884 matches found
Einstein <= 1.01 Local Password Disclosure Exploit (asm)
Exploit for unknown platform in category local exploits ======================================================== Einstein ENDM SADD MACRO quotedtext:VARARG EXITM ENDM .data SubKey db "Software\einstein",0 szUser db "username",0 szPass...
CVE-2003-1078
The FTP client for Solaris 2.6, 7, and 8 with the debug -d flag enabled displays the user password on the screen during login...
r57lite211.txt
!/usr/bin/perl use LWP::UserAgent; LiteForum 2.1.1 http://www.softtime.ru sql injection exploit work on all mysql versions by 1dt.w0lf RusH security team http://rst.void.ru --------------------------------------- greets 2: ghc www.ghc.ru Gh0st Security Team http://gst.void.ru heya Ch0ke7 and off...
Phorum 5.0.x - FOLLOW.php SQL Injection
Phorum 5.0.x - FOLLOW.php SQL Injection source: https://www.securityfocus.com/bid/11660/info Reportedly Phorum is affected by a remote SQL injection vulnerability. This issue is due to a failure of the application to properly sanitized user supplied URI input. This issue allows remote attackers t...
ubbthreads.txt
Product: ======== UBB.threads Vendor: ======= UBBCentral http://www.ubbcentral.com/ Versions: ========= I tested it successfull on 3.4.x At Version 3.5 you need to be logged in to perform a search. I didnt tested this version. Problem: ======== Sql-Injection in dosearch.php dosearch.php?Name=' OR...
SAFE TEAM Regulus 2.2 - Custchoice.php Update Your Password Action Information Disclosure
SAFE TEAM Regulus 2.2 - Custchoice.php Update Your Password Action Information Disclosure source: https://www.securityfocus.com/bid/11133/info Regulus is reported prone to an information disclosure vulnerability. It is reported that a specified user/customer password hash is contained in a hidden...
SAFE TEAM Regulus 2.2 - Staffile Information Disclosure
source: https://www.securityfocus.com/bid/11132/info SAFE TEAM Regulus is reported prone to an information disclosure vulnerability. It is reported that any user may make a request for the Regulus 'staffile' file hosted on a target server. This file contains a list of Regulus 'staff' users and...
CVE-2004-0082
The mksmbpasswd shell script mksmbpasswd.sh in Samba 3.0.0 and 3.0.1, when creating an account but marking it as disabled, may overwrite the user password with an uninitialized buffer, which could enable the account with a more easily guessable password...
CVE-2004-0412
Mailman before 2.1.5 allows remote attackers to obtain user passwords via a crafted email request to the Mailman server...
IPSwitch IMail Server 8.1 - Local Password Decryption Utility
IPSwitch IMail Server 8.1 - Local Password Decryption Utility / IpSwitch IMail Server IpSwitch IMail Server uses weak encryption algorithm to encrypt its user passwords. It uses polyalphabetic Vegenere cipher to encrypt its user passwords. This encryption scheme is relatively easy to break. In...
IPSwitch IMail Server <= 8.1 Local Password Decryption Utility
Exploit for unknown platform in category local exploits ============================================================== IPSwitch IMail Server IpSwitch IMail Server uses weak encryption algorithm to encrypt its user passwords. It uses polyalphabetic Vegenere cipher to encrypt its user passwords. Th...
IPSwitch IMail Server 8.1 - Local Password Decryption Utility
/ IpSwitch IMail Server IpSwitch IMail Server uses weak encryption algorithm to encrypt its user passwords. It uses polyalphabetic Vegenere cipher to encrypt its user passwords. This encryption scheme is relatively easy to break. In order to decrypt user password we need a key. IMail uses usernam...
Bugzilla < 2.16.6 / 2.18rc1 Multiple Vulnerabilities (XSS, SQLi, Priv Esc, more)
The remote Bugzilla bug tracking system, according to its version number, is vulnerable to various flaws : - An administrator may be able to execute arbitrary SQL commands on the remote host. - There are instances of information leaks that may let an attacker know the database password under...
ZWS Newsletter & Mailing List Manager
hello , i'm a frenchy boy and excuse me for my bad english... i decover a bug in the newsletter ZWS , http://www.target.com/newsletter/admin.php?f=listuser&uname=test&ulevel=1 with this , you can list all user register in the newsletter with respective password. after u log with a account Admin ,...
CVE-2004-0082
The mksmbpasswd shell script mksmbpasswd.sh in Samba 3.0.0 and 3.0.1, when creating an account but marking it as disabled, may overwrite the user password with an uninitialized buffer, which could enable the account with a more easily guessable password...
Cisco Security Advisory: Cisco Personal Assistant User Password Bypass Vulnerability
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: Cisco Personal Assistant User Password Bypass Vulnerability Document ID: 47765 Revision 1.0 FINAL For Public Release 2004 January 8 17:00 UTC GMT - ----------------------------------------------------------------------- Conten...
Cisco Personal Assistant User Password Bypass Vulnerability
...
CVE-2003-1295
Unspecified vulnerability in xscreensaver 4.12, and possibly other versions, allows attackers to cause xscreensaver to crash via unspecified vectors "while verifying the user-password."...