399 matches found
Oracle Linux 6 : 389-ds-base (ELSA-2012-0997)
The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2012-0997 advisory. 1.2.10.2-18 - Resolves: Bug 830001 - unhasheduserpassword visible after changing password -- patch 0020 disallows users' direct modify on...
Canon Printer DoS / Secret Disclosure
The below 3 issues have been tested and verified working on the following Canon Printer models May affect more, but this is all I was able to test against: MG3100, MG5300, MG6100, MP495, MX340, MX870, MX890, MX920 1 CVE-2013-4613: Canon printers do not require a password for the administrative...
JBoss AS Administrative Console Password Disclosure
Product: Embedded Jopr - JBoss AS Administration Console Vendor: Red Hat Middleware, LLC Version: JBoss AS Resources Datasources 2. Select Datasource 3. View page source 4. Find input type="password" 5. "value=" will contain the database password. 6. Dump database. Vendor Notified: Yes Vendor...
Zyxel NBG5715 Local admin privileges bypass Vulnerability
Exploit for linux/mips platform in category local exploits ================================================================================================== | | | | / || '|\ \ /\ / /\ / /| '|\ \ /\ / /\ / /| '|\ \ /\ / /\ / / | | || | \ V V / Vendor: ZyXEL Products Affected: NBG5715...
Netgear WNR1000 - Authentication Bypass
Exploit for hardware platform in category web applications The web server running on the affected devices is subject to an authentication bypass issue that allows attacker to gain administrative access, circumventing existing authentication mechanisms. Strictly speaking, the web server skips...
Important: Red Hat Security Advisory: JBoss Enterprise Web Platform 5.2.0 update
Updated JBoss Enterprise Web Platform 5.2.0 packages that fix multiple security issues, various bugs, and add several enhancements are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability...
RHEL 5 : JBoss EAP (RHSA-2013:0192)
Updated JBoss Enterprise Application Platform 5.2.0 packages that fix multiple security issues, various bugs, and add several enhancements are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having important security impact. Common...
[WiFi Password Decryptor] Free Wireless Password Recovery Software
| WiFi Password Decryptor is the FREE software to instantly recover Wireless account passwords stored on your system. --- It automatically recovers all type of Wireless Keys/Passwords WEP/WPA/WPA2 etc stored by Windows Wireless Configuration Manager. For each recovered WiFi account, it displays...
Anonymous leaks database from Israeli Musical Act Magazine site #OpIsrael
This Morning Anonymous member with twitter handle @OsamaTheGod leaked a huge database from server of Israeli Musical Act Magazine act.co.il. The leaked database posted on public note website and includes users ID, username, password in clear text, IP address and phone numbers. Hacker posted data ...
Xivo 1.2 arbitrary File Download-vulnerability warning-the black bar safety net
Xivo 1.2 Arbitrary File Download under root privileges Author : Mr. Un1k0d3r Developer: https://wiki.xivo.fr Download address: https://wiki.xivo.fr/index.php/XiVO1.1-Gallifrey/InstallXiVOWithCD Effect version: 1.2 last patched version Test version: Linux xivo 2.6.32-5-4 8 6 Test using: Using the...
Windows 8 Security flaw : Logon Passwords Stores in Plain Text
Windows 8 is the first operating system from Microsoft to support alternative non-biometric authentication mechanisms such as Picture Password and PIN. A vulnerability discovered by a password security vendor - "Passcape" in Microsoft's Windows 8 operating system that it saves a log on password i...
CentOS Update for 389-ds-base CESA-2012:0997 centos6
The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...
meetOne Insecure Transport / Information Disclosure
SUMMARY meetOne, currently in Germany in the Top 50 social apps of the iTunes Store, has multiple vulnerabilities and has been found guilty of stealing Apple iPhone address books and abusing the e-mail addresses there for spam. Apple Inc. is ignoring the data theft and it seems even supressing...
UBUNTU-CVE-2012-2746
389 Directory Server before 1.2.11.6 aka Red Hat Directory Server before 8.2.10-3, when the password of a LDAP user has been changed and audit logging is enabled, saves the new password to the log in plain text, which allows remote authenticated users to read the password...
CVE-2012-2746
389 Directory Server before 1.2.11.6 aka Red Hat Directory Server before 8.2.10-3, when the password of a LDAP user has been changed and audit logging is enabled, saves the new password to the log in plain text, which allows remote authenticated users to read the password...
389-ds-base security update
1.2.10.2-18 - Resolves: Bug 830001 - unhasheduserpassword visible after changing password -- patch 0020 disallows users' direct modify on unhasheduserpassword 1.2.10.2-17 - Resolves: Bug 830001 - unhasheduserpassword visible after changing password -- patch 0019 fixes deref issue. 1.2.10.2-16 -...
crowd.properties password entry in plain text
The entry application.password in JIRA's crowd.properties is in plain text, it needs to create an option to use encrypted or hashed value...
Low: Red Hat Security Advisory: jbosscache security update
An update for JBoss Enterprise Application Platform 5.1.2 that fixes one security issue is now available from the Red Hat Customer Portal. The Red Hat Security Response Team has rated this update as having low security impact. A Common Vulnerability Scoring System CVSS base score, which gives a...
Mambo CMS 4.6.5 Denial Of Service / Disclosure
Larry W. Cashdollar 1/2/2012 http://vapid.dhs.org About Mambo: "Mambo is a full-featured content management system that can be used for everything from simple websites to complex corporate applications." http://mambo-code.org 1. Clear text password/crypt: Mambo stores mysql database password in...