DELL Quest One Password Manager - CAPTCHA Security Bypass

source: https://www.securityfocus.com/bid/63259/info DELL Quest One Password Manager is prone to a security bypass vulnerability. An attacker can exploit this issue to bypass certain security restrictions and gain access to sensitive areas of the application to perform unauthorized actions; this...

CVE-2011-1840

The MartiniCreations PassmanLite Password Manager application before 1.48 for Android stores the master password and unspecified other account information in cleartext, which allows local users to obtain sensitive information by leveraging shell access...

CVE-2011-1840

The MartiniCreations PassmanLite Password Manager application before 1.48 for Android stores the master password and unspecified other account information in cleartext, which allows local users to obtain sensitive information by leveraging shell access...

CVE-2011-1840

CVE-2011-1840 affects the MartiniCreations PassmanLite Password Manager for Android prior to version 1.48. The master password (and unspecified other account data) is stored in cleartext, enabling local users with shell access to obtain sensitive information. The vulnerability is local in scope w...

Stable Channel Update

The Chrome Stable and Beta channels have been updated to 10.0.648.204 for Windows, Mac, Linux and Chrome Frame. Included in this release is support for the password manager on Linux, performance and stability fixes, as well as the security fixes listed below. Security fixes and rewards: Please se...

Collaborative Passwords Manager 1.07 - Multiple Local File Inclusions

Collaborative Passwords Manager 1.07 - Multiple Local File Inclusions Collaborative Passwords Manager 1.07 Multiple Local Include Exploit Found by sh00t0ut Expl: Vendor: http://code.google.com/p/cpassman/downloads/list http://victim/?SESSIONuserlanguage=etc/passwd%00...

Esoftpro Online Password Manager Multiple Vulnerability

Exploit for php platform in category web applications ======================================================= Esoftpro Online Password Manager Multiple Vulnerability ======================================================= 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 ...

Password Manager Daemon二进制密钥文件不安全加密漏洞

BUGTRAQ ID: 39882 Password Manager Daemon是通过套接字向应用提供数据的守护程序。数据存储在加密的XML文件中，客户端在打开和保持文件时必须提供密钥。 应用以ASCII形式从指定的keyfile配置参数中读取数据，而用户可能使用文件中的二进制数据。如果二进制数据中包含有空字节或换行符的话，就会导致使用较弱的密钥。 Ben Kibbey Password Manager Daemon 2.13 厂商补丁： Ben Kibbey ---------- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...

CVE-2010-0556

browser/login/loginprompt.cc in Google Chrome before 4.0.249.89 populates an authentication dialog with credentials that were stored by Password Manager for a different web site, which allows user-assisted remote HTTP servers to obtain sensitive information via a URL that requires authentication,...

Design/Logic Flaw

browser/login/loginprompt.cc in Google Chrome before 4.0.249.89 populates an authentication dialog with credentials that were stored by Password Manager for a different web site, which allows user-assisted remote HTTP servers to obtain sensitive information via a URL that requires authentication,...

CVE-2010-0556

browser/login/loginprompt.cc in Google Chrome before 4.0.249.89 populates an authentication dialog with credentials that were stored by Password Manager for a different web site, which allows user-assisted remote HTTP servers to obtain sensitive information via a URL that requires authentication,...

CVE-2010-0556

CVE-2010-0556 describes a cross-origin weakness in Google Chrome’s Password Manager where credentials stored for one site could be populated into an authentication dialog triggered by a third-party page (demonstrated via IMG src). Affected versions include Chrome 3.0.195.38 and 4.0.249.78; Chrome...

Google Chrome information leak

Password manager allows username/password from external source to be automatically filled...

Chrome Password Manager Cross Origin Weakness (CVE-2010-0556)

Virtual Security Research, LLC. http://www.vsecurity.com/ Security Advisory -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- Advisory Name: Chrome Password Manager Cross Origin Weakness Release Date: 2010-02-15 Application: Google Chrome Web Browser Versions:...

CVE-2009-4387

The cross-site scripting XSS protection mechanism in ShowInContentAreaAction.do in ManageEngine Password Manager Pro PMP before 6.1 Build 6104 uses case-sensitive checks for malicious inputs, which allows remote attackers to inject arbitrary web script or HTML via the searchtext parameter and oth...

Cross site scripting

The cross-site scripting XSS protection mechanism in ShowInContentAreaAction.do in ManageEngine Password Manager Pro PMP before 6.1 Build 6104 uses case-sensitive checks for malicious inputs, which allows remote attackers to inject arbitrary web script or HTML via the searchtext parameter and oth...

CVE-2009-4387

CVE-2009-4387 : In ManageEngine Password Manager Pro (PMP) ≤ 6.1 Build 6104, the XSS protection in ShowInContentAreaAction.do relies on case‑sensitive input checks, allowing remote attackers to inject arbitrary script/HTML via the searchtext parameter and other inputs. This bypasses the intended ...

Citrix Password Manager Service Stored Secondary Credentials Disclosure

Citrix Password Manager Service is installed on the remote host. The version of Citrix Password Manager Service on the remote host is reportedly affected by an information disclosure vulnerability involving secondary credentials. C Tenable Network Security, Inc. include"compat.inc"; if descriptio...

Citrix Password Manager Agent Secondary Credentials Information Disclosure

Citrix Password Manager Agent is installed on the remote host. The version of Citrix Password Manager Agent on the remote host is reportedly affected by an information disclosure vulnerability involving secondary credentials. C Tenable Network Security, Inc. include"compat.inc"; if description...

Online Password Manager 4.1 Insecure Cookie Handling Vulnerability

No description provided by source. Online Password Manager v4.1 Insecure Cookie Handling Vulnerability ---------------------------------------------------------- Discovered By: ZoRLu Date: 15.04.2009 Home: yildirimordulari.com / dafgamers.com / z0rlu.blogspot.com contact: [email protected] N0T...