334 matches found
Discuz!3.0-3.2版本的通杀xss存储漏洞（需开始直播功能）
简要描述： 这个必须得高危啊！！！！！！！！！！！ 来个雷劈可好？ 详细说明： 小白不会审计代码 然后咱们就直接进入主题吧！ discuz3.0-3.2有个功能叫直播的。实习版主就能开启哈 接着咱们就用admin帐号先把一个帖子弄成直播！ 接着。我们用新注册的用户。。咳咳。得等两分钟。再能发话哈 然后用等待的时间去进行弄exp 弄成base16的 点击发表 呵呵。弹窗了 漏洞证明： 来。接着 discuz 3.1版本测试...
CVE-2013-6181
EMC Watch4Net before 6.3 stores cleartext polled-device passwords in the installation repository, which allows local users to obtain sensitive information by leveraging repository privileges...
SDCMS somewhere stored xss can hijack administrator-vulnerability warning-the black bar safety net
SDCMS somewhere storage typexss, you can cross into the background directly hijack the administrator The problem or in the short message. Before SDCMS short message exists atxsscan be directly hijack any given user, the Modify bug, but not fix completely, this time to a more ruthless, directly...
Design/Logic Flaw
The WiFi component in Apple iOS before 5 stores WiFi credentials in an unspecified file, which makes it easier for remote attackers to obtain sensitive information via a crafted application...
CVE-2010-4311
Free Simple Software 1.0 stores passwords in cleartext, which allows context-dependent attackers to obtain sensitive information...
CVE-2006-5982
SeleniumServer FTP Server 1.0, and possibly earlier, stores user passwords in plaintext in the Servers directory, which allows attackers to obtain passwords by reading the file. NOTE: the provenance of this information is unknown; details are obtained from third party sources...
CVE-2006-2522
Dayfox Blog 2.0 and earlier stores user credentials in edit/slogusers.txt under the web document root with insufficient access control, which allows remote attackers to gain privileges...
CVE-2005-2227
Softiacom wMailserver 1.0 stores passwords in plaintext in the Darsite\MAILSRV\Admin key, which allows local users to gain administrator privileges...
Software602 602Pro LAN SUITE 2003 - Sensitive User Information Storage
Software602 602Pro LAN SUITE 2003 - Sensitive User Information Storage source: https://www.securityfocus.com/bid/8700/info A problem with the storage of user credentials has been identified in Software602 602Pro LAN SUITE 2003. Because of this, an attacker may be able to gain access to potentiall...
Mailtraq 2.1.0.1302 - User Password Encoding
Mailtraq 2.1.0.1302 - User Password Encoding source: https://www.securityfocus.com/bid/7923/info It has been reported that Mailtraq does not securely store passwords. Because of this, an attacker may have an increased chance at gaining access to clear text passwords. !/usr/bin/perl $Password =...
CVE-2002-0537
The admin.html file in StepWeb Search Engine SWS 2.5 stores passwords in links to manager.pl, which allows remote attackers who can access the admin.html file to gain administrative privileges to SWS...
Fortres4-analysis.txt
Fortres 4.0, An Overview. By: FrostByte S/I Date: April 11, 2000 ----------------------------- Introduction: This is my first formal document, so please excuse the crudity of the wording and grammar. This document is soley for the purpose of informing individuals of a flaw within a program herin...