Stable Channel Update

The Chrome Team is excited to announce the promotion of Chrome 34 to the Stable channel for Windows, Mac, and Linux. Chrome 34.0.1847.116 contains a number of fixes and improvements, including: Responsive Images and Unprefixed Web Audio Import supervised users onto new computers A number of new...

Master Password Protection added to Google Chrome's Password Manager

Just like other Web Browsers, The Google Chrome also offers a password manager feature that can save your logins and basic information for automatic form-filling. The Google Chrome browser stores all your passwords in the plain text format and is available for access by opening the following URL ...

Master Password Protection added to Google Chrome's Password Manager

Just like other Web Browsers, The Google Chrome also offers a password manager feature that can save your logins and basic information for automatic form-filling. The Google Chrome browser stores all your passwords in the plain text format and is available for access by opening the following URL ...

CVE-2013-6246

The Dell Quest One Password Manager, possibly 5.0, allows remote attackers to bypass CAPTCHA protections and obtain sensitive information user's full name by sending a login request with a valid domain and username but without the CaptchaType, UseCaptchaEveryTime, and CaptchaResponse parameters...

Design/Logic Flaw

The Dell Quest One Password Manager, possibly 5.0, allows remote attackers to bypass CAPTCHA protections and obtain sensitive information user's full name by sending a login request with a valid domain and username but without the CaptchaType, UseCaptchaEveryTime, and CaptchaResponse parameters...

CVE-2013-6246

CVE-2013-6246 affects Dell Quest One Password Manager (possibly v5.0). The vulnerability allows remote attackers to bypass CAPTCHA protections and obtain a user’s full name by sending a login request with a valid domain and username but missing CaptchaType, UseCaptchaEveryTime, and CaptchaRespons...

PT-2013-5981

Name of the Vulnerable Software and Affected Versions Dell Quest One Password Manager version 5.0 Description The issue allows remote attackers to bypass CAPTCHA protections and obtain sensitive information, such as a user's full name, by sending a login request with a valid domain and username b...

CVE-2013-6246: Undefined Security Weakness

The Dell Quest One Password Manager, possibly 5.0, allows remote attackers to bypass CAPTCHA protections and obtain sensitive information user's full name by sending a login request with a valid domain and username but without the CaptchaType, UseCaptchaEveryTime, and CaptchaResponse parameters...

Dell Quest One Password Manager CAPTCHA Bypass

-= Disclosure =- Filing Date: Today Issue Tracking Numbah: 20747 Discoverorer: Johnny Bravo -= Background =- Quest made a password management web thing. Dell bought Quest. Dell offers Quest Onetm Password Manager for $5/user. http://software.dell.com/products/password-manager/. Oddly, this is not...

Trend Micro DirectPass 1.5.0.1060 - Multiple Vulnerabilities

Title: ====== Trend Micro DirectPass 1.5.0.1060 - Multiple Vulnerabilities Date: ===== 2013-05-21 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=894 Article: http://www.vulnerability-lab.com/dev/?p=580 Trend Micro Reference:...

Trend Micro DirectPass 1.5.0.1060 - Multiple Vulnerabilities

Document Title: =============== Trend Micro DirectPass 1.5.0.1060 - Multiple Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=894 Article: http://www.vulnerability-lab.com/dev/?p=580 Trend Micro Reference:...

Trend Micro DirectPass 1.5.0.1060 - Multiple Vulnerabilities

Document Title: =============== Trend Micro DirectPass 1.5.0.1060 - Multiple Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=894 Article: http://www.vulnerability-lab.com/dev/?p=580 Trend Micro Reference:...

Kaspersky Password Manager Installed (credentialed check)

Kaspersky Password Manager KPM was detected on the remote host. KPM provides automated username and password storage and can complete web forms automatically. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid62799; scriptversion"1.10";...

Kaspersky Password Manager 5.x < 5.0.0.169 HTML Injection

The version of Kaspersky Password Manager installed on the remote Windows host is 5.x prior to 5.0.0.169. As such, it is potentially affected by an HTML injection vulnerability. A remote attacker can trick a user into visiting a malicious website and into saving malicious code from the site when...

IBM Proventia Network Mail Security System 2.5 - POST File Read

!/usr/bin/python ''' Author: muts of Offensive Security Product: IBM ISS Proventia Mail Security Version: 2.5 Vendor Site: http://www.ibm.com/us/en/ Product Page: http://www-935.ibm.com/services/us/en/it-services/proventia-network-mail-security-system.html Timeline: 04 Jun 2012: Vulnerability...

Kaspersky Password Manager - Filter Bypass Vulnerability

Document Title: =============== Kaspersky Password Manager - Filter Bypass Vulnerability References: =========== http://www.vulnerability-lab.com/getcontent.php?id=674 Download: http://www.vulnerability-lab.com/resources/videos/674.wmv View: http://www.youtube.com/watch?v=8D86ic9opYE Advisory:...

Kaspersky Password Manager - Filter Bypass Vulnerability

Document Title: =============== Kaspersky Password Manager - Filter Bypass Vulnerability References: =========== http://www.vulnerability-lab.com/getcontent.php?id=674 Download: http://www.vulnerability-lab.com/resources/videos/674.wmv View: http://www.youtube.com/watch?v=8D86ic9opYE Advisory:...

Kaspersky Password Manager 5.0.0.164 XSS / Bypass

Title: ====== Kaspersky PM 5.0.0.164 - Software Filter Vulnerability Date: ===== 2012-07-12 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=612 VL-ID: ===== 612 Common Vulnerability Scoring System: ==================================== 3 Introduction: =============...

KeyPass Password Safe 1.22 Cross Site Scripting

Exploit for php platform in category web applications Title: ====== KeyPass Password Safe v1.22 - Software Filter Vulnerability Introduction: ============= KeePass is a very famous & free open source password manager, which helps you to manage your passwords in a secure way. You can put all your...

KeyPass Password Safe 1.22 Cross Site Scripting

Title: ====== KeyPass Password Safe v1.22 - Software Filter Vulnerability Date: ===== 2012-06-26 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=615 VL-ID: ===== 615 Common Vulnerability Scoring System: ==================================== 3 Introduction: =============...