Radium-Keylogger - Python keylogger with multiple features

Python keylogger with multiple features. Features Applications and keystrokes logging Screenshot logging Drive tree structure Logs sending by email Password Recovery for Chrome Mozilla Filezilla Core FTP CyberDuck FTPNavigator WinSCP Outlook Putty Skype Generic Network Cookie stealer Keylogger st...

Moderate: Red Hat Security Advisory: Red Hat Storage Console 2 security and bug fix update

An update is now available for Red Hat Storage Console 2 for Red Hat Enteprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

ELNet Power Meter Unauthenticated Access / Weak Credential Management

ELNet Energy & Electrical Power Meter - Mulitple Vulnerabilities http://elnet.feniks-pro.com/Elnet-LT.php http://www.elnet.cc/product/elnet-lt/ Powermeter with color graphic display for all electrical measurements and harmonics, with TCP/IP and RS485 communication ModBus and Bacnet, panel mounted...

Python Keylogger: Radium

Python Keylogger With Multiple Features Keystroke logging, often referred to as keylogging or keyboard capturing, is the action of recording logging the keys struck on a keyboard, typically covertly, so that the person using the keyboard is unaware that their actions are being monitored. Keyloggi...

So I lost my OpenBSD FDE password

The other day I set up a new OpenBSD instance with a nice RAID array, encrypted with Full Disk Encryption. And promptly proceeded to forget part of the passphrase. We know things get interesting when I lose a password. I did a weak attempt at finding some public bruteforce tool, and found nothing...

The vulnerability of the Linter Bastion database management system allows a malicious individual to decode administrator login credentials.

By default, user passwords in the Linter Bastion Database Management System are encrypted using a less reliable encryption algorithm. The recovery of the password from the encrypted text takes less than a second. For example, in the “3.11” file, with an offset of 4203, the Linter Bastion Database...

Ktools Photostore 4.7.5 - Blind SQL Injection

Title : Ktools Photostore = 4.7.5 Pre-Authentication Blind SQL Injection CVE-ID : CVE-2016-4337 Google Dork: inurl:mgr.login.php Product : Photostore Affected : Versions prior to 4.7.5 Impact : Critical Remote : Yes Website link: http://www.ktools.net Reported : 02/06/2016 Authors : Gal Goldshtei...

Netgear device web interface login password disclosure vulnerability

Netgear is a global leader in enterprise networking solutions and a champion of digital home networking applications. A web interface login password disclosure vulnerability exists in several Netgear devices. When password recovery is disabled, an attacker with access to the internal network or...

CVE-2015-8289

The password-recovery feature on NETGEAR D3600 devices with firmware 1.0.0.49 and D6000 devices with firmware 1.0.0.49 and earlier allows remote attackers to discover the cleartext administrator password by reading the cgi-bin/passrec.asp HTML source code...

CVE-2015-8289

Netgear D3600/D6000 routers with firmware up to 1.0.0.49 disclose the administrator password via the password-recovery page. The vulnerability (CVE-2015-8289) lets remote attackers read the cleartext password by inspecting the /cgi-bin/passrec.asp page’s source. Affected devices include D3600 and...

CVE-2015-8289

The password-recovery feature on NETGEAR D3600 devices with firmware 1.0.0.49 and D6000 devices with firmware 1.0.0.49 and earlier allows remote attackers to discover the cleartext administrator password by reading the cgi-bin/passrec.asp HTML source code...

PHPLive 4.4.8 4.5.4 - Password Recovery SQL Injection

PHPLive 4.4.8 4.5.4 - Password Recovery SQL Injection !/bin/env python Exploit title: Password Recovery Sql Injection Exploit Author: Tiago Carvalho Vendor Homepage: http://www.phplivesupport.com/?plk=osicodes-5-ykq-m Version : 4.4.8 - 4.5.4 Product Name: Phplive Tested on: Debian \ Kali linux...

PHPLive 4.4.8 < 4.5.4 - Password Recovery SQL Injection

!/bin/env python Exploit title: Password Recovery Sql Injection Exploit Author: Tiago Carvalho Vendor Homepage: http://www.phplivesupport.com/?plk=osicodes-5-ykq-m Version : 4.4.8 - 4.5.4 Product Name: Phplive Tested on: Debian \ Kali linux 2016-1 """ Their are multiple sql injection...

PHPLive 4.4.8 < 4.5.4 - Password Recovery SQL Injection

Exploit for php platform in category web applications !/bin/env python Exploit title: Password Recovery Sql Injection Exploit Author: Tiago Carvalho Vendor Homepage: http://www.phplivesupport.com/?plk=osicodes-5-ykq-m Version : 4.4.8 - 4.5.4 Product Name: Phplive Tested on: Debian \ Kali linux...

Symantec Messaging Gateway Stored AD Password Vulnerability

Symantec Messaging Gateway is a suite of anti-spam, anti-virus, advanced content filtering and data leakage protection technologies from Symantec. A security vulnerability exists in the management console of Symantec Messaging Gateway versions prior to 10.6.0-7. An attacker could exploit the...

Symantec Messaging Gateway Multiple Security Issues

SUMMARY Symantec Messaging Gateway SMG Appliance management console was susceptible to potential recovery of the AD password by any user with at least authorized read access to the appliance. Also, an admin or support user could potentially escalate a lower-privileged access to root on the...

Uber: XSS via password recovering

I found that xss can be executed if we provide xss payload as a password in Uber during password recovery. Steps to follow: 1 Goto https://login.uber.com/forgot-password 2 Enter email and submit 3 Open the recover link you got 4 Enter Set password: alertdocument.domain; and submit it 5 Click Show...

FREE WiFi Password Recovery - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application FREE WiFi Password Recovery published at the 'play' market has multiple vulnerabilities...

CVE-2015-5267

lib/moodlelib.php in Moodle through 2.6.11, 2.7.x before 2.7.10, 2.8.x before 2.8.8, and 2.9.x before 2.9.2 relies on the PHP mtrand function to implement the randomstring and complexrandomstring functions, which makes it easier for remote attackers to predict password-recovery tokens via a...

CVE-2015-5267

lib/moodlelib.php in Moodle through 2.6.11, 2.7.x before 2.7.10, 2.8.x before 2.8.8, and 2.9.x before 2.9.2 relies on the PHP mtrand function to implement the randomstring and complexrandomstring functions, which makes it easier for remote attackers to predict password-recovery tokens via a...