Linux User Account Activity Add User to Group (via Splunk): audit (USER_CHAUTHTOK)

Binary data 710029.prm...

Linux User Account Activity Delete User (via Splunk): audit (DEL_USER, deleting user entries)

Binary data 710039.prm...

Linux User Account Activity Change Password (via Splunk): usermod, plain

Binary data 710015.prm...

Netscape Messenging Server User Account Enumeration

Binary data 1788.prm...

Linux User Account Activity Delete User (via Splunk): userdel, plain

Binary data 710016.prm...

Windows User Account Activity Delete User (via Splunk)

Binary data 710005.prm...

Linux User Account Activity Create User (via Splunk): audit (USER_MGMT)

Binary data 710045.prm...

Windows User Account Activity Add User to Group (via Splunk)

Binary data 710002.prm...

Netegrity IdentityMinder Web Edition 5.6 - Management Interface Cross-Site Scripting

Netegrity IdentityMinder Web Edition 5.6 - Management Interface Cross-Site Scripting source: https://www.securityfocus.com/bid/10645/info Netegrity IdentityMinder is a tool designed for the Microsoft Windows platform to manage and maintain users and user accounts. The tool supports a web based...

Netegrity IdentityMinder Web Edition 5.6 - Null Byte Cross-Site Scripting

source: https://www.securityfocus.com/bid/10645/info Netegrity IdentityMinder is a tool designed for the Microsoft Windows platform to manage and maintain users and user accounts. The tool supports a web based interface for creating and removing users in multi-user environments. It has been...

Horde-IMP: Input validation vulnerability

Background Horde-IMP is the Internet Messaging Program. It is written in PHP and provides webmail access to IMAP and POP3 accounts. Description Horde-IMP fails to properly sanitize email messages that contain malicious HTML or script code. Impact By enticing a user to read a specially crafted...

phpx324.txt

PHPX 3.2.4 http://www.phpx.org Versions Affected: PHPX 2.x - 3.2.4 Type of bug: Session Hi-jacking/Admin Access via Cookies Impact: Ability to steal another users account Found-by: HelloWorld Ryan Wray Vendor: Notified Table Of Contents ===================== 1 The Program 2 The Problem 3 The Proo...

CVE-2004-0041

The modauthshadow module 1.4 and earlier does not properly enforce the expiration of a user account and password, which could allow remote authenticated users to bypass intended access restrictions...

CVE-2004-0041

The modauthshadow module 1.4 and earlier does not properly enforce the expiration of a user account and password, which could allow remote authenticated users to bypass intended access restrictions...

CVE-2004-0041

The CVE-2004-0041 issue affects mod_auth_shadow (versions 1.4 and earlier). The root cause is improper enforcement of account/password expiration, allowing remote authenticated users to bypass access restrictions. Documents from multiple sources (SUSE, Debian DSA-421, Debian security notes, and O...

CVE-2003-0983

Cisco Unity on IBM servers is shipped with default settings that should have been disabled by the manufacturer, which allows local or remote attackers to conduct unauthorized activities via 1 a "bubba" local user account, 2 an open TCP port 34571, or 3 when a local DHCP server is unavailable, a...

CVE-2003-1457

Auerswald COMsuite CTI ControlCenter 3.1 creates a default "runasositron" user account with an easily guessable password, which allows local users or remote attackers to gain access...

Apache 1.3.x < 2.0.48 mod_userdir - Remote Users Disclosure

/ m00-apache-w00t.c Apache 1.3.-2.0.48 remote users disclosure exploit by m00 Security. Proof-of-Concept edition This tool scans remote hosts with httpd apache and disclosure information about existens users accounts via wrong default configuration of moduserdir default apache module. Then attemp...

Netscape 7.02 Client Detection Tool plug-in buffer overrun

Advisory name ============= Netscape 7.02 Client Detection Tool plug-in buffer overrun Affected software ================= Netscape 7.02 for Windows Problem description =================== Netscape 7.02 and probably earlier versions contains Client Detection Tool plug-in that handles...

consroot.exp

Hi there, here is a fully automated script for getting a root shell using a normal user account and remote-console acces. The Script was written by me based on an article from phrack.com article 53 - hacking forth by mudge ---snip--- --- consroot.exp " puts "\twhere MODE is one of:" puts "\t\tT =...