399 matches found
[IVIZ-08-005] IBM Lenovo BIOS Plain Text Password Disclosure
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ----------------------------------------------------------------------- iViZ Security Advisory 08-005 25/08/2008 - ----------------------------------------------------------------------- iViZ Techno Solutions Pvt. Ltd. http://www.ivizsecurity.com -...
Pre News Manager <= 1.0 (index.php id) SQL Injection Vulnerability
Exploit for unknown platform in category web applications ================================================================== Pre News Manager = 1.0 index.php id SQL Injection Vulnerability ================================================================== \ /\ \ / | \ \ | / \ // / | \ | \ \ Y...
eggblog40-sql.txt
Author: GiReX mySite: girex.altervista.org Date: 27/03/2008 - 1/04/2008 Added exploit for str0ke CMS: eggBlog 4.0 Site: eggblog.net Bug: SQL Injection cookie vars Type: 1 - Admin/User Authentication Bypass Bug2: Blind SQL Injection same vars-query Type: Password retrieve exploit Var :...
EggBlog 4.0 - SQL Injection
Author: GiReX mySite: girex.altervista.org Date: 27/03/2008 - 1/04/2008 Added exploit for str0ke CMS: eggBlog 4.0 Site: eggblog.net Bug: SQL Injection cookie vars Type: 1 - Admin/User Authentication Bypass Bug2: Blind SQL Injection same vars-query Type: Password retrieve exploit Var :...
ImageAlbum Remote SQL Injection Vulnerabilities
ImageAlbum Remote SQL Injection Vulnerabilities ------------------------------------------------------------------------- Product: ImageAlbum Version: Latest 2.0.0b2, others not tested Vendor: http://imagealbum.sourceforge.net/ Date: 01/10/08 - Introduction ImageAlbum is a web application written...
faqmaster-multi.txt
Security Advisory - - FAQMasterFlexPlus multiple vulnerabilities - --------------------------------------------------------------- Product: FAQMasterFlexPlus Version: Latest version is affected, other not tested Vendor: http://www.netbizcity.com Affected by: Cross-Site Scripting & SQL injection...
[Full-disclosure] FAQMasterFlexPlus multiple vulnerabilities
Security Advisory - - FAQMasterFlexPlus multiple vulnerabilities - --------------------------------------------------------------- Product: FAQMasterFlexPlus Version: Latest version is affected, other not tested Vendor: http://www.netbizcity.com Affected by: Cross-Site Scripting & SQL injection...
PHPMyRing <= 4.2.0 (view_com.php) Remote SQL Injection Exploit
No description provided by source. Title: PHPMyRing's viewcom.php Remote SQL injection Exploit Vendor: phpmyring webiste : http://phpmyring.sourceforge.net/ Version : = 4.2.0 Severity: Critical Discovered by: Simo64 simo64atmorxorg Exploit writting by: Simo Ben youssef simoatmorxorg Discovered: 0...
PHPMyRing 4.2.0 - 'view_com.php' SQL Injection
Title: PHPMyRing's viewcom.php Remote SQL injection Exploit Vendor: phpmyring webiste : http://phpmyring.sourceforge.net/ Version : Exploit writting by: Simo Ben youssef Discovered: 09 Aout 2006 Published : 10 Aout 2006 MorX Security Research Team http://www.morx.org Details: vulnerable code on...
finjanPass.txt
Plain text password in backup file Finjan Appliance 5100/8100 NG The Version 8.3.5 is affected. In the new console function backup and restore the passwords are saved as plain text. The Finjan Appliance uses a Firebird database. The backup saves the database as text file. Samba and FTP passwords...
[Full-disclosure] [SECURITY] Plain text password in Finjan Appliance 5100/8100 NG backup file
Plain text password in backup file Finjan Appliance 5100/8100 NG The Version 8.3.5 is affected. In the new console function backup and restore the passwords are saved as plain text. The Finjan Appliance uses a Firebird database. The backup saves the database as text file. Samba and FTP passwords...
ASPThai.Net Guestbook <= 5.5 (Auth Bypass) SQL Injection Exploit
No description provided by source. !/usr/bin/perl SQL Injection Exploit for ASPThai.Net Guestbook = 5.5 And possible higher could not find a site to test it on This exploit shows the username of the administrator and the password In plain text Bug Found by muderskillz Coded by Zodiac Shouts to...
ASPThai.Net Guestbook 5.5 - Authentication Bypass
ASPThai.Net Guestbook 5.5 - Authentication Bypass !/usr/bin/perl SQL Injection Exploit for ASPThai.Net Guestbook new or die; $cookiejar = HTTP::Cookies-new; $xpl-agent'g00ns'; $xpl-cookiejar$cookiejar; $res = $xpl-post $Server.'checkuser.asp', Content = 'txtUserName' = '' or...
TheServer clear text password
We were able to read the server.ini file It may contain sensitive information like clear text passwords. This flaw is known to affect TheServer. SPDX-FileCopyrightText: 2003 Michel Arboi Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective rig...
[Full-disclosure] ELSA Lancom Router Discloses the Administrator Password to Remote Users
It is reported that the default configuration allows a remote user to connect to the router via port 80 with a web browser and obtain the remote access password, which is apparently stored in clear text. The remote user can also change the router's configuration and can remotely upgrade the...
DSL-504T.txt
Device: CUSTOMER=DLinkEU MODEL=DSL-504T Version: only tested with VERSION=V1.00B01T16.EU.20040217 Bugs: i remote firmware upgrade without password ii config retrieval without password Exploitation: remote Date: 26/05/2005 Status: vendor not contacted Workaround: disable remote web management...
Low security hole affecting Mentor's ADSLFR4II router
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 I've found a number of low risk issues with Mentor's ADSLFR4II router. I initially spoke to them on the 20th July, passing them full details of my findings on the 21st of July. I then emailed them again on the 4th of August asking for an update and...
p2pShareSpy.txt
--------------------- Application: --------------------- P2P Share Spy 2.2 and probably prior versions --------------------- Introduction: --------------------- Vendor: Rebrand Software http://www.rebrandsoftware.com/ Vendor Description: P2P Share Spy can search the Internet/world for computers...
Nortel VPN Client Issue: Clear-text password stored in memory
Nortel VPN Client Issue: Clear-text password stored in memory Summary: NTA Monitor have discovered a password disclosure issue in the Nortel Windows VPN client: The Nortel client stores the password in an obfuscated form in the Windows registry, but it also stores the unencrypted password in...
Fedora Core 2 : kdelibs-3.2.2-10.FC2 (2004-548)
Tue Dec 14 2004 Than Ngo 6:3.2.2-10.FC2 - apply the patch to fix Konqueror Window Injection Vulnerability 142510 CVE-2004-1158, Thanks to KDE security team - Security Advisory: plain text password exposure, 142487 thanks to KDE security team - Tue Sep 07 2004 Than Ngo 6:3.2.2-9.FC2 - add patch to...