89 matches found
CVE-2012-2743
Revelation 0.4.13-2 and earlier does not iterate through SHA hashing algorithms for AES encryption, which makes it easier for context-dependent attackers to guess passwords via a brute force attack...
CVE-2012-2742
Revelation 0.4.13-2 and earlier uses only the first 32 characters of a password followed by a sequence of zeros, which reduces the entropy and makes it easier for context-dependent attackers to crack passwords and obtain access to keys via a brute-force attack...
CVE-2012-2743
Revelation 0.4.13-2 and earlier does not iterate through SHA hashing algorithms for AES encryption, which can enable context-dependent attackers to guess passwords through brute force. Affected component/file: the password hashing/crypto path in Revelation; root cause is lack of SHA algorithm ite...
CVE-2012-2742
Revelation 0.4.13-2 and earlier uses only the first 32 characters of a password followed by a sequence of zeros, which reduces the entropy and makes it easier for context-dependent attackers to crack passwords and obtain access to keys via a brute-force attack...
CVE-2012-2742
The vulnerability (CVE-2012-2742) affects Revelation password manager, specifically versions 0.4.13-2 and earlier. The root cause is that the software uses only the first 32 characters of a password and then pads with zeros, reducing entropy. This can make context-dependent brute-force attacks mo...
CVE-2012-2743
Revelation 0.4.13-2 and earlier does not iterate through SHA hashing algorithms for AES encryption, which makes it easier for context-dependent attackers to guess passwords via a brute force attack...
Debian: Security Advisory (DSA-2365-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
ZTE ZXDSL 831IIV7.5.0a_Z29_OV - Multiple Vulnerabilities
Exploit Title: ZTE ZXDSL 831IIV7.5.0aZ29OV Multiple vulnerabilities Date: 28 / 10 / 2011 . Authors: Mehdi Boukazoula ; Ibrahim Debeche . Software Link with patch : Version: v 831IIV7.5.0aZ29OV Tested on: v 831IIV7.5.0aZ29OV, May Affect all ZTE routers !! Description : 1 - Authentication bypass +...
CVE-2011-3727
DokuWiki 2009-12-25c allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by lib/tpl/index.php and certain other files...
Users File Suit Against Apple Over iPhone Tracking
A pair of Apple customers has filed a lawsuit against the company, alleging that Apple is invading their privacy by collecting location data about iPhone and iPad users without their knowledge. The suit follows the revelation last week by security researchers that Apple is collecting and storing...
Personal.Net Portal Multiple Vulnerabilities
Exploit for asp platform in category web applications ============================================ Personal.Net Portal Multiple Vulnerabilities ============================================ Title : Personal.Net Portal Multiple Vulnerabilities Affected Version : Personal.Net Portal Version 2.8.1...
Month Of Abysssec Undisclosed Bugs - Personal.Net Portal
''' | / |/ \ /\ | | | | \ | \ / | | | | / \ | | | | | | | |/| | | | |/ /\ | | | | | | | | || / \ || | | | || ||// \/|/ ''' Abysssec Inc Public Advisory Title : Personal.Net Portal Multiple Vulnerabilities Affected Version : Personal.Net Portal Version 2.8.1 Discovery : www.Abysssec.com Vendor...
Personal.Net Portal - Multiple Vulnerabilities
''' | / |/ \ /\ | | | | \ | \ / | | | | / \ | | | | | | | |/| | | | |/ /\ | | | | | | | | || / \ || | | | || ||// \/|/ ''' Abysssec Inc Public Advisory Title : Personal.Net Portal Multiple Vulnerabilities Affected Version : Personal.Net Portal Version 2.8.1 Discovery : www.Abysssec.com Vendor...
Personal.Net Portal - Multiple Vulnerabilities
Personal.Net Portal - Multiple Vulnerabilities ''' | / |/ \ /\ | | | | \ | \ / | | | | / \ | | | | | | | |/| | | | |/ /\ | | | | | | | | || / \ || | | | || ||// \/|/ ''' Abysssec Inc Public Advisory Title : Personal.Net Portal Multiple Vulnerabilities Affected Version : Personal.Net Portal...
Left 4 Dead Stats 1.1 - SQL Injection
Left 4 Dead Stats 1.1 - SQL Injection ---------------------------------- Left 4 Dead Stats SQL Injection Vulnerability Author: Sora Contact: vhr95zw at hotmail dot com Website: http://greyhathackers.wordpress.com/ Google Dork: "In your dreams, script kiddies." VULNERABILITY DESCRIPTION: Left 4 De...
openSUSE Security Update : opera (opera-366)
Opera 9.63 fixes the following security problems : - Manipulating text input contents can allow execution of arbitrary code - HTML parsing flaw can cause Opera to execute arbitrary code. - Long hostnames in file: URLs can cause execution of arbitrary code. - Script injection in feed preview can...
Opera Web Browser Multiple Vulnerabilities - Dec08 (Windows)
The host is installed with Opera web browser and is prone to multiple Vulnerabilities. OpenVAS Vulnerability Test $Id: secpodoperamultvulndec08win.nasl 6519 2017-07-04 14:08:14Z cfischer $ Opera Web Browser Multiple Vulnerabilities - Dec08 Windows Authors: Chandan S Copyright: Copyright c 2008...
CVE-2008-5326
The CVE-2008-5326 issue affects IBM Rational ClearQuest (Maintenance Tool) for Windows, specifically 7.0.0 before 7.0.0.4 and 7.0.1 before 7.0.1.3. The vulnerability allows local users to obtain (1) user and (2) database passwords by using a password revealer utility on a field containing a serie...
CVE-2007-6161
This CVE (CVE-2007-6161) affects index.php in Tilde CMS 4.x and earlier, where a specific value in a search action can disclose the path of sensitive information. In the sources, the vulnerability is described as a path-disclosure issue via a search parameter, with a CVSS v2 base score of 5.0 (Me...
