2023 matches found
Jenkins HP Application Automation Tools Plugin Password Encryption Security Weakness
The remote host is using the Jenkins HP Application Automation tools plugin. Nessus was able to remotely access one or more unprotected files in the Jenkins build system and decrypt the HP Application Lifecycle Management password. These passwords are currently encrypted with a known, hard-coded...
DEBIAN-CVE-2013-4496
Samba 3.x before 3.6.23, 4.0.x before 4.0.16, and 4.1.x before 4.1.6 does not enforce the password-guessing protection mechanism for all interfaces, which makes it easier for remote attackers to obtain access via brute-force ChangePasswordUser2 1 SAMR or 2 RAP attempts...
Kentico CMS 7.0.75 - User Information Disclosure
Exploit for asp platform in category web applications This vulnerability is an unprotected page on the site where you can view all current users and usernames. To find out if a Kentico CMS is vulnerable go to http://site.com/CMSModules/Messaging/CMSPages/PublicMessageUserSelector.aspx assuming th...
Kentico CMS 7.0.75 - User Information Disclosure
Exploit Title: Kentico CMS User Enumeration Bug Google Dork: inurl:/CMSPages/logon.aspx -- enumerates several Kentico CMS sites Date: 02-25-2014 Exploit Author: Charlie Campbell and Lyndon Mendoza Vendor Homepage: http://www.kentico.com/ Software Link:...
Design/Logic Flaw
The web interface in Cisco MediaSense does not properly protect the client-server communication channel, which allows remote attackers to obtain sensitive query string or cookie information via unspecified vectors, aka Bug ID CSCuj23344...
CSRF in gadgets plugin
The affected methods are: AddOrRemoveGadgetSpecAction, doAdd AddOrRemoveGadgetSpecAction, doRemove AddOrRemoveGadgetFeedAction, doAddGadgetFeed AddOrRemoveGadgetFeedAction, doRemoveGadgetFeed WhitelistAdminAction, doAddWhitelistUrl WhitelistAdminAction, doRemoveWhitelistUrl RevokeOAuthTokensActio...
ARRIS 2307 Unprotected Console (HTTP)
The remote ARRIS 2307 Web Console is not protected by a password. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CoDeSys Gateway Service Unprotected (SCADA)
Binary data 6715.prm...
CoDeSys Unprotected Gateway Service
Binary data scadacodesysgatewayunpassworded.nbin...
HP Printers Unprotected Access (HTTP)
The remote HP Printer is not protected by a password. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPEPREFIX = "cpe:/o:hp"; ifdescription...
Moxa NPort Unprotected Console (Telnet)
The remote Moxa NPort Telnet Console is not protected by a password. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if description...
JGroups diagnostics service enabled by default with no authentication when a JGroups channel is started
JGroups diagnostics service in JBoss Enterprise Portal Platform before 5.2.2, SOA Platform before 5.3.0, and BRMS Platform before 5.3.0, is enabled without authentication when started by the JGroups channel, which allows remote attackers in adjacent networks to read diagnostics information via a...
OpenDocMan 1.2.6.2 - 3 Vulnerabilities
1 - Unprotected id parameter ----------------------------- In check-in.php the id variable is not filtered so that one can put in additional SQL statements. I have been able to get a UNION SELECT query to run but I do not think it's exploitable because there is a second query that runs with the i...
OpenDocMan 1.2.6.2 SQL Injection / Access Bypass vulnerabilities
OpenDocMan version 1.2.6.2 suffers from remote SQL injection and multiple access bypass vulnerabilities. 1 - Unprotected id parameter ----------------------------- In check-in.php the id variable is not filtered so that one can put in additional SQL statements. I have been able to get a UNION...
Mozilla Firefox Multiple Vulnerabilities - 01 - Mac OS X
Mozilla Firefox is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Report Says Engineer Designed Google Street View with Payload Data Gathering in Mind
Google says it released the full FCC report on Street View consumer privacy allegations to hopefully put the matter to rest. But revelations that the code might have been created with surreptitious data gathering in mind is likely to keep the issue very much alive. An article in today’s Los Angel...
ShopEX 爆路径漏洞
简要描述： shopex 很多的核心文件都需要包含其它的类， 但是都没有保护，可以直接访问 详细说明： shopex 很多的核心文件都需要包含其它的类， 但是都没有保护，可以直接访问， 所以可以报错物理路径! 漏洞证明： shopex 很多的核心文件都需要包含其它的类， 但是都没有保护，可以直接访问， 所以可以报错物理路径! 如： http://www.lpboke.com/core/api/shopapi.php http://www.lpboke.com/core/api/site/2.0/apib2b20cat.php...
Red Hat JBoss Products Multiple Vulnerabilities (status page) - Active Check
Red Hat JBoss products are prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Openedit <= v5.1294 Remote Code Execution Exploit
Exploit for jsp platform in category web applications !/usr/bin/python Openedit = v5.1294 Remote Code Execution Exploit http://net-ninja.net/blog/?p=553 watch http://www.zeitgeistmovie.com/ Explanation: Vuln 1: Admin hash disclosure Vuln 2: Login with the hash Vuln 3: Unprotected file upload...
Openedit 5.1294 Code Execution
!/usr/bin/python Openedit = v5.1294 Remote Code Execution Exploit http://net-ninja.net/blog/?p=553 watch http://www.zeitgeistmovie.com/ Explanation: Vuln 1: Admin hash disclosure Vuln 2: Login with the hash Vuln 3: Unprotected file upload mrme@pluto openedit$ sudo python ./openown.py -p...