LiteForum 2.1.1 sql injection exploit

Exploit for unknown platform in category web applications ===================================== LiteForum 2.1.1 sql injection exploit ===================================== !/usr/bin/perl use LWP::UserAgent; LiteForum 2.1.1 http://www.softtime.ru sql injection exploit work on all mysql versions by...

identd Service UID Association

By using the identd server RFC 1413, it is possible to determine the process owner of the remote service. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include"compat.inc"; ifdescription scriptid14674; scriptversion"1.21";...

CVE-2004-0583

The account lockout functionality in 1 Webmin 1.140 and 2 Usermin 1.070 does not parse certain character strings, which allows remote attackers to conduct a brute force attack to guess user IDs and passwords...

phpBB 2.0.6 - search_id SQL Injection MD5 Hash

phpBB 2.0.6 - searchid SQL Injection MD5 Hash !/usr/bin/perl -w use IO::Socket; PROOF-OF-CONCEPT work only with mysql ver 4.0 work only with post 1 Example: C:\r57phpbb-poc.pl 127.0.0.1 phpBB2 2 2 prepare to connect... + connected prepare to send data... + OK wait for response... + MD5 Hash for...

OpenSSH/PAM timing attack allows remote users identification

Security Advisory @ Mediaservice.net Srl 01, 30/04/2003 Data Security Division Title: OpenSSH/PAM timing attack allows remote users identification Application: OpenSSH-portable = 3.6.1p1 Platform: Linux, maybe others Description: A remote attacker can identify valid users on vulnerable systems, a...

OpenSSHPAM 3.6.1p1 - gossh.sh Remote Users Ident

OpenSSHPAM 3.6.1p1 - gossh.sh Remote Users Ident !/bin/sh OpenSSH " exit 1 Verify the arguments. $ != 2 && usage Variables. USER="$1" HOST="$2" =-=-=-=-=-=-=-=-=-=-=-=-= Expect script functions =-=-=-=-=-=-=-=-=-=-=-=-= Expect script for password. expasswd cat expasswd spawn $SSHCMD expect...

OpenSSH/PAM <= 3.6.1p1 Remote Users Ident (gossh.sh)

No description provided by source. !/bin/sh OpenSSH = 3.6.p1 - User Identification. Nicolas Couture - [email protected] Description: -Tells you wether or not a user exist on a distant server running OpenSSH. Usage: -You NEED to have the host's public key before executing this script...

OpenSSH/PAM 3.6.1p1 - 'gossh.sh' Remote Users Ident

!/bin/sh OpenSSH " exit 1 Verify the arguments. $ != 2 && usage Variables. USER="$1" HOST="$2" =-=-=-=-=-=-=-=-=-=-=-=-= Expect script functions =-=-=-=-=-=-=-=-=-=-=-=-= Expect script for password. expasswd cat expasswd spawn $SSHCMD expect password: send '\r' interact EOF Expect script for erro...

OpenSSH/PAM <= 3.6.1p1 Remote Users Ident (gossh.sh)

Exploit for linux platform in category remote exploits ==================================================== OpenSSH/PAM " exit 1 Verify the arguments. $ != 2 && usage Variables. USER="$1" HOST="$2" =-=-=-=-=-=-=-=-=-=-=-=-= Expect script functions =-=-=-=-=-=-=-...

Sun Solaris 2.5.1/2.6/7.0/8/9 Wall - Spoofed Message Origin

// source: https://www.securityfocus.com/bid/6509/info Solaris is the freely available UNIX Operating System variant distributed by Sun Microsystems. The wall client packaged with Solaris makes assumptions about a user's environment when the client is executed. The assumption is made that if the...

CVE-2002-1064

CVE-2002-1064 affects Jana Server 2.x (up to 2.2.1) and 1.4.6 and earlier. The vulnerability arises because the server generates different responses for valid versus invalid usernames, enabling remote attackers to enumerate valid user accounts. The available documents state the existence and impa...

Format string bug in hylafax

Format string bug gives euid uucp...

Несанкционированный доступ в GeekLog &#40;unauthorized access&#41;

Изменив куки можно получить доступ под UID другого пользователя...

ICQ protocol vulnerabilities

It's possible to send message from any UIN...

CVE-2000-0938

Samba SWAT (Web Administration Tool) shipped with Samba 2.0.7 is vulnerable to username enumeration: SWAT returns different error messages for valid vs. invalid usernames, enabling remote attackers to identify valid users on the server. This is evidenced by multiple sources in the CVE ecosystem (...

CVE-1999-0856

CVE-1999-0856 affects Slackware 7.0. The vulnerability arises because remote authentication feedback reveals whether an account exists or is locked by reporting an encryption error, enabling user enumeration. The issue is tied to the login process and causes disclosure of valid user names without...

CVE-1999-0856

login in Slackware 7.0 allows remote attackers to identify valid users on the system by reporting an encryption error when an account is locked or does not exist...

Дыра в EMURL

Возможно обратиться к содержимого любого почтового ящика в системе, т.к. для идентификации пользователя используется основанный на имени идентификатор без пароля...

CVE-1999-0492

The CVE-1999-0492 entry relates to ffingerd version 1.19, where remote attackers can identify users on the target system based on its responses. The connected PT-1999-1171 page confirms the affected software and reiterates the issue, stating that there is no information about a fix in version 1.1...

CVE-1999-0990

The connected PT-1999-1510 entry identifies the vulnerability as affecting gdm (GNOME Display Manager) through error messages emitted when VerboseAuth is enabled. The root cause is verbose authentication error messages that allow an attacker to identify valid users on a system from local access. ...