http-vuln-cve2010-2861 NSE Script

Executes a directory traversal attack against a ColdFusion server and tries to grab the password hash for the administrator user. It then uses the salt value hidden in the web page to create the SHA1 HMAC hash that the web server needs for authentication as admin. You can pass this value to the...

Android 'Tencent QQPhoto'权限许可和访问控制漏洞

CVE-2011-4867 Android是Google通过Open Handset Alliance发起的项目，用于为移动设备提供完整的软件集，包括操作系统、中间件等。 Android的Tencent QQPhoto com.tencent.qqphoto应用程序0.97版本中存在漏洞，该漏洞源于未正确保护数据。远程攻击者可利用此漏洞借助特制应用程序读取或修改联系人列表和密码哈希值。 0 0.97 the latest version in 29 Dec 2011 目前厂商还没有提供此漏洞的相关补丁或者升级程序 建议使用此软件的用户随时关注厂商的主页以获取最新版本：...

DSA-2399-1 php5 - several

Bulletin has no description...

Information disclosure

The Tencent QQPhoto com.tencent.qqphoto application 0.97 for Android does not properly protect data, which allows remote attackers to read or modify contact information and a password hash via a crafted application...

CVE-2011-4867

The Tencent QQPhoto com.tencent.qqphoto application 0.97 for Android does not properly protect data, which allows remote attackers to read or modify contact information and a password hash via a crafted application...

PT-2012-1972

Name of the Vulnerable Software and Affected Versions Tencent QQPhoto version 0.97 Description The issue allows remote attackers to read or modify contact information and a password hash via a crafted application, due to improper data protection. Recommendations For version 0.97, update to a newe...

CVE-2011-4867: Undefined Security Weakness

The Tencent QQPhoto com.tencent.qqphoto application 0.97 for Android does not properly protect data, which allows remote attackers to read or modify contact information and a password hash via a crafted application...

Chrome Password Grabber

Added: 01/10/2012 Background This tool grabs the saved passwords in the Chrome browser of the target's logged in user. Limitations Password Hash Grabber works on Windows targets. A connection to the target is required to run this tool. The target must have the .NET runtime 2.0 or higher. Platform...

Mandriva Update for php-suhosin MDVSA-2011:180 (php-suhosin)

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Mandriva Linux Security Advisory : php-suhosin (MDVSA-2011:180)

A vulnerability was discovered and fixed in php-suhosin : cryptblowfish before 1.1, as used in suhosin does not properly handle 8-bit characters, which makes it easier for context-dependent attackers to determine a cleartext password by leveraging knowledge of a password hash CVE-2011-2483. The...

Mandriva Linux Security Advisory : glibc (MDVSA-2011:178)

Multiple vulnerabilities was discovered and fixed in glibc : Multiple untrusted search path vulnerabilities in elf/dl-object.c in certain modified versions of the GNU C Library aka glibc or libc6, including glibc-2.5-49.el55.6 and glibc-2.12-1.7.el60.3 in Red Hat Enterprise Linux, allow local use...

TWSL2011-017: Multiple Vulnerabilities in Merethis Centreon

Trustwave's SpiderLabs Security Advisory TWSL2011-017: Multiple Vulnerabilities in Merethis Centreon https://www.trustwave.com/spiderlabs/advisories/TWSL2011-017.txt Published: 2011-11-04 Version: 1.0 Vendor: Merethis http://www.merethis.com and http://www.centreon.com Product: Centreon Version...

Default credentials

www/include/configuration/nconfigObject/contact/DB-Func.php in Merethis Centreon before 2.3.2 does not use a salt during calculation of a password hash, which makes it easier for context-dependent attackers to determine cleartext passwords via a rainbow-table approach...

CVE-2011-4432

www/include/configuration/nconfigObject/contact/DB-Func.php in Merethis Centreon before 2.3.2 does not use a salt during calculation of a password hash, which makes it easier for context-dependent attackers to determine cleartext passwords via a rainbow-table approach...

CVE-2011-4432

www/include/configuration/nconfigObject/contact/DB-Func.php in Merethis Centreon before 2.3.2 does not use a salt during calculation of a password hash, which makes it easier for context-dependent attackers to determine cleartext passwords via a rainbow-table approach...

CVE-2011-4432

CVE-2011-4432 affects Merethis Centreon prior to 2.3.2. The vulnerability is that the password hashing routine does not use a salt, making it easier for context-dependent attackers to recover plaintext passwords via rainbow tables. The available sources confirm this specific insecure credential h...

PT-2011-4950

Name of the Vulnerable Software and Affected Versions Merethis Centreon versions prior to 2.3.2 Description The issue concerns the calculation of a password hash in the www/include/configuration/nconfigObject/contact/DB-Func.php file. Specifically, it does not utilize a salt, making it easier for...

CVE-2011-4432: Undefined Security Weakness

www/include/configuration/nconfigObject/contact/DB-Func.php in Merethis Centreon before 2.3.2 does not use a salt during calculation of a password hash, which makes it easier for context-dependent attackers to determine cleartext passwords via a rainbow-table approach...

openEngine 2.0 'id' Blind SQL Injection vulnerability

Advisory: openEngine 2.0 'id' Blind SQL Injection vulnerability Advisory ID: SSCHADV2011-019 Author: Stefan Schurtz Affected Software: Successfully tested on openEngine 2.0 100226 Vendor URL: http://www.openengine.de/ Vendor Status: informed CVE-ID: - ========================== Vulnerability...

CVE-2011-2483

cryptblowfish before 1.1, as used in PHP before 5.3.7 on certain platforms, PostgreSQL before 8.4.9, and other products, does not properly handle 8-bit characters, which makes it easier for context-dependent attackers to determine a cleartext password by leveraging knowledge of a password hash...