PT-2007-2927 · Mcafee +1 · Mcafee Virusscan Enterprise +1

Name of the Vulnerable Software and Affected Versions: McAfee VirusScan Enterprise version 8.5.0.i Description: The software uses insecure permissions for certain Windows Registry keys, allowing local users to bypass local password protection via the UIP value in "HKEY LOCAL...

CVE-2007-1538: Undefined Security Weakness

McAfee VirusScan Enterprise 8.5.0.i uses insecure permissions for certain Windows Registry keys, which allows local users to bypass local password protection via the UIP value in 1 HKEYLOCALMACHINE\SOFTWARE\McAfee\DesktopProtection or 2 HKEYLOCALMACHINE\SOFTWARE\Network Associates\TVD\VirusScan...

CVE-2006-7037

Mathcad 12 through 13.1 allows local users to bypass the security features by directly accessing or editing the XML representation of the worksheet with a text editor or other program, which allows attackers to 1 bypass password protection by replacing the password field with a hash of a known...

CVE-2006-7037

Mathcad 12 through 13.1 allows local users to bypass the security features by directly accessing or editing the XML representation of the worksheet with a text editor or other program, which allows attackers to 1 bypass password protection by replacing the password field with a hash of a known...

CVE-2006-7037

CVE-2006-7037 affects Mathcad 12 through 13.1. Local users can bypass security by directly editing the worksheet’s XML, enabling four outcomes: (1) bypass password protection by replacing the password field with a hash of a known password; (2) modify timestamps to conceal modifications; (3) remov...

WinRAR / unrar buffer overflow

Buffer overflow on password protected archives parsing...

Les News v2.2 [Admin news without password]

Les News v2.2 Admin news without password By : sn0oPy Risk : verry high site : http://stombi.free.fr/ exploit : add to the /lesnews/ rep adminews/indexfr.php3 exemple : http://www.test.ma/lesnews/lesnewsfr.php3 http://www.test.ma/lesnews/adminews/indexfr.php3 Dork : inurl:"/lesnews/lesnewsfr.php3...

The reproduction of social engineering-vulnerability warning-the black bar safety net

Article author: withered Ling roseN. C. P. H Information source: evil octal information security teamwww.eviloctal.com to This is my osmosis in the process of a real experience,I would have thought after two days of time to get to the master server,the Master Station program on the Master Station...

Secure Login Manager Multiple Input Validation Vulnerabilities

Secure Login Manager 1.0 is a program where the users can access the password protected webpages on their website. This program avoids unauthorized access by the users on webpage. Redirect unauthorized users to login page, manage users; passwords via admin page, configure up to 3 levels of...

Secunia Research: My Firewall Plus Privilege Escalation Vulnerability

====================================================================== Secunia Research 21/11/2006 - My Firewall Plus Privilege Escalation Vulnerability - ====================================================================== Table of Contents Affected...

Hidden in the picture behind the secret-vulnerability warning-the black bar safety net

The image size is not the same, browse pictures when you can't see the slightest problem, whether you think its a picture of a seemingly ordinary BMP picture, but hidden mystery for? Want to Ferret out hidden in the picture behind the secret, then essay with the beginning today of the mysterious...

CPanel Multiple Cross Site Scription

Aria-Security Team Advisory www.Aria-security.Com For English www.Aria-Security.net For Persian Original Advisory : http://aria-security.net/advisory/cpanel.txt ----------------------------------------------------------- Software: CPanel Tested On CPanel 10 CPanel file Manager: PoC:...

Easy File Sharing Web Server protection bypass

By using alternative NTFS-streams it's possible to retrieve protected data, including accounts and passwords...

CVE-2006-4309

VNC server on the AK-Systems Windows Terminal 1.2.5 ExVLP is not password protected, which allows remote attackers to login and view RDP or Citrix sessions...

Digital Armaments Security Advisory 29.06.2006: Siemens Speedstream Wireless Router Password Protection Bypass Vulnerability

Digital Armaments advisory is 05.02.2006 http://www.digitalarmaments.com/2006290674551938.html I. Background The SpeedStream Wireless DSL/Cable Router is usually adopted for home and small business solutions. Together with an existing DSL or cable modem connection, this affordable, easy to use...

Only changed a little bit easy to lift a Word document password protected-vulnerability warning-the black bar safety net

Word's password protection function is relatively strong, if one accidentally forgot Word password? How to modify the encrypted Word document? Word document protection is divided into open and modify the protection for the former online there have been many more Mature approach. Such as...

newsletter.txt

I found a bug in artmedic Newsletter 4.1 proably even in newer versions which lets an attacker run arbitrary php-code and bypass the password protection. The reason for this is mistake in design. log.php: Usually the log.php is included and $logfile,$logtime and $email are declared in the parent...

Remote Code Execution in artmedic Newsletter 4.1 [log.php]

I found a bug in artmedic Newsletter 4.1 proably even in newer versions which lets an attacker run arbitrary php-code and bypass the password protection. The reason for this is mistake in design. log.php: ?php $time = time; $date = date"d.m.Y, H:i:s"; $remote = getenv"REMOTEADDR"; $ip =...

Design/Logic Flaw

Sybase EAServer 5.0 for HP-UX Itanium, 5.2 for IBM AIX, HP-UX PA-RISC, Linux x86, and Sun Solaris SPARC, and 5.3 for Sun Solaris SPARC does not properly protect passwords when they are being entered via the GUI, which allows local users to obtain the cleartext passwords via the getSelectedText...

Windows password weakness

Added: 12/19/2005 CVE: CVE-1999-0503 Background Passwords are the most commonly used method of authenticating users to a server. The combination of a login name and password is used to verify the identity of a user requesting access, and to determine what parts of the server the user has permissi...