-6866

slock allows attackers to bypass the screen lock via vectors involving an invalid password hash, which triggers a NULL pointer dereference and crash...

Fortinet FortiOS Local Admin Password Hash Leak Vulnerability (FG-IR-16-050)

Fortinet FortiOS is prone to a local admin password hash leak vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Malware exploit: Rovnix

Type: Hash Collision Author: Xylitol ?php / Defeat the weak hash function of Rovnix to get password from a hash. / $HASH = 'fbff791ef0770855e599ea6f87d41653'; $value = getNumber$HASH; $search = search$value, $HASH; echo'Hash: ' . $HASH . 'br /'; echo'Value: ' . $value . 'br /'; echo'Search: '...

openSUSE Security Update : GNU Health and it's dependencies (openSUSE-2017-6)

This update provides version 3.0.5 of GNU Health including several fixes and improvements. - Update to ICD10 version 2016. - Fix error when printing prescription using review dates. - Fix error on summary report when no date of birth is assigned to the person. Additionally the following...

FortiOS Local Admin Password Hash Leak Vulnerability

A read-only administrator may have access to read-write administrators password hashes not including super-admins stored on the appliance via the webui REST API , and may therefore be able to crack them...

Linux Kernel 2.6.22 < 3.9 - 'Dirty COW' 'PTRACE_POKEDATA' Race Condition Privilege Escalation (/etc/passwd Method)

// // This exploit uses the pokemon exploit of the dirtycow vulnerability // as a base and automatically generates a new passwd line. // The user will be prompted for the new password when the binary is run. // The original /etc/passwd file is then backed up to /tmp/passwd.bak // and overwrites t...

Sophos Web Appliance Version 4.2.1.3 Elevation of Privilege Vulnerability

Sophos Web Appliance is a WEB security gateway solution. Sophos Web Appliance version 4.2.1.3 elevation of privilege vulnerability. Since an unprivileged user can obtain the MD5 hash value of the administrator password, an attacker can exploit the vulnerability to obtain the password in plaintext...

Microsoft Windows Information Disclosure Vulnerability (CNVD-2016-07749)

Microsoft Windows is a series of operating systems released by the American company Microsoft. Microsoft Windows suffers from an information disclosure vulnerability. An attacker can exploit this vulnerability to brute-force break a user's NTLM password hash...