Multiple Vulnerabilities in Trend Micro Password Manager

Trend Micro Password Manager is a secure password management solution. The solution helps users to easily access all their online accounts and supports synchronization of online credentials across multiple devices in the cloud, among other things. A remote code execution and information disclosur...

PT-2016-3212

Name of the Vulnerable Software and Affected Versions Trend Micro Password Manager affected versions not specified Description The issue is related to insufficient access control in the HTTP server of Trend Micro Password Manager. It allows a remote attacker to execute arbitrary commands through...

[SECURITY] Fedora 22 Update: keepass-2.30-2.fc22

KeePass is a free open source password manager, which helps you to remember your passwords in a secure way. You can put all your passwords in one database, which is locked with one master key or a key file. You only have to remember one single master password or select the key file to unlock the...

HackerOne: Pre-generation of 2FA secret/backup codes seems like an unnecessary risk

If you manage to get a malicious script running in HackerOne, requesting https://hackerone.com/settings/authentication/edit and parsing out the two factor authentication form will yield either… - the 2FA secret key and backup codes that will be used if 2FA is enabled for the first time this sessi...

Researcher releases Free Hacking Tool that Can Steal all Your Secrets from Password Manager

Unless we are a human supercomputer, remembering a different password for every different site is not an easy task. But to solve this problem, there is a growing market of best password manager and lockers, which remembers your password for every single account and simultaneously provides an extr...

sysPass 1.0.9 - SQL Injection Vulnerability

Exploit for php platform in category web applications Product: sysPass Vendor: http://cygnux.org/ Affected Versions: 1.0.9 and below Tested Versions: 1.0.9 Vulnerability Type: SQL Injection CWE-89 Risk Level: High Solution Status: Fixed Vendor Notification: 2014-07-27 Solution Date: 2014-08-04...

sysPass 1.0.9 - SQL Injection

sysPass 1.0.9 - SQL Injection -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Advisory ID: SYSS-2015-031 Product: sysPass Vendor: http://cygnux.org/ Affected Versions: 1.0.9 and below Tested Versions: 1.0.9 Vulnerability Type: SQL Injection CWE-89 Risk Level: High Solution Status: Fixed Vendor...

[SYSS-2015-031] sysPass - SQL Injection

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Advisory ID: SYSS-2015-031 Product: sysPass Vendor: http://cygnux.org/ Affected Versions: 1.0.9 and below Tested Versions: 1.0.9 Vulnerability Type: SQL Injection CWE-89 Risk Level: High Solution Status: Fixed Vendor Notification: 2014-07-27 Solutio...

sysPass 1.0.9 - SQL Injection

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Advisory ID: SYSS-2015-031 Product: sysPass Vendor: http://cygnux.org/ Affected Versions: 1.0.9 and below Tested Versions: 1.0.9 Vulnerability Type: SQL Injection CWE-89 Risk Level: High Solution Status: Fixed Vendor Notification: 2014-07-27 Solutio...

ZOHO ManageEngine Password Manager Pro SQL Injection Vulnerability

ZOHO ManageEngine Password Manager Pro PMP is a set of password management software from ZOHO. The software can record general password information, website login passwords, software registration codes and Email account passwords. An SQL injection vulnerability exists in the AdvanceSearch.class...

Sql injection

SQL injection vulnerability in the AdvanceSearch.class in AdventNetPassTrix.jar in ManageEngine Password Manager Pro PMP before 8.1 Build 8101 allows remote authenticated users to execute arbitrary SQL commands via the ANDOR parameter, as demonstrated by a request to...

CVE-2015-5459

Summary: CVE-2015-5459 affects ManageEngine Password Manager Pro (PMP) prior to 8.1 Build 8101. The vulnerability resides in the AdvanceSearch.class within AdventNetPassTrix.jar and is a SQL injection via the ANDOR parameter, enabling remote authenticated users to execute arbitrary SQL commands (...

PT-2015-6926

Name of the Vulnerable Software and Affected Versions ManageEngine Password Manager Pro PMP versions prior to 8.1 Build 8101 Description The issue allows remote authenticated users to execute arbitrary SQL commands. This is achieved via the ANDOR parameter in a request to the "STATE...

CVE-2015-5459: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the AdvanceSearch.class in AdventNetPassTrix.jar in ManageEngine Password Manager Pro PMP before 8.1 Build 8101 allows remote authenticated users to execute arbitrary SQL commands via the ANDOR parameter, as demonstrated by a request to...

ManageEngine Password Manager Pro SQLi Vulnerability (Jul 2015)

ManageEngine Password Manager Pro is prone to an SQL injection SQLi vulnerability. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

ManageEngine Password Manager Pro Detection (HTTP)

HTTP based detection of ManageEngine Password Manager Pro. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

ManageEngine Password Manager Pro 8.1 SQL Injection Vulnerability

ManageEngine Password Manager Pro version 8.1 suffers from a remote SQL injection vulnerability. Title: ManageEngine Password Manager Pro SQL 8.1 Injection vulnerability Author: Blazej Adamczyk br0x Download site: https://www.manageengine.com/products/passwordmanagerpro/download.html Version: 8.1...

ManageEngine Password Manager Pro 8.1 SQL Injection

Title: ManageEngine Password Manager Pro SQL 8.1 Injection vulnerability Author: Blazej Adamczyk br0x Date: 2015-06-30 Download site: https://www.manageengine.com/products/passwordmanagerpro/download.html Version: 8.1 and below Vendor: https://www.manageengine.com/products/passwordmanagerpro/...

LastPass Network Breached; Calls for Master Password Reset

Password manager LastPass disclosed today that its network was breached and advised users to change their master passwords and enable multifactor authentication. CEO and founder Joe Siegrist said in a security notice that LastPass on Friday discovered suspicious activity on its network; encrypted...

Vulnerability in Thycotic Password Manager Secret Server application

Thycotic Password Manager Secret Server application for iOS is a set of U.S. Thycotic company based on the iOS platform password management application. A security vulnerability exists in Thycotic Password Manager Secret Server application for iOS version 2.3 and earlier. The program fails to...