3265 matches found
Cisco WebEx Meetings Server User Enumeration Vulnerability
A vulnerability in the web framework of Cisco WebEx Meetings Server could allow an unauthenticated, remote attacker to enumerate valid user accounts. The vulnerability is due to improper sanitization of a returned message. An attacker could exploit this vulnerability by sending crafted URL reques...
Design/Logic Flaw
The OutlookAction Class in Cisco WebEx Meetings Server allows remote attackers to enumerate user accounts by entering crafted URLs and examining the returned messages, aka Bug ID CSCuj81722...
Osueta - A simple Python script to exploit the OpenSSH User Enumeration Timing Attack
Osueta it's a simple Python2 script to exploit the OpenSSH User Enumeration Timing Attack, present in OpenSSH versions 5. and 6.. The script has the ability to make variations of the username employed in the bruteforce attack, and the possibility to establish a DOS condition in the OpenSSH server...
CVE-2013-5423
Summary: CVE-2013-5423 affects IBM Flex System Manager (FSM) and IBM Systems Director in related advisories. The vulnerability allows an unauthenticated or unauthorized attacker to enumerate the list of user accounts in FSM/ISD, which could facilitate brute-force or unauthorized access attempts. ...
Kentico CMS 7.0.75 - User Information Disclosure
No description provided by source. Exploit Title: Kentico CMS User Enumeration Bug Google Dork: inurl:/CMSPages/logon.aspx -- enumerates several Kentico CMS sites Date: 02-25-2014 Exploit Author: Charlie Campbell and Lyndon Mendoza Vendor Homepage: http://www.kentico.com/ Software Link:...
LDAP Injection PoC
No description provided by source. + Vurnerebility: LDAP Injection + Category : Implemented Web exploit + Category : Attack Technique + Author : mc2s3lector + dork : X/o\ + Contact : www.yogyacarderlink.web.id + date : 4-2-10 + biGthank to : Allah SWT,jasakom,KeDai Computerworks,0n3-d4y...
LemonLDAP:NG 0.9.3.1 User Enumeration Weakness and Cross Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/33312/info LemonLDAP:NG is prone to a user-enumeration weakness and a cross-site scripting vulnerability. A remote attacker can exploit the user-enumeration weakness to enumerate valid usernames and then perform brute-for...
symphony cms 2.3 - Multiple Vulnerabilities
No description provided by source. Symphony cms 2.3 multiple vulnerabilities -------------------------------------------------------------------------------------------- 20121017 - Justanotherhacker.com : Symphony cms - Multiple vulnerabilities JAHx122 -...
Novell Teaming 1.0 User Enumeration Weakness and Multiple Cross Site Scripting Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/34531/info Novell Teaming is prone to a user-enumeration weakness and multiple cross-site scripting vulnerabilities. A remote attacker can exploit the user-enumeration weakness to enumerate valid usernames and then perfor...
YourArcadeScript 2.0b1 - Blind SQL Injection
No description provided by source. !/usr/bin/perl use LWP::UserAgent; use HTTP::Request::Common qwPOST; use Getopt::Long; '/ -.- ------------------oOO------OOo----------------- | | | / / / / | | / / / / / / / / / / / | | // // / / / // / // / // | | ///,// /./,/, // | | Security Research...
Red Hat Linux 7.0 Apache Remote Username Enumeration Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/3335/info Versions of Apache webserver shipping with Red Hat Linux 7.0 and possibly other Apache distributions install with a default misconfiguration which could allow remote users to determine whether a give username...
IBM Business Process Manager - User Account Reconfiguration
No description provided by source. Exploit Title: IBM BMPS BPM User account reconfiguration/Privilege Escalation/Information Disclosure Date: 31.01.14 Exploit Author: 0in Software link: http://www-03.ibm.com/software/products/en/business-process-manager-family/ Version: 8.0.1.1 newest versions ca...
HP Tru64 - Remote Secure Shell User Enumeration Exploit
No description provided by source. !/usr/bin/perl use warnings; use strict; Remember: you need to accept ssh key first! use Tie::File; use Fcntl 'ORDONLY'; use Expect; use Time::HiRes qwgettimeofday; tru64-sshenum.pl HP Tru64 Remote Secure Shell user enumeration exploit CVE-2007-2791. Author:...
Omegasoft Insel 7 Authentication Bypass Vulnerability and User Enumeration Weakness
No description provided by source. source: http://www.securityfocus.com/bid/27210/info Omegasoft Insel is prone to an authentication bypass vulnerability and a user-enumeration weakness. An attacker can exploit these issues to obtain sensitive information and gain unauthorized access to the...
Sun Java Web Server 1.1.3/2.0 Servlets Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/1498/info The servlet sunexamples.RealmDumpServlet, which is packaged by Default with Sun's Java Web Server, can be used to discover ACLs and local users on the server. http://javawebserver.com/pservlet.html User: sherwin...
Automattic: User Enumeration and Guessable User Account Attack on WORDPRESS
Hello, I found another bug on https://wordpress.com. Here any hacker can find out all registered users on wordpress.com. Here are the details of the same. How is wordpress.com is working? ============================ 1. You have Reset Password Page --...
proxmox user enumeration vulnerability
No description provided...
[oss-security] CVE request: Proxmox VE < 3.2 user enumeration vulnerability
Hi list, We recently found a vulnerability affecting Proxmox VE 3.2 that allows an unauthenticated user to perform user enumeration. Vendor was contacted and the vulnerability fixed in Proxmox VE 3.2, released on 2014-03-10. References: Proxmox related commits:...
Serv-U multiple security vulnerabilities-vulnerability warning-the black bar safety net
Affected system: serv-u serv-u 1 5. x Description: -------------------------------------------------------------------------------- Serv-U is a widely usedFTP serverprogram. Serv-U 15.1.0.458 prior versions did not verify the user name will return a different response, which can lead to enumerate...
CVE-2012-6452
CVE-2012-6452 affects Axway, specifically the Email Firewall deployment using the Secure Messenger component (vulnerable: 6.5 and earlier on EMF). The issue arises because authentication responses differ depending on whether the username exists, allowing remote attackers to enumerate valid userna...