574 matches found
Encrypt password variables
All variables are currently stored in the database with no encryption Exceptions are repository passwords and Bamboo passwords which are irreversibly hashed/salted. ex. : Deployment variables that contain passwords are stored in the database with no encryption. So anyone with access to the databa...
Cisco WebEx One-Click Client Password Encryption - Information Disclosure
// source: https://www.securityfocus.com/bid/61304/info Cisco WebEx One-Click Client is prone to an information disclosure vulnerability. Successful exploits may allow an attacker to disclose sensitive information such as stored passwords; this may aid in further attacks. / WebEx One-Click Regist...
Cisco WebEx One-Click Client Password Encryption - Information Disclosure
Cisco WebEx One-Click Client Password Encryption - Information Disclosure // source: https://www.securityfocus.com/bid/61304/info Cisco WebEx One-Click Client is prone to an information disclosure vulnerability. Successful exploits may allow an attacker to disclose sensitive information such as...
LivingSocial Ups its Password Encryption After Breach
The popular daily deal site LivingSocial announced Monday it has abandoned the SHA1 hash for Blowfish’s bcrypt following a massive data breach that impacted 50 million customers. The company confirmed last weekend that its computer systems were attacked and thieves gained access to names, e-mail...
D-Link DIR-600 DIR-300 (Rev B) - Multiple Vulnerabilities
D-Link DIR-600 DIR-300 Rev B - Multiple Vulnerabilities Device Name: DIR-600 / DIR 300 - HW rev B1 Vendor: D-Link ============ Vulnerable Firmware Releases - DIR-300: ============ Firmware Version : 2.12 - 18.01.2012 Firmware Version : 2.13 - 07.11.2012 ============ Vulnerable Firmware Releases -...
CVE-2012-4571
Python Keyring 0.9.1 does not securely initialize the cipher when encrypting passwords for CryptedFileKeyring files, which makes it easier for local users to obtain passwords via a brute-force attack...
CVE-2012-4571: Undefined Security Weakness
Python Keyring 0.9.1 does not securely initialize the cipher when encrypting passwords for CryptedFileKeyring files, which makes it easier for local users to obtain passwords via a brute-force attack...
CVE-2012-4946
Agile FleetCommander and FleetCommander Kiosk before 4.08 use an XOR format for password encryption, which makes it easier for context-dependent attackers to obtain sensitive information by reading a key file and the encrypted strings...
CVE-2012-4946
Agile FleetCommander and FleetCommander Kiosk before 4.08 use an XOR format for password encryption, which makes it easier for context-dependent attackers to obtain sensitive information by reading a key file and the encrypted strings...
CVE-2012-4946
Agile FleetCommander and FleetCommander Kiosk before 4.08 store passwords with a reversible XOR encryption, enabling an attacker who can read the password key file and encrypted strings to obtain sensitive information. This CVE is documented by NVD and CVE records; CERT notes updates to 4.08/4.08...
CVE-2012-4946: Undefined Security Weakness
Agile FleetCommander and FleetCommander Kiosk before 4.08 use an XOR format for password encryption, which makes it easier for context-dependent attackers to obtain sensitive information by reading a key file and the encrypted strings...
Huawei Quidway / Huawei CX600 Weak Password Encryption
Various Huawei products use DES without any salt to encrypt passwords. Included vulnerable are the Huawei Quidway series and Huawei CX600. Weak password encryption on Huawei products =========================================== ADVISORY INFORMATION Title: Weak password encryption on Huawei product...
Weak password encryption on Huawei products
Weak password encryption on Huawei products =========================================== ADVISORY INFORMATION Title: Weak password encryption on Huawei products Release date: 13/11/2012 Credits: Roberto Paleari, Emaze Networks [email protected] Ivan Speziale, Emaze Networks...
Huawei (Multiple Products) - Password Encryption
source: https://www.securityfocus.com/bid/56510/info Multiple Huawei products are prone to a weak password encryption weakness. Successful exploits may allow an attacker to decrypt stored passwords; this may aid in further attacks. The following are vulnerable: Huawei Quidway series Huawei CX600...
Huawei (Multiple Products) - Password Encryption
Huawei Multiple Products - Password Encryption source: https://www.securityfocus.com/bid/56510/info Multiple Huawei products are prone to a weak password encryption weakness. Successful exploits may allow an attacker to decrypt stored passwords; this may aid in further attacks. The following are...
Fedora Update for gnome-keyring FEDORA-2012-12368
Check for the Version of gnome-keyring OpenVAS Vulnerability Test Fedora Update for gnome-keyring FEDORA-2012-12368 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...
Being the top academic system in the latest sql injection vulnerability fix-bug warning-the black bar safety net
You also again for the exam hanging branches and trouble? you also then for College how to sister phone and tangled? -, do you want to quickly find a school of nice girl?, then please see below 1. Classroom query at sql injection, as shown in Figure ! 1 union select NULL,owner from alltables brok...
CVE-2012-3818
The fpm exporter in Revelation 0.4.13-2 and earlier encrypts the version number but not the password when exporting a file, which might allow local users to obtain sensitive information...
Online game 'League of Legends' Compromised
Online game 'League of Legends' Compromised A recent slew of security failures have left countless accounts hacked at sites like Linkedin and eHarmoney. Now League of Legends is the latest database to suffer from hackers this week. Riot has sent out a mail to registered League of Legends players ...
