2843 matches found
Netgear WNDRMAC 1.0.0.22 Information Disclosure
Sense of Security - Security Advisory - SOS-12-005 Release Date. 13-May-2012 Last Update. - Vendor Notification Date. 06-Mar-2012 Product. NETGEAR WNDRMAC Platform. Hardware Affected versions. 1.0.0.22 and below Severity Rating. High Impact. Exposure of sensitive information Attack Vector. From...
CVE-2011-3289
Cisco IOS 12.4 and 15.0 through 15.2 allows physically proximate attackers to bypass the No Service Password-Recovery feature and read the start-up configuration via unspecified vectors, aka Bug ID CSCtr97640...
Design/Logic Flaw
Cisco IOS 12.4 and 15.0 through 15.2 allows physically proximate attackers to bypass the No Service Password-Recovery feature and read the start-up configuration via unspecified vectors, aka Bug ID CSCtr97640...
CVE-2011-3289
Cisco IOS 12.4 and 15.0–15.2 contains a vulnerability (Bug CSCtr97640) that allows physically proximate attackers to bypass the No Service Password-Recovery feature and read the startup configuration via unspecified vectors. Affected product family: Cisco IOS; affected versions: 12.4 and 15.0 thr...
CVE-2011-3289
Cisco IOS 12.4 and 15.0 through 15.2 allows physically proximate attackers to bypass the No Service Password-Recovery feature and read the start-up configuration via unspecified vectors, aka Bug ID CSCtr97640...
CVE-2011-3289: Undefined Security Weakness
Cisco IOS 12.4 and 15.0 through 15.2 allows physically proximate attackers to bypass the No Service Password-Recovery feature and read the start-up configuration via unspecified vectors, aka Bug ID CSCtr97640...
PT-2012-1683
Name of the Vulnerable Software and Affected Versions Cisco IOS versions 12.4 and 15.0 through 15.2 Description The issue allows physically proximate attackers to bypass the No Service Password-Recovery feature and read the start-up configuration. Recommendations For Cisco IOS versions 12.4 and...
HDWiKi V 4.0.3 及 HDWiKi V5.1 后台上SHELL
简要描述： 前几天刚爆了5.1的注入漏洞,在对一个站检测时，发现对方使用的是HDWiKi V 4.0.3版，网上关于模板写马的，好像在这个版本用不了，研究了下，就发现了这个上传WEBshell的方法！ 详细说明： HDWiKi V 4.0.3 在在线安装插件时，没有对压缩包的文件里面的文件做检测，可以先将马放在压缩包里面，再在线安装！ 如图： 安装好后，马马就在plugins下面对应的插件目录里面，具体如何找，你懂的！ HDWiki V5.1 的就简单了，模块下面有个文件管理！直接可以上传的！ 找回密码链接，可以预测： 这个有点难度，主要有2点： 1，要知道被破账号的邮件地址； 2,要抓...
Extreme GPU Bruteforcer - Crack passwords with 450 Million passwords/Sec Speed
Extreme GPU Bruteforcer - Crack passwords with 450 Million passwords/Sec Speed Extreme GPU Bruteforcer, developed by InsidePro is a program meant for the recovery of passwords from hashes of different types, utilizing the power of GPU which enables reaching truly extreme attack speed of approx 45...
PcwRunAs 0.4 Password Obfuscation Design Flaw
Vuln Title: PcwRunAs Password Obfuscation Design Flaw Date: 26.03.2012 Author: Christian Landström, otr Software Link: http://www.pcwelt.de/downloads/pcwRunAs-1215998.html Version: = 0.4 Tested on: Windows CVE : CVE-2012-1793 Risk: high Type: Privilege Escalation Vendor: PC-Welt Timeline:...
New Tool Cracks Apple iWork Passwords
The Russian software company, ElcomSoft, has developed a tool capable of recovering iWork passwords from Apple Numbers, Pages, and Keynote applications. According to ElcomSoft, ‘Distributed Password Recovery’ is the first commercially available tool with this capacity. The tool works by performin...
Schneider Modicon Quantum Password Recovery
The Schneider Modicon Quantum series of Ethernet cards store usernames and passwords for the system in files that may be retrieved via backdoor access. This module is based on the original 'modiconpass.rb' Basecamp module from DigitalBond. Module Options msf use...
General Electric D20 Password Recovery
The General Electric D20ME and possibly other units D200? feature TFTP readable configurations with plaintext passwords. This module retrieves the username, password, and authentication level list. Module Options msf use auxiliary/gather/d20pass msf undefinedd20pass show actions ...actions... msf...
Extreme GPU Bruteforcer
Extreme GPU Bruteforcer is a professional solution for the recovery of passwords from hashes using GPU. The software supports hashes of the following types: MySQL, MySQL5, DESUnix, MD4, MD5, MD5Unix, MD5APR, MD5phpBB3, MD5WordPress, LM, NTLM, SHA-1 and many others. On modern graphics cards from...
Apple Patent Links Power Cord To Password Recovery
The filing, 20120005747A1, describes a method for storing a password recover secret on a peripheral device, including a power adapter. The development would, in essence, turn power cords and other peripherals into a second factor that would make it harder for thieves to gain access to devices the...
Cain & Abel v4.9.43 Released
Cain & Abel v4.9.43 Released Cain & Abel is a password recovery tool for Microsoft operating systems.It allows easy recovery of various kind of passwords by sniffing the network, cracking encrypted passwords using dictionary and brute force attacks, decoding scrambled passwords, revealing passwor...
Cain & Abel v4.9.43 Released
Cain & Abel v4.9.43 Released Cain & Abel is a password recovery tool for Microsoft operating systems.It allows easy recovery of various kind of passwords by sniffing the network, cracking encrypted passwords using dictionary and brute force attacks, decoding scrambled passwords, revealing passwor...
New Research Shows Possibility of Using an iPhone as a Keylogger
Researchers from MIT and Georgia Tech have developed a new technique that enables them to use the accelerometer in an iPhone or other smartphone to capture keystrokes from a nearby PC and decipher the typed words with about 80 percent accuracy. The tactic, while quite complicated, could be used t...
crypt_blowfish: 8-bit character mishandling allows different password pairs to produce the same hash
cryptblowfish before 1.1, as used in PHP before 5.3.7 on certain platforms, PostgreSQL before 8.4.9, and other products, does not properly handle 8-bit characters, which makes it easier for context-dependent attackers to determine a cleartext password by leveraging knowledge of a password hash...