CVE-2019-13922: Missing Encryption of Sensitive Data

A vulnerability has been identified in SINEMA Remote Connect Server All versions V2.0 SP1. An attacker with administrative privileges can obtain the hash of a connected device's password. The security vulnerability could be exploited by an attacker with network access to the SINEMA Remote Connect...

CVE-2019-14936

Easy!Appointments 1.3.2 plugin for WordPress allows Sensitive Information Disclosure Username and Password Hash...

CVE-2019-14936

Easy!Appointments 1.3.2 plugin for WordPress allows Sensitive Information Disclosure Username and Password Hash...

Information disclosure

Easy!Appointments 1.3.2 plugin for WordPress allows Sensitive Information Disclosure Username and Password Hash...

CVE-2019-14936

CVE-2019-14936 affects the WordPress plugin Easy!Appointments version 1.3.2. The vulnerability allows disclosure of sensitive information: usernames and password hashes. Public sources describe it as an information disclosure flaw in Easy!Appointments 1.3.2, with advisories noting a configuration...

Unspecified Vulnerability in Siemens SINEMA Remote Connect Server

Siemens SINEMA Remote Connect Server is a server application. SINEMA Remote Connect allows users to access remote equipment or machines so that maintenance can be performed easily and safely. An unspecified vulnerability exists in Siemens SINEMA Remote Connect Server. An attacker with...

CVE-2019-14936: Undefined Security Weakness

Easy!Appointments 1.3.2 plugin for WordPress allows Sensitive Information Disclosure Username and Password Hash...

PT-2019-4793

Name of the Vulnerable Software and Affected Versions SINEMA Remote Connect Server versions prior to V2.0 SP1 Description A security issue has been identified that allows an attacker with administrative privileges and network access to the SINEMA Remote Connect Server to obtain the hash of a...

Jobberbase 2.0 - (subscribe) SQL Injection Exploit

Exploit for php platform in category web applications !/bin/bash Exploit Title: Jobberbase 2.0 - 'subscribe' SQL injection Exploit Author: Damian Ebelties https://zerodays.lol/ Vendor Homepage: http://www.jobberbase.com/ Version: 2.0 Tested on: Ubuntu 18.04.1 : ' The page "/subscribe/" is...

CVE-2019-13421

Search Guard versions before 23.1 had an issue that an administrative user is able to retrieve bcrypt password hashes of other users configured in the internal user database...

NewStart CGSL MAIN 5.04 : sssd Vulnerability (NS-SA-2019-0002)

The remote NewStart CGSL host, running version MAIN 5.04, has sssd packages installed that are affected by a vulnerability: - It was found that sssd's sysdbsearchuserbyupnres function did not sanitize requests when querying its local cache and was vulnerable to injection. In a centralized login...

NewStart CGSL MAIN 4.05 : sssd Vulnerability (NS-SA-2019-0132)

The remote NewStart CGSL host, running version MAIN 4.05, has sssd packages installed that are affected by a vulnerability: - It was found that sssd's sysdbsearchuserbyupnres function did not sanitize requests when querying its local cache and was vulnerable to injection. In a centralized login...

SQLMap v1.3.8 - Automatic SQL Injection And Database Takeover Tool

SQLMap is an open source penetration testing tool that automates the process of detecting and exploiting SQL injection flaws and taking over of database servers. It comes with a powerful detection engine, many niche features for the ultimate penetration tester and a broad range of switches lastin...

CVE-2016-10844

The chcpass script in cPanel before 11.54.0.4 reveals a password hash SEC-77...

Default credentials

The chcpass script in cPanel before 11.54.0.4 reveals a password hash SEC-77...

CVE-2016-10844

The chcpass script in cPanel before 11.54.0.4 reveals a password hash SEC-77...

CVE-2016-10844

The vulnerability CVE-2016-10844 affects cPanel prior to 11.54.0.4. The issue lies in the chcpass script, which can reveal a password hash (SEC-77). Impact is an information disclosure risk affecting affected cPanel deployments. The Red Hat security entry and CNVD record corroborate the same desc...

PT-2019-7637

Name of the Vulnerable Software and Affected Versions cPanel versions prior to 11.54.0.4 Description The issue concerns the disclosure of password hashes due to a problem in the bin/mkvhostspasswd script. Recommendations For versions prior to 11.54.0.4, update to version 11.54.0.4 or later to...

CVE-2016-10841: Undefined Security Weakness

The bin/mkvhostspasswd script in cPanel before 11.54.0.4 discloses password hashes SEC-73...

PT-2019-7640

Name of the Vulnerable Software and Affected Versions cPanel versions prior to 11.54.0.4 Description The issue concerns the chcpass script in cPanel, which reveals a password hash. Recommendations For versions prior to 11.54.0.4, update to version 11.54.0.4 or later to resolve the issue...