2388 matches found
Malware exploit: Rovnix
Type: Hash Collision Author: Xylitol ?php / Defeat the weak hash function of Rovnix to get password from a hash. / $HASH = 'fbff791ef0770855e599ea6f87d41653'; $value = getNumber$HASH; $search = search$value, $HASH; echo'Hash: ' . $HASH . 'br /'; echo'Value: ' . $value . 'br /'; echo'Search: '...
PT-2018-5377
Name of the Vulnerable Software and Affected Versions FreeIPA versions 4.2.0 and later Description A security issue was discovered where FreeIPA could disclose password hashes to users with the System: Read Stage Users permission. A remote, authenticated attacker could potentially use this flaw t...
openSUSE Security Update : GNU Health and it's dependencies (openSUSE-2017-6)
This update provides version 3.0.5 of GNU Health including several fixes and improvements. - Update to ICD10 version 2016. - Fix error when printing prescription using review dates. - Fix error on summary report when no date of birth is assigned to the person. Additionally the following...
FortiOS Local Admin Password Hash Leak Vulnerability
A read-only administrator may have access to read-write administrators password hashes not including super-admins stored on the appliance via the webui REST API , and may therefore be able to crack them...
Linux Kernel 2.6.22 < 3.9 - 'Dirty COW' 'PTRACE_POKEDATA' Race Condition Privilege Escalation (/etc/passwd Method)
// // This exploit uses the pokemon exploit of the dirtycow vulnerability // as a base and automatically generates a new passwd line. // The user will be prompted for the new password when the binary is run. // The original /etc/passwd file is then backed up to /tmp/passwd.bak // and overwrites t...
Sophos Web Appliance Version 4.2.1.3 Elevation of Privilege Vulnerability
Sophos Web Appliance is a WEB security gateway solution. Sophos Web Appliance version 4.2.1.3 elevation of privilege vulnerability. Since an unprivileged user can obtain the MD5 hash value of the administrator password, an attacker can exploit the vulnerability to obtain the password in plaintext...
Microsoft Windows Information Disclosure Vulnerability (CNVD-2016-07749)
Microsoft Windows is a series of operating systems released by the American company Microsoft. Microsoft Windows suffers from an information disclosure vulnerability. An attacker can exploit this vulnerability to brute-force break a user's NTLM password hash...
CVE-2016-1241
Tryton 3.x before 3.2.17, 3.4.x before 3.4.14, 3.6.x before 3.6.12, 3.8.x before 3.8.8, and 4.x before 4.0.4 allow remote authenticated users to discover user password hashes via unspecified vectors...
PYSEC-2016-40
Tryton 3.x before 3.2.17, 3.4.x before 3.4.14, 3.6.x before 3.6.12, 3.8.x before 3.8.8, and 4.x before 4.0.4 allow remote authenticated users to discover user password hashes via unspecified vectors...
CVE-2016-7108
Huawei UMA (Unified Maintenance Audit) before V200R001C00SPC200 SPH206 suffers an information disclosure where remote authenticated users can obtain MD5 hashes of arbitrary user passwords via unspecified vectors. The advisory HWPSIRT-2016-07051 notes a fix; apply Huawei software updates to mitiga...
CVE-2016-7108
Huawei Unified Maintenance Audit UMA before V200R001C00SPC200 SPH206 allows remote authenticated users to obtain the MD5 hashes of arbitrary user passwords via unspecified vectors...
Legal Robot: User Information leak allows user to bypass email verification.
When a user is logged on, the following is sent: ██████ This contains some sensitive information, most notably the email token. A user can use this to bypass email verification and verify any email. In addition, the hashed password is leaked, which could present a vulnerability if a user's accoun...
WordPress Plugin Video Player 1.5.16 - SQL Injection
WordPress Plugin Video Player 1.5.16 - SQL Injection !-- Multiple SQL injection vulnerabilities in WordPress Video Player Abstract It was discovered that WordPress Video Player is affected by multiple blind SQL injection vulnerabilities. Using these issues it is possible for a logged on Contribut...
newsp.eu PHP Calendar Script 1.0 - User Credentials Disclosure
newsp.eu PHP Calendar Script 1.0 - User Credentials Disclosure Exploit Title: PHP calendar script Password Download File Date: 2016-07-18 Exploit Author: Meisam Monsef [email protected] or [email protected] Vendor Homepage: http://www.newsp.eu/calendarscript.php?pt=st Version: All Version...
PHP Calendar Script 1.0 - User Credentials Disclosure
Exploit for php platform in category web applications Exploit Title: PHP calendar script Password Download File Date: 2016-07-18 Exploit Author: Meisam Monsef email protected or email protected Vendor Homepage: http://www.newsp.eu/calendarscript.php?pt=st Version: All Version Download Link :...
NewsP Free News Script 1.4.7 - User Credentials Disclosure
Exploit Title: Free News Script User Password Download File Date: 2016-07-18 Exploit Author: Meisam Monsef [email protected] or [email protected] Vendor Homepage: http://www.newsp.eu/index.php?pt=ns Version: All Version Download Link : http://www.newsp.eu/newsp.zip Exploit :...
OpenSSHd 7.2p2 - Username Enumeration
OpenSSHd 7.2p2 - Username Enumeration Source: http://seclists.org/fulldisclosure/2016/Jul/51 -------------------------------------------------------------------- User Enumeration using Open SSHD =Latest version. ------------------------------------------------------------------- Abstract:...
ABB PCM600 Password Hash Vulnerability
The ABB PCM600 is a protection and control IED manager, primarily used in the energy industry. The master application password in the ABB PCM600 ACTConfig configuration file uses a weak hash function. A local attacker could exploit this vulnerability to access the affected device...
Cerberus Helpdesk (Cerb5) 5 6.7 - Password Hash Disclosure
Cerberus Helpdesk Cerb5 5 6.7 - Password Hash Disclosure !/bin/bash Exploit Title: Cerberus Helpdesk Cerb5 Password Hash Grabbing Date: 04.02.2016 Exploit Author: asdizzle Vendor Homepage: http://www.cerberusweb.com/ Software Link: http://www.cerberusweb.com/downloads/cerb5/archive/cerb5-544.zip...
Cerberus Helpdesk (Cerb5) 5 < 6.7 - Password Hash Disclosure
!/bin/bash Exploit Title: Cerberus Helpdesk Cerb5 Password Hash Grabbing Date: 04.02.2016 Exploit Author: asdizzle Vendor Homepage: http://www.cerberusweb.com/ Software Link: http://www.cerberusweb.com/downloads/cerb5/archive/cerb5-544.zip Version: 5 - 6.7 Tested on: Debian 8 / apache2 with cerb ...