CVE-2002-2152

The Czech edition of Software602's Web Server before 2002.0.02.0916 allows remote attackers to gain administrator privileges via direct HTTP requests to the /admin/ directory, which is not password protected...

Hacking Forum various means maximum exposure-vulnerability warning-the black bar safety net

Currently online there is a new trend, hackers attack target starts from the site extends to forums and chat rooms and message boards and other public places, and many users of the forum password was and the E-mail and QQ password exactly the same, so for all the network security threats is very...

[Full-disclosure] Buffer-overflow and directory traversal in Asus Video Security 3.5.0.0

Luigi Auriemma Application: Asus Video Security http://www.asus.com/products1.aspx?l1=2&share=icon/12 Versions: = 3.5.0.0 the version number is chaotic, this one seems the most recent but doesn't exist an official website with the latest updates and Asus didn't reply to me Platforms: Windows Bugs...

CVE-2005-3432

MiniGal 2 MG2 0.5.1 allows remote attackers to list password protected images via a request to index.php with the list parameter set to wildcard and the page parameter set to all...

mg2-image.txt

The MG2 Image Gallery system has the ability to make create online galleries. Even password protected once. By manipulating url from a gallery, you are able to list out all pictures in every gallery. Even though they are inside a password protected folder. Sample manipulation could be:...

windows NT/2k/XP useradd shellcode for russian systems 318 bytes

Exploit for win32 platform in category shellcode ================================================================ Windows NT/2k/XP useradd shellcode for russian systems 318 bytes ================================================================ / \ win32 useradd shellcode for russian systems / by...

CVE-2005-2742

SecurityAgent in Apple Mac OS X 10.4.2 can cause the "Switch User..." button to appear when fast user switching is disabled, potentially allowing attackers with physical access to bypass the wake password requirement. This CVE entry is supported by multiple sources, including NVD and Red Hat, whi...

phpcal.txt

phpCommunityCalendar 4.0.3 possibly prior versions sql injection / login bypass / cross site scripting software: site: http://open.appideas.com download: http://open.appideas.com/Calendar/ 1 sql injection / login bypass: "admin" directory contains tools for the site administrator. "webadmin"...

phpCommunityCalendar 4.0.3 (possibly prior versions) sql injection / login bypass / cross site scripting

phpCommunityCalendar 4.0.3 possibly prior versions sql injection / login bypass / cross site scripting software: site: http://open.appideas.com download: http://open.appideas.com/Calendar/ 1 sql injection / login bypass: "admin" directory contains tools for the site administrator. "webadmin"...

CVE-2005-1590

Technical details for CVE-2005-1590 are not publicly available in the provided documents; the available sources describe a related vulnerability but do not reveal affected components, versions, or fixes. Monitor for updates.

CVE-2005-1590

The Altiris Client Service for Windows ACLIENT.EXE 6.0.88 allows local users to disable password protection and access the administrative interface by finding and showing the "Altiris Client Service" hidden window, disabling the password protection, disabling the "Hide client tray icon box" optio...

CVE-2005-1590

The Altiris Client Service for Windows ACLIENT.EXE 6.0.88 allows local users to disable password protection and access the administrative interface by finding and showing the "Altiris Client Service" hidden window, disabling the password protection, disabling the "Hide client tray icon box" optio...

CVE-2005-1590: Undefined Security Weakness

The Altiris Client Service for Windows ACLIENT.EXE 6.0.88 allows local users to disable password protection and access the administrative interface by finding and showing the "Altiris Client Service" hidden window, disabling the password protection, disabling the "Hide client tray icon box" optio...

[Full-disclosure] Privilege escalation and password protection bypass in Altiris Client Service for Windows (Version 6.0.88)

Summary: Privilege escalation and password protection bypass in Altiris Client Service for Windows Version 6.0.88 http://www.altiris.com/ Details: It is possible to manipulate the administrative interface of the Altiris Client Service for Windows and escalate privileges to that of the LocalSystem...

CVE-2001-1464

Crystal Reports vulnerability: when displaying data for a password-protected database via HTML pages, it embeds the username and password in cleartext in the HTML content and in the URL, allowing remote attackers to obtain passwords. Affected: Crystal Reports HTML rendering for password-protected...

Messenger Plus! instant messanger password protection bypass

It's possible to change password without entering old one...

HP-UX PHSS_22062 : HPSBUX0008-119 Sec. Vulnerability OpenView NNM 6.1 (rev.1)

s700800 11.00 OV NNM6.1 ovlaunch focus in login field : Web password protection is not robust for local users. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and patch checks in this plugin were extracted from HP patch PHSS22062. The text itself is copyright C...

ELOG <= 2.5.6 Remote Shell Exploit

Exploit for multiple platform in category remote exploits ================================= ELOG = 2.5.6 Remote Shell Exploit ================================== Hi there, someone has brought to u a gift. ELOG Remote Shell Exploit = 2.5.6 Also for future Versions Updated On 18/April/2004 LOCK YOUR...

ELOG &lt;= 2.5.6 Remote Shell Exploit

No description provided by source. / Worked on latest version for me http://midas.psi.ch/elog/download/tar/elog-latest.tar.gz elog-latest.tar.gz 26-Jan-2005 21:36 519K Default port 8080. str0ke / / Hi there, someone has brought to u a gift. ELOG Remote Shell Exploit = 2.5.6 Also for future Versio...

ELOG 2.5.6 - Remote Shell

/ Worked on latest version for me http://midas.psi.ch/elog/download/tar/elog-latest.tar.gz elog-latest.tar.gz 26-Jan-2005 21:36 519K Default port 8080. str0ke / / Hi there, someone has brought to u a gift. ELOG Remote Shell Exploit = 2.5.6 Also for future Versions Updated On 18/April/2004 LOCK YO...