CVE-2003-1483

CVE-2003-1483 affects FlashFXP 1.4, where the password storage uses a weak encryption algorithm. The underlying issue is insecure password handling, enabling attackers to decrypt stored passwords and gain access. Public details consistently report this weakness without specifying exploitation sta...

CVE-2007-5576

BEA Tuxedo 8.0 prior to RP392 and 8.1 prior to RP293, and WebLogic Enterprise 5.1 prior to RP174, disclose passwords in cleartext via local commands (cnsbind, cnsunbind, cnsls), enabling physically proximate attackers to obtain sensitive information. Affected components: password handling in the ...

openSUSE 10 Security Update : samba (samba-1830)

Prevent potential crash in winbindd's credential cache handling; 184450. - Fix memory exhaustion DoS; CVE-2006-3403; 190468. - Fix the munlock call, samba.org svn rev r16755 from Volker. - Change the kerberos principal for LDAP authentication to netbios-name$@realm from host/name@realm; 184450. -...

DTSA-60-1 kdebase - kdm allows user logins without a password in some configurations

Bulletin has no description...

Hidden administrator account the three minutes to get-vulnerability warning-the black bar safety net

On the regedit. exe everyone is familiar with, but not to the registry key set permissions, regedt32. exe the biggest advantages is the ability to the registry key set permissions. nt/2 0 0 0/xp account information in the registry HKEYLOCALMACHINE\SAM\SAM key, but in addition to the system user...

Security Master weapon awareness of Rainbow hash table crack tool-vulnerability warning-the black bar safety net

Cross-platform password Cracker Ophcrack the crack speed is simply incredible. In the end how fast? It can be in 1 6 0 seconds to crack“Fgpyyih804423”this password. Many people think that this password is already quite safe. Microsoft's password strength determination tool that the password of th...

For grasping the win2003 system password trick-vulnerability warning-the black bar safety net

The command line to uninstall the win2003 sp1/sp2 %systemroot%$NtServicePackUninstall$\spuninst\spuninst /U Press the unattended mode to remove the service pack. If you use this option, then uninstall SP1, only fatal errors will only display the prompt. /Q Press the quiet mode to remove SP1, this...

CVE-2007-3581

The CVE-2007-3581 entry concerns the Jedox Palo 1.5 client. Vulnerability: the client transmits the password in cleartext over the network, which could allow an attacker to obtain the password by sniffing traffic (as illustrated by the scenario with Excel and the Palo plugin). Impact: potential c...

CVE-2007-1462

The luci server component in conga preserves the password between page loads for the Add System/Cluster task flow by storing the password in the Value attribute of a password entry field, which allows attackers to steal the password by performing a "view source" or other operation to obtain the w...

[Full-disclosure] Quicksilver Social Bookmark plugin v.8F: password in clear text

Quicksilver http://quicksilver.blacktree.com/ is a tool to quickly find/launch/do anything you like with all kind of files, bookmarks etcpp on MacOSX =10.3 There exists a plug-in "Social Bookmarks" to integrate and search del.icio.us bookmarks. In version 8F this plugin logs the username and...

CVE-2006-6964

MailEnable Professional prior to v1.78 contains an information disclosure vulnerability: when an administrator edits a user’s settings, a cleartext user password is exposed in the HTML source. This allows remote authenticated administrators to obtain sensitive information. The affected product/co...

The use of manual detection of the password, ９ ０-invasion ５ website-vulnerability warning-the black bar safety net

The use of manual detection of the password, ９ ０-invasion ５ website In order to further improve our panel of the electronic design, the other night in the SCM experiments smothering overtime, has been debugging into the wee hours of the three roll call minutes before they succeed．．． Happy ...^^...

CVE-2007-0094

The CVE-2007-0094 entry concerns Sven Moderow GuestBook 0.3a, where sensitive data is stored under the web root with insufficient access control. Remote attackers could directly download the database files gbook97.mdb or gbook.mdb located in ~db/, exposing passwords and other credentials. This vu...

CVE-2006-6229

The CVE-2006-6229 entry affects Codewalkers ltwCalendar (aka PHP Event Calendar) prior to 4.2.1. The underlying issue is that failed login attempts are logged, which could allow an attacker to infer correct passwords from the log file. The available records specify the affected software and the v...

Bait and switch in the image using an administrator account-vulnerability warning-the black bar safety net

Often see some people in the invasion of a Windows 2 0 0 0 or Windows NT after the grandly create an Administrator group of users, it seems that when the administrator is not present generally, today, even contrary to what even the previous of the mind, Share one similar to the RootKit thing, of...

CVE-2006-4798

SQL-Ledger before 2.4.4 stores a password in a query string, which might allow context-dependent attackers to obtain the password via a Referer field or browser history. Affected product/version: SQL-Ledger prior to 2.4.4. Underlying issue: password disclosed in URL/query string. The connected do...

Weak xbiff 2 file permissions

.xbiff2rc is world-readable, making it's possible to retrieve POP3 / IMAP account password...

Track"Warcraft Games"the Trojan of password transmission mode-bug warning-the black bar safety net

Review: If your system does not accidentally infected with a Trojan virus,and unfortunately the game account password or your QQ password has to be others to steal. Then,we identify the virus,if the virus is found in the"stallion"of the"contact information"? If you are lucky, not only can get bac...

Clansys v.1.1 (showid) Remote SQL Injection Exploit

Exploit for unknown platform in category web applications =================================================== Clansys v.1.1 showid Remote SQL Injection Exploit =================================================== Internet Security |...

CVE-2006-1058

CVE-2006-1058 affects BusyBox 1.1.1, where the passwd generation did not use a salt, enabling local password guessing from a stolen password file. The issue is addressed by security advisories and patches in multiple distributions (RHSA-2007:0244; CESA-2007:0244; ELSA-2007-0244; RHSA). Affected p...