CVE-2006-2436

WebSphere Application Server 5.0.2 or any earlier cumulative fix stores admin and LDAP passwords in plaintext in the FFDC logs when a login to WebSphere fails, which allows attackers to gain privileges...

CVE-2006-2430

CVE-2006-2430 affects IBM WebSphere Application Server: versions 5.0.2 and earlier, 5.1.1 and earlier, and 6.0.2 up to 6.0.2.7. The vulnerability arises because user credentials are recorded in plaintext in addNode.log, which can allow attackers to gain privileges. Supported connected documents c...

CVE-2006-2430

IBM WebSphere Application Server 5.0.2 and earlier, 5.1.1 and earlier, and 6.0.2 up to 6.0.2.7 records user credentials in plaintext in addNode.log, which allows attackers to gain privileges...

CVE-2006-0561

Cisco Secure Access Control Server ACS 3.x for Windows stores ACS administrator passwords and the master key in the registry with insecure permissions, which allows local users and remote administrators to decrypt the passwords by using Microsoft's cryptographic API functions to obtain the...

Intel wireless service s24evmon.exe confidential information disclosure.

S24EvMon.exe is a service which is part at least of the Intel PROset/Wireless software. This application is provided by Intel in order to support intel Wireless Devices based on Spectrum 24 chipsets. This service uses a shared memory section which is created without the proper security descriptor...

CVE-2006-2223

RIPd in Quagga 0.98 and 0.99 before 20060503 does not properly implement configurations that 1 disable RIPv1 or 2 require plaintext or MD5 authentication, which allows remote attackers to obtain sensitive information routing state via REQUEST packets such as SEND UPDATE...

CVE-2006-2223

RIPd in Quagga 0.98 and 0.99 before 20060503 does not properly implement configurations that 1 disable RIPv1 or 2 require plaintext or MD5 authentication, which allows remote attackers to obtain sensitive information routing state via REQUEST packets such as SEND UPDATE...

CVE-2006-2223

Removed by vendor...

[Full-disclosure] Quagga RIPD unauthenticated route table broadcast

Arhont Ltd - Information Security Advisory by: Konstantin V. Gavrilenko http://www.arhont.com Arhont ref: arh200604-1 Advisory: Quagga RIPD unauthenticated route table broadcast Class: design bug? Version: Tested on Quagga suite v0.98.5 v0.99.3Gentoo, 2.6.15 Model Specific: Other versions might...

Blackorpheus ClanMemberSkript 1.0 - SQL Injection

Blackorpheus ClanMemberSkript 1.0 - SQL Injection Internet Security | |---==============================================================---| title: Blackorpheus ClanMemberSkript 1.0 remote sql injection release: 2006-04-16 author: snatcher snatcher at gmx.ch country: switzerland |+| application:...

Blackorpheus ClanMemberSkript 1.0 Remote SQL Injection Exploit

Exploit for unknown platform in category web applications ============================================================== Blackorpheus ClanMemberSkript 1.0 Remote SQL Injection Exploit ============================================================== Internet Security |...

Blackorpheus ClanMemberSkript 1.0 Remote SQL Injection Exploit

No description provided by source. ?php / |---==============================================================---| | /\¯\ /\¯\ | | \ \ \ \ \ \ | | / \ / \ / \ \ \ / / \ \ \ / /\ \ | | /, /\ /\ /\ \ \ \ /\ /\ \ \ \ /\ /\ \ / | | //\ \ \ / \\ \ \\ \ \ \\ \ | | // ////////...

SQL Server password the password table-a vulnerability warning-the black bar safety net

SQL Server 1 4 3 3-port Data transmission most of it is plaintext, this includes IP address, connected user name, success and fail messages as a result, it is easy to use Sniffer Sniffer on the network segment within the SQL Server related information, get the username and IP, it is the differenc...

Design/Logic Flaw

PasswordSafe 3.0 beta, when running on Windows before XP, uses a weak random number generator C++ rand function during generation of the database encryption key, which makes it easier for attackers to decrypt the database and steal passwords by generating keys for all possible rand seed values an...

CVE-2006-1378

CVE-2006-1378 concerns PasswordSafe 3.0 beta running on Windows versions prior to XP, where the database encryption key is generated using the weak C++ rand() RNG. The underlying root cause is the predictability of rand(), which enables an attacker to enumerate possible seed values and, via a kno...

CVE-2006-1378

PasswordSafe 3.0 beta, when running on Windows before XP, uses a weak random number generator C++ rand function during generation of the database encryption key, which makes it easier for attackers to decrypt the database and steal passwords by generating keys for all possible rand seed values an...

Microsoft Internet Explorer createTextRange() vulnerability

Overview Microsoft Internet Explorer IE fails to properly handle the createTextRange DHTML method, possibly allowing a remote, unauthenticated attacker to execute arbitrary code. Description DHTML, TextRanges, and the createTextRange Method According to Microsoft:Dynamic HTML DHTML is built on an...

CVE-2005-4696

The Microsoft Wireless Zero Configuration system WZCS stores WEP keys and pair-wise Master Keys PMK of the WPA pre-shared key in plaintext in memory of the explorer process, which allows attackers with access to process memory to steal the keys and access the network...

CVE-2006-0314

PDFdirectory before 1.0 stores sensitive data in plaintext, which allows remote attackers to obtain arbitrary users' passwords by direct queries to the database, possibly via one of the SQL injection vulnerabilities...

CVE-2006-0314

PDFdirectory before 1.0 stores sensitive data in plaintext, which allows remote attackers to obtain arbitrary users' passwords by direct queries to the database, possibly via one of the SQL injection vulnerabilities...