PlayStation Network Stronger Than Ever, Says Sony Exec

In the wake of what will likely go down as the biggest gaming failure since Virtual Boy, Sony chief executive, Howard Stringer claims the PlayStation Network is more secure than ever, according to a report from CNET. “I’m pleased to tell you that the PSN is more secure and better than ever,”...

CVE-2010-4535

The password reset functionality in django.contrib.auth in Django before 1.1.3, 1.2.x before 1.2.4, and 1.3.x before 1.3 beta 1 does not validate the length of a string representing a base36 timestamp, which allows remote attackers to cause a denial of service resource consumption via a URL that...

Debian Security Advisory DSA 1924-1 (mahara)

The remote host is missing an update to mahara announced via advisory DSA 1924-1. OpenVAS Vulnerability Test $Id: deb19241.nasl 6615 2017-07-07 12:09:52Z cfischer $ Description: Auto-generated from advisory DSA 1924-1 mahara Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...

PABox 1.6 - Password Reset

source: https://www.securityfocus.com/bid/8067/info paBox is prone to an issue that may allow unauthenticated remote users to reset administrative passwords. This could permit unauthorized access to the administrative Control Panel...

Ecardis Password Reseting Vulnerability

Hi, I don't know if someone has discovered this before but Ecartis 1.0.0 former listar contains a vulnerability that enables an attacker to reset passwords of any user defined on the list server, including the list admins. After logging on as a non-priviledged user, Ecartis enables the user to...

Vulnerability in all versions of DCForum from dcscripts.com

When a user requests a new password for his account, a new password is generated and sent to the requester anyone that knows the username+email information, which is usually available in "user profile". The problem is that the password is simply the first 6 characters of the user's SessionID, whi...