1146 matches found
BlogTorrent <= 0.92 Remote Password Disclosure Exploit
Exploit for unknown platform in category web applications ====================================================== BlogTorrent 14ae696abdca1688dd577fe486c3981f331457b0d7 Password crypt in md5 - d7b82821fe725305bded2fab9e91ed1e0e6fd93bee LazyCrsATGMailDOTcom - pjphemATmyboxDOTit FREE RAFA! FREE RAFA...
wordpress1512.txt
GulfTech Security Research June 28th, 2005 Vendor : WordPress URL : http://wordpress.org/ Version : WordPress 1.5.1.2 && Earlier Risk : Multiple Vulnerabilities Description: WordPress is a very popular personal publishing platform aka blog software, and is used by everyone from celebrities, to...
CVE-2005-2069
pamldap and nssldap, when used with OpenLDAP and connecting to a slave using TLS, does not use TLS for the subsequent connection if the client is referred to a master, which may cause a password to be sent in cleartext and allows remote attackers to sniff the password...
CVE-2002-1949
CVE-2002-1949 affects Iomega NAS A300U Admin Web Page, where credentials are transmitted in cleartext over the network, enabling remote password sniffing. Connected docs corroborate the issue and provide limited remediation guidance: IBM bulletin notes remediations for Jazz Foundation products (u...
Ultimate PHP Board <= 1.9.6 GOLD users.dat Password Decryptor
Exploit for unknown platform in category web applications ============================================================= Ultimate PHP Board = 1.9.6 GOLD users.dat Password Decryptor ============================================================= !/usr/bin/perl Passwords Decrypter for UPB = 1.9.6...
CVE-2004-1861
CVE-2004-1861 relates to Invision NetSupport School Pro, which uses a weak encryption algorithm to encrypt passwords, enabling local users to obtain passwords. The available documents state the affected product and the underlying issue (weak encryption) but do not specify the exact vulnerable com...
CVE-2005-1062
Kerio’s administration protocol in Kerio WinRoute Firewall <= 6.0.10, Kerio Personal Firewall <= 4.1.2, and Kerio MailServer
CVE-2001-1436
The CVE concerns the Dallas Semiconductor iButton DS1991, where an incorrect password yields predictable values, enabling dictionary attacks by anyone with physical access. Affected: DS1991 device. The issue stems from password handling that allows predictable outputs, impacting confidentiality, ...
CVE-2001-1476
CVE-2001-1476: SSH implementations prior to 2.0 using RC4 with the disallow NULL passwords option are vulnerable to remote session replay that can reveal parts of user passwords via modified attempts and the login message behavior. Root cause is a flaw in session handling under these conditions, ...
CVE-2002-1353
Affected software : LocalWEB2000 HTTP server 2.1.0. Vulnerability : Passwords are stored in plain text under the web document root in the file users.lst, enabling remote access to passwords via a direct request to users.lst. Impact : Confidentiality of passwords is partially compromised as inform...
CVE-2005-0787
Wine 20050211 and earlier creates temp files with world readable permissions and predictable file names, which allows local users to obtain sensitive information, such as passwords...
Default Password (forgot) for 'super' Account
The account 'super' on the remote host has the password 'forgot'. An attacker may use it to gain further privileges on this system. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. account = "super"; password = "forgot"; include'deprecatednasllevel.inc'; include'compat.inc'; if description...
CVE-2004-0838
Lexar Safe Guard for JumpDrive Secure 1.0 stores the password insecurely in memory using XOR encryption, which allows local users to read the password directly from the device and access the password protected part of the drive...
CVE-2004-0838
CVE-2004-0838 affects Lexar Safe Guard for JumpDrive Secure 1.0. The issue is that the password is stored insecurely in memory using XOR encryption, allowing a local user to read the password directly from the device and access the password-protected area. The NVD metrics indicate a local attack ...
CVE-2004-1497
Web Forums Server 1.6 and 2.0 Power Pack stores passwords in plaintext in the Username.ini file, which allows local users to gain privileges...
CVE-2004-1429
The CVE-2004-1429 entry applies to ArGoSoft FTP 1.4.2.4 and earlier, where there is no limit on password entry attempts. This disclosure indicates that remote attackers could perform brute-force password guesses against the FTP service, potentially compromising accounts. The connected records con...
CVE-2005-0288
The change password functionality in Bottomline Webseries Payment Application does not require the old password when users enter a new password, which could allow remote authenticated users to change other users' passwords...
Spectrum Cash passwords weak encryption
Passwords are limited in character set and length and are sored with symbol substitution encryption...
