Design/Logic Flaw

The Dell Quest One Password Manager, possibly 5.0, allows remote attackers to bypass CAPTCHA protections and obtain sensitive information user's full name by sending a login request with a valid domain and username but without the CaptchaType, UseCaptchaEveryTime, and CaptchaResponse parameters...

CVE-2013-6246

CVE-2013-6246 affects Dell Quest One Password Manager (possibly v5.0). The vulnerability allows remote attackers to bypass CAPTCHA protections and obtain a user’s full name by sending a login request with a valid domain and username but missing CaptchaType, UseCaptchaEveryTime, and CaptchaRespons...

Dell Quest One Password Manager CAPTCHA Bypass

-= Disclosure =- Filing Date: Today Issue Tracking Numbah: 20747 Discoverorer: Johnny Bravo -= Background =- Quest made a password management web thing. Dell bought Quest. Dell offers Quest Onetm Password Manager for $5/user. http://software.dell.com/products/password-manager/. Oddly, this is not...

Trend Micro DirectPass 1.5.0.1060 - Multiple Vulnerabilities

Title: ====== Trend Micro DirectPass 1.5.0.1060 - Multiple Vulnerabilities Date: ===== 2013-05-21 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=894 Article: http://www.vulnerability-lab.com/dev/?p=580 Trend Micro Reference:...

Trend Micro DirectPass 1.5.0.1060 - Multiple Vulnerabilities

Document Title: =============== Trend Micro DirectPass 1.5.0.1060 - Multiple Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=894 Article: http://www.vulnerability-lab.com/dev/?p=580 Trend Micro Reference:...

Trend Micro DirectPass 1.5.0.1060 - Multiple Vulnerabilities

Document Title: =============== Trend Micro DirectPass 1.5.0.1060 - Multiple Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=894 Article: http://www.vulnerability-lab.com/dev/?p=580 Trend Micro Reference:...

Kaspersky Password Manager 5.x < 5.0.0.169 HTML Injection

The version of Kaspersky Password Manager installed on the remote Windows host is 5.x prior to 5.0.0.169. As such, it is potentially affected by an HTML injection vulnerability. A remote attacker can trick a user into visiting a malicious website and into saving malicious code from the site when...

Kaspersky Password Manager Installed (credentialed check)

Kaspersky Password Manager KPM was detected on the remote host. KPM provides automated username and password storage and can complete web forms automatically. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid62799; scriptversion"1.10";...

IBM Proventia Network Mail Security System 2.5 - POST File Read

!/usr/bin/python ''' Author: muts of Offensive Security Product: IBM ISS Proventia Mail Security Version: 2.5 Vendor Site: http://www.ibm.com/us/en/ Product Page: http://www-935.ibm.com/services/us/en/it-services/proventia-network-mail-security-system.html Timeline: 04 Jun 2012: Vulnerability...

Kaspersky Password Manager - Filter Bypass Vulnerability

Document Title: =============== Kaspersky Password Manager - Filter Bypass Vulnerability References: =========== http://www.vulnerability-lab.com/getcontent.php?id=674 Download: http://www.vulnerability-lab.com/resources/videos/674.wmv View: http://www.youtube.com/watch?v=8D86ic9opYE Advisory:...

Kaspersky Password Manager - Filter Bypass Vulnerability

Document Title: =============== Kaspersky Password Manager - Filter Bypass Vulnerability References: =========== http://www.vulnerability-lab.com/getcontent.php?id=674 Download: http://www.vulnerability-lab.com/resources/videos/674.wmv View: http://www.youtube.com/watch?v=8D86ic9opYE Advisory:...

Kaspersky Password Manager 5.0.0.164 XSS / Bypass

Title: ====== Kaspersky PM 5.0.0.164 - Software Filter Vulnerability Date: ===== 2012-07-12 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=612 VL-ID: ===== 612 Common Vulnerability Scoring System: ==================================== 3 Introduction: =============...

KeyPass Password Safe 1.22 Cross Site Scripting

Exploit for php platform in category web applications Title: ====== KeyPass Password Safe v1.22 - Software Filter Vulnerability Introduction: ============= KeePass is a very famous & free open source password manager, which helps you to manage your passwords in a secure way. You can put all your...

KeyPass Password Safe 1.22 Cross Site Scripting

Title: ====== KeyPass Password Safe v1.22 - Software Filter Vulnerability Date: ===== 2012-06-26 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=615 VL-ID: ===== 615 Common Vulnerability Scoring System: ==================================== 3 Introduction: =============...

Kaspersky PM 5.0.0.164 - Software Filter Vulnerability

Document Title: =============== Kaspersky PM 5.0.0.164 - Software Filter Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=612 Release Date: ============= 2012-07-12 Vulnerability Laboratory ID VL-ID: ==================================== 612...

Kaspersky PM 5.0.0.164 - Software Filter Vulnerability

Document Title: =============== Kaspersky PM 5.0.0.164 - Software Filter Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=612 Release Date: ============= 2012-07-12 Vulnerability Laboratory ID VL-ID: ==================================== 612...

Researcher Warns Of Security Hole In KeePass Password Manager

Users of the free, open source KeePass password manager got unwelcome news on Tuesday, after a private security researcher claimed to have discovered a remotely exploitable security hole that could give an attacker access to unencrypted user passwords. However, KeePass’s creator calls the hole...

KeePass Password Safe 1.22 - Encoding Filter Vulnerability

Document Title: =============== KeePass Password Safe 1.22 - Encoding Filter Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=615 Release Date: ============= 2012-06-23 Vulnerability Laboratory ID VL-ID: ====================================...

CVE-2012-2959

Cross-site request forgery CSRF vulnerability in password-manager/changePasswords.do in BMC Identity Management Suite 7.5.00.103 allows remote attackers to hijack the authentication of administrators for requests that change passwords...

DELL Quest One Password Manager - CAPTCHA Security Bypass

DELL Quest One Password Manager - CAPTCHA Security Bypass source: https://www.securityfocus.com/bid/63259/info DELL Quest One Password Manager is prone to a security bypass vulnerability. An attacker can exploit this issue to bypass certain security restrictions and gain access to sensitive areas...