Kaspersky PM 5.0.0.164 - Software Filter Vulnerability

Document Title: =============== Kaspersky PM 5.0.0.164 - Software Filter Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=612 Release Date: ============= 2012-07-12 Vulnerability Laboratory ID VL-ID: ==================================== 612...

Kaspersky PM 5.0.0.164 - Software Filter Vulnerability

Document Title: =============== Kaspersky PM 5.0.0.164 - Software Filter Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=612 Release Date: ============= 2012-07-12 Vulnerability Laboratory ID VL-ID: ==================================== 612...

Researcher Warns Of Security Hole In KeePass Password Manager

Users of the free, open source KeePass password manager got unwelcome news on Tuesday, after a private security researcher claimed to have discovered a remotely exploitable security hole that could give an attacker access to unencrypted user passwords. However, KeePass’s creator calls the hole...

KeePass Password Safe 1.22 - Encoding Filter Vulnerability

Document Title: =============== KeePass Password Safe 1.22 - Encoding Filter Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=615 Release Date: ============= 2012-06-23 Vulnerability Laboratory ID VL-ID: ====================================...

CVE-2012-2959

Cross-site request forgery CSRF vulnerability in password-manager/changePasswords.do in BMC Identity Management Suite 7.5.00.103 allows remote attackers to hijack the authentication of administrators for requests that change passwords...

PT-2012-4392

Name of the Vulnerable Software and Affected Versions BMC Identity Management Suite version 7.5.00.103 Description A cross-site request forgery issue exists, allowing remote attackers to hijack administrator authentication for password change requests. The issue is related to the...

DELL Quest One Password Manager - CAPTCHA Security Bypass

DELL Quest One Password Manager - CAPTCHA Security Bypass source: https://www.securityfocus.com/bid/63259/info DELL Quest One Password Manager is prone to a security bypass vulnerability. An attacker can exploit this issue to bypass certain security restrictions and gain access to sensitive areas...

DELL Quest One Password Manager - CAPTCHA Security Bypass

source: https://www.securityfocus.com/bid/63259/info DELL Quest One Password Manager is prone to a security bypass vulnerability. An attacker can exploit this issue to bypass certain security restrictions and gain access to sensitive areas of the application to perform unauthorized actions; this...

CVE-2011-1840

The MartiniCreations PassmanLite Password Manager application before 1.48 for Android stores the master password and unspecified other account information in cleartext, which allows local users to obtain sensitive information by leveraging shell access...

CVE-2011-1840

The MartiniCreations PassmanLite Password Manager application before 1.48 for Android stores the master password and unspecified other account information in cleartext, which allows local users to obtain sensitive information by leveraging shell access...

CVE-2011-1840

CVE-2011-1840 affects the MartiniCreations PassmanLite Password Manager for Android prior to version 1.48. The master password (and unspecified other account data) is stored in cleartext, enabling local users with shell access to obtain sensitive information. The vulnerability is local in scope w...

Stable Channel Update

The Chrome Stable and Beta channels have been updated to 10.0.648.204 for Windows, Mac, Linux and Chrome Frame. Included in this release is support for the password manager on Linux, performance and stability fixes, as well as the security fixes listed below. Security fixes and rewards: Please se...

Collaborative Passwords Manager 1.07 - Multiple Local File Inclusions

Collaborative Passwords Manager 1.07 - Multiple Local File Inclusions Collaborative Passwords Manager 1.07 Multiple Local Include Exploit Found by sh00t0ut Expl: Vendor: http://code.google.com/p/cpassman/downloads/list http://victim/?SESSIONuserlanguage=etc/passwd%00...

Esoftpro Online Password Manager Multiple Vulnerability

Exploit for php platform in category web applications ======================================================= Esoftpro Online Password Manager Multiple Vulnerability ======================================================= 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 ...

Password Manager Daemon二进制密钥文件不安全加密漏洞

BUGTRAQ ID: 39882 Password Manager Daemon是通过套接字向应用提供数据的守护程序。数据存储在加密的XML文件中，客户端在打开和保持文件时必须提供密钥。 应用以ASCII形式从指定的keyfile配置参数中读取数据，而用户可能使用文件中的二进制数据。如果二进制数据中包含有空字节或换行符的话，就会导致使用较弱的密钥。 Ben Kibbey Password Manager Daemon 2.13 厂商补丁： Ben Kibbey ---------- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...

Design/Logic Flaw

browser/login/loginprompt.cc in Google Chrome before 4.0.249.89 populates an authentication dialog with credentials that were stored by Password Manager for a different web site, which allows user-assisted remote HTTP servers to obtain sensitive information via a URL that requires authentication,...

CVE-2010-0556

browser/login/loginprompt.cc in Google Chrome before 4.0.249.89 populates an authentication dialog with credentials that were stored by Password Manager for a different web site, which allows user-assisted remote HTTP servers to obtain sensitive information via a URL that requires authentication,...

CVE-2010-0556

browser/login/loginprompt.cc in Google Chrome before 4.0.249.89 populates an authentication dialog with credentials that were stored by Password Manager for a different web site, which allows user-assisted remote HTTP servers to obtain sensitive information via a URL that requires authentication,...

CVE-2010-0556

CVE-2010-0556 describes a cross-origin weakness in Google Chrome’s Password Manager where credentials stored for one site could be populated into an authentication dialog triggered by a third-party page (demonstrated via IMG src). Affected versions include Chrome 3.0.195.38 and 4.0.249.78; Chrome...

CVE-2010-0556: Undefined Security Weakness

browser/login/loginprompt.cc in Google Chrome before 4.0.249.89 populates an authentication dialog with credentials that were stored by Password Manager for a different web site, which allows user-assisted remote HTTP servers to obtain sensitive information via a URL that requires authentication,...