Dahua Technology Co., Ltd Digital Video Recorders and IP Cameras

CVSS v3 9.8 ATTENTION: Remotely exploitable/low skill level to exploit. Public exploits are available. Vendor: Dahua Technology Co., Ltd Equipment: Digital Video Recorders and IP Cameras Vulnerabilities: Use of Password Hash Instead of Password for Authentication, Password in Configuration File...

Cloudera HUE Session cookies stored in the database

User session cookies are stored in the database. Combined with the vulnerability related to configuration file which is world readable, it is possible to spoof a user across the entire cluster launching jobs and browsing the datalake, without having to crack password hashes. Cookies are stored in...

CVE-2017-5496

Sawmill Enterprise 8.7.9 allows remote attackers to gain login access by leveraging knowledge of a password hash...

CVE-2017-5496

Sawmill Enterprise 8.7.9 allows remote attackers to gain login access by leveraging knowledge of a password hash...

Design/Logic Flaw

Sawmill Enterprise 8.7.9 allows remote attackers to gain login access by leveraging knowledge of a password hash...

CVE-2017-5496

Sawmill Enterprise 8.7.9 allows remote attackers to gain login access by leveraging knowledge of a password hash...

CVE-2017-5496

Affected software : Sawmill Enterprise 8.7.9. Vulnerability : remote authentication bypass by leveraging knowledge of a password hash (pass-the-hash). Root cause / mechanics : attacker who gains access to hashed user credentials can authenticate to the Sawmill interface without the actual plainte...

CVE-2017-5496: Exposure of Sensitive Information to an Unauthorized Actor

Sawmill Enterprise 8.7.9 allows remote attackers to gain login access by leveraging knowledge of a password hash...

PT-2017-16537

Name of the Vulnerable Software and Affected Versions Sawmill Enterprise version 8.7.9 Description The issue allows remote attackers to gain login access by leveraging knowledge of a password hash. Recommendations For Sawmill Enterprise version 8.7.9, update to a version that includes a fix for...

Cambium ePMP 1000 'ping' Password Hash Extractor (up to v2.5)

This module exploits an OS Command Injection vulnerability in Cambium ePMP 1000 Authors Karn Ganeshen This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule "Cambium ePMP 1000 'ping' Password Hash...

CVE-2016-6866

slock allows attackers to bypass the screen lock via vectors involving an invalid password hash, which triggers a NULL pointer dereference and crash...

CVE-2016-6866

slock allows attackers to bypass the screen lock via vectors involving an invalid password hash, which triggers a NULL pointer dereference and crash...

DEBIAN-CVE-2016-6866

slock allows attackers to bypass the screen lock via vectors involving an invalid password hash, which triggers a NULL pointer dereference and crash...

UBUNTU-CVE-2016-6866

slock allows attackers to bypass the screen lock via vectors involving an invalid password hash, which triggers a NULL pointer dereference and crash...

CVE-2016-6866

slock allows attackers to bypass the screen lock via vectors involving an invalid password hash, which triggers a NULL pointer dereference and crash...

CVE-2016-6866

CVE-2016-6866 affects the screen-locker slock. A null pointer dereference can occur when verifying a password for a user with an invalid shadow hash entry, caused by calling crypt(3) and using its return value in strcmp(3) without checking for NULL. This can lead to a crash and potential local im...

CVE-2016-6866

slock allows attackers to bypass the screen lock via vectors involving an invalid password hash, which triggers a NULL pointer dereference and crash...

CVE-2016-6866

slock allows attackers to bypass the screen lock via vectors involving an invalid password hash, which triggers a NULL pointer dereference and crash...

CVE-2016-6866

slock allows attackers to bypass the screen lock via vectors involving an invalid password hash, which triggers a NULL pointer dereference and crash...

Fortinet FortiOS Local Admin Password Hash Leak Vulnerability (FG-IR-16-050)

Fortinet FortiOS is prone to a local admin password hash leak vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...