Design/Logic Flaw

The password hash generation algorithm in the BUILTIN authentication functionality for Apache Derby before 10.6.1.0 performs a transformation that reduces the size of the set of inputs to SHA-1, which produces a small search space that makes it easier for local and possibly remote attackers to...

CVE-2009-4269

The password hash generation algorithm in the BUILTIN authentication functionality for Apache Derby before 10.6.1.0 performs a transformation that reduces the size of the set of inputs to SHA-1, which produces a small search space that makes it easier for local and possibly remote attackers to...

CVE-2009-4269

CVE-2009-4269 affects Apache Derby BUILTIN authentication. The password hash generation transforms inputs before SHA-1, reducing the input space and enabling easier hash collisions, increasing the risk of password cracking. Affected versions include Derby prior to 10.6.1.0; remediation is to upgr...

CVE-2009-4269

The password hash generation algorithm in the BUILTIN authentication functionality for Apache Derby before 10.6.1.0 performs a transformation that reduces the size of the set of inputs to SHA-1, which produces a small search space that makes it easier for local and possibly remote attackers to...

Oracle Database Application Express Component APEX Password Hash Disclosure (CVE-2009-0981)

Oracle Application Express APEX is a component of Oracle database server products. It is a web application development environment, with which developers can create and deploy database-backed applications via a web-based interface. An information disclosure vulnerability exists in the Application...

Joomla BF Quiz SQL Injection Exploit

!/usr/bin/python Joomla Component BF Quiz SQL Injection Exploit by Valentin Hoebel [email protected] Version 1.0 29th May 2010 ASCII FOR BREAKFAST About the vulnerability: ---------------------------------------------------------------------------- Read more here:...

Joomla! Component BF Quiz 1.0 - SQL Injection (2)

Joomla! Component BF Quiz 1.0 - SQL Injection 2 !/usr/bin/python Joomla Component BF Quiz SQL Injection Exploit by Valentin Hoebel [email protected] Version 1.0 29th May 2010 ASCII FOR BREAKFAST About the vulnerability: --------------------------------------------------------------------------...

linux/x86 pwrite("/etc/shadow", hash, 32, 8) Shellcode 94 bytes

Exploit for linux/x86 platform in category shellcode =============================================================== linux/x86 pwrite"/etc/shadow", hash, 32, 8 Shellcode 94 bytes =============================================================== / | Title: Linux/x86 pwrite"/etc/shadow", hash, 32, 8...

Explay CMS <= 2.1 SQL Injection Vulnerabilities

=============================================== Explay CMS = 2.1 SQL Injection Vulnerabilities =============================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' /' / /' 0 0 /, // ,/ / 1 1 // /' / // /' / /' 0 0 / / / / / / 1 1 / / 0 ...

Various database password hash access statement-vulnerability warning-the black bar safety net

There is no access, can also grab? Various database password hash get the statement, you can also directly use the sqlmap this injection tool! SQL Server 2 0 0 0:- SELECT password from master. dbo. sysxlogins where name='sa' 0×010034767D5C0CFA5FDCA28C4A56085E65E882E71CB0ED250341...

bbScript 1.1.2.1 - id Blind SQL Injection

bbScript 1.1.2.1 - id Blind SQL Injection \n\n", $argv0; exit; list, $target, $login = $argv; echo " Target username set to $login\n"; $login = concat$login; $chars = arraymergearray$chars, range48, 57, range97, 102; $pos = 1; echo " Password Hash : "; while$pos != 33 for$i = 0; $i = 16; $i++...

CVE-2009-3635

The Install Tool subcomponent in TYPO3 4.0.13 and earlier, 4.1.x before 4.1.13, 4.2.x before 4.2.10, and 4.3.x before 4.3beta2 allows remote attackers to gain access by using only the password's md5 hash as a credential...

Swiss Mango CMS SQL Injection

SwissmangoCMS SQL injection vulnerability Author : kaMtiEz [email protected] Homepage : http://www.indonesiancoder.com Date : September 24, 2009 Hello My Name Is : . | | / / ||\ / | |/ /\ \ / \ / \ \ || \ / | / / Y \ | | || / / || \ /| /| |/ / \ / / / / / -=- INDONESIAN CODER -=- KILL-9...

Swiss Mango CMS - SQL Injection

SwissmangoCMS SQL injection vulnerability Author : kaMtiEz [email protected] Homepage : http://www.indonesiancoder.com Date : September 24, 2009 Hello My Name Is : . | | / / ||\ / | |/ /\ \ / \ / \ \ || \ / | / / Y \ | | || / / || \ /| /| |/ / \ / / / / / -=- INDONESIAN CODER -=- KILL-9...

Arab Portal 2.2 SQL Injection

!/usr/bin/ruby ============================================= Arab Portal v2.2 Exploit , Blind SQL Injection / Authentication Bypass Discovered & written by: Jafer Al-Zidjali Email: [email protected] Website: www.scorpionds.com ============================================= require "net/http"...

Arab Portal 2.2 - Blind Cookie Authentication Bypass

Arab Portal 2.2 - Blind Cookie Authentication Bypass !/usr/bin/ruby ============================================= Arab Portal v2.2 Exploit , Blind SQL Injection / Authentication Bypass Discovered & written by: Jafer Al-Zidjali Email: [email protected] Website: www.scorpionds.com...

Arab Portal 2.2 (Auth Bypass) Blind SQL Injection Exploit

Exploit for unknown platform in category web applications ========================================================= Arab Portal 2.2 Auth Bypass Blind SQL Injection Exploit ========================================================= !/usr/bin/ruby ============================================= Arab...

CVE-2008-6886

RSA EnVision 3.5.0, 3.5.1, 3.5.2, and 3.7.0 does not properly restrict access to unspecified user profile functionality, which allows remote attackers to obtain the administrator password hash and conduct brute force guessing attacks...

Design/Logic Flaw

RSA EnVision 3.5.0, 3.5.1, 3.5.2, and 3.7.0 does not properly restrict access to unspecified user profile functionality, which allows remote attackers to obtain the administrator password hash and conduct brute force guessing attacks...

CVE-2008-6886

RSA EnVision 3.5.0, 3.5.1, 3.5.2, and 3.7.0 does not properly restrict access to unspecified user profile functionality, which allows remote attackers to obtain the administrator password hash and conduct brute force guessing attacks...