2809 matches found
Woltlab Burningboard Addon Kleinanzeigenmarkt SQL Injection Exploit
No description provided by source. !/usr/bin/perl -w Woltlab Burningboard Addon Kleinanzeigenmarkt SQL Injection Exploit Exploit by fred777 full np stuff 3 Greez to all teh l33t sh1t like : Core.am Back2hack.cc Free-hack.com fred777.de Usage: exploit.pl page userid Example: perl exploit.pl...
Wbb3 - Blind SQL Injection Vulnerability
No description provided by source. !/usr/bin/perl -w use strict; use LWP::Simple; $| = 1; print q ----------------------------------------------- Wbb3 Blind Sql Injection Injection in Announce Plugin Kleinanzeigen Markt Coded By Molli use: ano.pl url user id Announce Catid Google:...
SMF Mod Member Awards 1.0.2 - Blind SQL Injection Exploit
No description provided by source. ------------------------------------------------------------------------- SMF Component Member Awards Blind SQL-injection Vulnerability ------------------------------------------------------------------------- author: eLwaux thanks: mailbrush, antichat.ru,...
Important: Red Hat Security Advisory: cfme security, bug fix, and enhancement update
Updated cfme packages that fix several security issues, multiple bugs, and add one enhancement are now available for Red Hat CloudForms 3.0. The Red Hat Security Response Team has rated this update as having Important security impact. Common Vulnerability Scoring System CVSS base scores, which gi...
CFME: Default salt value in miq-password.rb
lib/util/miq-password.rb in Red Hat CloudForms 3.0 Management Engine CFME before 5.2.4.2 uses a hard-coded salt, which makes it easier for remote attackers to guess passwords via a brute force attack...
oclHashcat v1.2 - GPGPU-based Multi-hash Cracker
oclHashcat is a GPGPU-based multi-hash cracker using a brute-force attack implemented as mask attack, combinator attack, dictionary attack, hybrid attack, mask attack, and rule-based attack. This GPU cracker is a fusioned version of oclHashcat-plus and oclHashcat-lite. GPU Driver requirements: NV...
CVE-2013-0173
Foreman before 1.1 uses a salt of "foreman" to hash root passwords, which makes it easier for attackers to guess the password via a brute force attack...
CVE-2013-0173
Foreman before 1.1 uses a salt of "foreman" to hash root passwords, which makes it easier for attackers to guess the password via a brute force attack...
CVE-2013-0173: Undefined Security Weakness
Foreman before 1.1 uses a salt of "foreman" to hash root passwords, which makes it easier for attackers to guess the password via a brute force attack...
PT-2014-2427
Name of the Vulnerable Software and Affected Versions Foreman versions prior to 1.1 Description The issue makes it easier for attackers to guess the root password via a brute force attack because a static salt of "foreman" is used to hash root passwords. Recommendations For versions prior to 1.1,...
Parallels Plesk Panel 12.x Key Disclosure
While auditing the source code for Parallels Plesk Panel 12.x on Linux I noticed the following feature that leads to leakage of the '/etc/psa/private/secretkey'-file in md5 format to non-authenticated users. Parallels responded that the 16byte 'secretkey' should provide sufficient entropy for thi...
CVE-2014-0083 rubygem-net-ldap: SSHA passwords generated by the net-ldap Ruby gem use a weak salt
The Ruby net-ldap gem before 0.11 uses a weak salt when generating SSHA passwords...
CVE-2013-2179
X.Org xdm 1.1.10, 1.1.11, and possibly other versions, when performing authentication using certain implementations of the crypt API function that can return NULL, allows remote attackers to cause a denial of service NULL pointer dereference and crash by attempting to log into an account whose...
Fedora 20 : salt-0.17.1-1.fc20 (2013-19438)
Update to bugfix release 0.17.1. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C...
[SECURITY] Fedora 20 Update: salt-0.17.1-1.fc20
Salt is a distributed remote execution system used to execute commands and query data. It was developed in order to bring the best solutions found in the world of remote execution together and make them better, faster and more malleable. Salt accomplishes this via its ability to handle larger loa...
MariaDB 'COM_CHANGE_USER' Command Insecure Salt Generation Security Bypass Vulnerability
MariaDB is prone to a security bypass vulnerability. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mariadb:mariadb";...
CVE-2013-4437
Unspecified vulnerability in salt-ssh in Salt aka SaltStack 0.17.0 has unspecified impact and vectors related to "insecure Usage of /tmp."...
PYSEC-2013-26
The default configuration for salt-ssh in Salt aka SaltStack 0.17.0 does not validate the SSH host key of requests, which allows remote attackers to have unspecified impact via a man-in-the-middle MITM attack...
