309 matches found
Design/Logic Flaw
IBM MessageSight 1.x before 1.1.0.0-IBM-IMA-IT01015 does not verify that all of the characters of a password are correct, which makes it easier for remote authenticated users to bypass intended access restrictions by leveraging knowledge of a password substring...
CVE-2014-0924
IBM MessageSight 1.x before 1.1.0.0-IBM-IMA-IT01015 does not verify that all of the characters of a password are correct, which makes it easier for remote authenticated users to bypass intended access restrictions by leveraging knowledge of a password substring...
ecshop绕过原密码校验直接修改用户密码（安全隐患）
简要描述： 最新版本也存在此问题 详细说明： 该漏洞有个前提，需要会员系统整合ucenter 问题出在 user.php $action == 'acteditpassword' $oldpassword = isset$POST'oldpassword' ? trim$POST'oldpassword' : ''; $newpassword = isset$POST'newpassword' ? trim$POST'newpassword' : ''; $userid = isset$POST'uid' ? intval$POST'uid' : $userid; $code =...
Scientific Linux Security Update : xscreensaver on SL4 i386/x86_64
Alex Yamauchi discovered a flaw in the way XScreenSaver verifies user passwords. When a system is using a remote directory service for login credentials, a local attacker may be able to cause a network outage causing XScreenSaver to crash, unlocking the screen. CVE-2007-1859 %NASLMINLEVEL 70300 C...
PHP Hosting Directory 2.0 background verification bypass vulnerability-vulnerability warning-the black bar safety net
PHP Hosting Directory 2.0 program background verification is not strictly, can lead to bypass the password verification sign in the background. Google: "powered by PHP Hosting Directory 2.0" Default background:http://127.0.0.1/admin Use method: Do not need to enter any password, through cookies...
DSA-2096-1 zope-ldapuserfolder - authentication
Bulletin has no description...
CVE-2010-2944
The authenticate function in LDAPUserFolder/LDAPUserFolder.py in zope-ldapuserfolder 2.9-1 does not verify the password for the emergency account, which allows remote attackers to gain privileges...
CVE-2010-0009
Apache CouchDB 0.8.0 through 0.10.1 allows remote attackers to obtain sensitive information by measuring the completion time of operations that verify 1 hashes or 2 passwords...
Mandriva Update for xscreensaver MDKSA-2007:097 (xscreensaver)
Check for the Version of xscreensaver OpenVAS Vulnerability Test Mandriva Update for xscreensaver MDKSA-2007:097 xscreensaver Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or...
gnome security update
CentOS Errata and Security Advisory CESA-2008:0197 An updated gnome-screensaver package that fixes a security flaw is now available for Red Hat Enterprise Linux 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. gnome-screensaver is the GNOME...
Moderate: Red Hat Security Advisory: gnome-screensaver security update
An updated gnome-screensaver package that fixes a security flaw is now available for Red Hat Enterprise Linux 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. gnome-screensaver is the GNOME project's official screen saver program. A flaw was...
[ MDKSA-2007:097 ] - Updated xscreensaver packages fix vulnerability
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDKSA-2007:097 http://www.mandriva.com/security/ Package : xscreensaver Date : May 2, 2007 Affected: 2007.0, 2007.1, Corporate 3.0 Problem Description: A problem with the way xscreensaver verifies user passwords was...
xscreensaver security update
CentOS Errata and Security Advisory CESA-2007:0322-01 An updated xscreensaver package that fixes a security flaw is now available for Red Hat Enterprise Linux 2.1, 3, and 4. This update has been rated as having moderate security impact by the Red Hat Security Response Team. XScreenSaver is a...
CentOS 3 : xscreensaver (CESA-2007:0322)
An updated xscreensaver package that fixes a security flaw is now available for Red Hat Enterprise Linux 2.1, 3, and 4. This update has been rated as having moderate security impact by the Red Hat Security Response Team. XScreenSaver is a collection of screensavers. Alex Yamauchi discovered a fla...
Moderate: Red Hat Security Advisory: xscreensaver security update
An updated xscreensaver package that fixes a security flaw is now available for Red Hat Enterprise Linux 2.1, 3, and 4. This update has been rated as having moderate security impact by the Red Hat Security Response Team. XScreenSaver is a collection of screensavers. Alex Yamauchi discovered a fla...
Skillfully crack open someone ASP Trojan password method-vulnerability warning-the black bar safety net
Crack the objective: to crack a encrypted Asp Trojan login password. Since the Trojan there is no version described, specific also don't know what this Trojan is called what name. Crack idea: the two, with the encrypted password replaces the ciphertext and use the ciphertext and the encryption...
Design/Logic Flaw
Symantec Scan Engine 5.0.0.24, and possibly other versions before 5.1.0.7, uses a client-side check to verify a password, which allows remote attackers to gain administrator privileges via a modified client that sends certain XML requests...
Hack someone else's asp Trojan password method-vulnerability warning-the black bar safety net
If not asp source code, then can be said about crack the code, I have no chance of winning. There are bits in the Ann network training friend said he got a web of privileges, but cannot modify the home page, find where there are already a asp Trojan, but the password is encrypted. Then there is...
