299 matches found
CVE-2012-6693
CVE-2012-6693 concerns GE Healthcare Centricity PACS Server with default credentials: nasro / nasro (ReadOnly) and nasrw (Read/Write). The connected documents confirm a default credential issue across Centricity PACS components, enabling remote access with these accounts. The primary root cause i...
CVE-2015-3443 XSS in Thycotic Secret Server version 8.6.000000 to 8.8.000004
COMPASS SECURITY ADVISORY http://www.csnc.ch/en/downloads/advisories.html CVE ID : CVE-2015-3443 Product: Secret Server 1 Vendor: Thycotic Subject: Stored Cross-Site Scripting Vulnerability XSS Risk: High Effect: Remotely exploitable Author: Marco Delai [email protected] Date: June 24th 2015...
Thycotic Secret Server 8.8.000004 - Stored XSS Vulnerability
Exploit for multiple platform in category web applications COMPASS SECURITY ADVISORY http://www.csnc.ch/en/downloads/advisories.html CVE ID : CVE-2015-3443 Product: Secret Server 1 Vendor: Thycotic Subject: Stored Cross-Site Scripting Vulnerability XSS Risk: High Effect: Remotely exploitable...
Thycotic Secret Server 8.8.000004 - Persistent Cross-Site Scripting
COMPASS SECURITY ADVISORY http://www.csnc.ch/en/downloads/advisories.html CVE ID : CVE-2015-3443 Product: Secret Server 1 Vendor: Thycotic Subject: Stored Cross-Site Scripting Vulnerability XSS Risk: High Effect: Remotely exploitable Author: Marco Delai [email protected] Date: June 24th 2015...
Microsoft LAPS Tool Addresss Local Admin Password Problem
Microsoft’s release last week of the Local Administrator Password Solution LAPS takes some steps to address an old question of what to do with local admin passwords, but doesn’t provide a complete answer, experts said. Windows admins have long used a common local account with the same password on...
Samsung Insists Find My Mobile Service Safe
Samsung this week tried to quell recent reports that its Find My Mobile service is vulnerable to hacking, firing back at NIST National Institute of Standards and Technology who warned last month that the feature could be exploited. In a blog post on the company’s global blog Tuesday, Samsung...
Samsung Rebuffs Criticism of Knox Crypto, Password Management
Replies and rebuttals are flying about regarding a report critical of the encryption and password management functions deployed with Samsung’s Knox technology in its Android-based Galaxy and Note mobile devices. Last week, a researcher published an advisory that said a PIN chosen during setup of...
Passera - Tool to generate strong unique passwords for each website
A simple tool that allows users to have strong unique passwords for each website, without the need to store them either locally or with an online service. It is available as a command-line tool for Linux/Mac/Windows and an Android app. Passera turns any entered text into a strong password up to 6...
Twitter Gains Team From Mitro Password Management Company
Twitter has announced that a cloud-based password management company called Mitro has joined the Twitter team, and all of Mitro’s code is now free and open source. Mitro’s offering a secure password manager that’s meant to help distributed teams share passwords for accounts and services. The...
PT-2014-5355 · Red Hat · Red Hat Cloudforms
Name of the Vulnerable Software and Affected Versions: Red Hat CloudForms versions prior to 5.2.4.2 Description: The issue concerns the use of a hard-coded salt in a password management component, which could facilitate brute force attacks by remote attackers, making it easier to guess passwords...
PassWD 1.2 Weak Encryption Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/1300/info PassWd 1.2 is a password management utility designed to store user login information to various URLs. The login information, which includes username, password and link location is stored in the pass.dat file whi...
Beware Of Fake 'HeartBleed Bug Remover Tool', Hijacks System with Malware
I am considering that you all must have read my last article on OpenSSL Heartbleed, a critical bug in the OpenSSL's implementation of the TLS/DTLS heartbeat extension that allows attackers to read portions of the affected server’s memory, potentially revealing users data, that the server did not...
Federal Election Committee Audit Finds Security Deficiencies
The Federal Election Commission FEC, the government agency that keeps track of money raised each term by candidates and political action committees, is highly vulnerable to intrusions and data breaches according to a recent audit that discovered “significant deficiencies” in the FEC’s IT security...
ISL Light Desktop 3.5.4 Information Disclosure
CVE-2013-6237:ISL Light - Desktop 3.5.4, Clipboard security issue In cases where a person is hosting a sharing session and allows a remote user to see what is happening on the local PC, its been discovered that if you locally copy something like a hidden password to the local clipboard, then the...
PWStore 2010.8.30.0 Cross Site Scripting / Denial Of Service
PWStore version 2010.8.30.0 suffers from cross site scripting and denial of service vulnerabilities. - RealPentesting Advisory - Title: MULTIPLE VULNERABILITIES IN PWSTORE 2010.8.30.0 Severity: Medium History: 16.Apr.2013 Vulnerability reported Authors: Josep Pi Rodriguez, Pedro Guillen Nuñez,...
Fedora Update for kwallet FEDORA-2013-13112
Check for the Version of kwallet OpenVAS Vulnerability Test Fedora Update for kwallet FEDORA-2013-13112 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...
[SECURITY] Fedora 17 Update: kwallet-4.10.5-1.fc17
KDE Wallet Manager is a tool to manage the passwords on your KDE system...
[SECURITY] Fedora 18 Update: kwallet-4.10.5-1.fc18
KDE Wallet Manager is a tool to manage the passwords on your KDE system...