Asterisk 1.8.x - SIP INVITE Request User Enumeration

source: https://www.securityfocus.com/bid/47676/info Asterisk is prone to a user-enumeration weakness. An attacker may leverage this issue to harvest valid usernames, which may aid in brute-force attacks. This issue affects Asterisks 1.8. The following request is available: INVITE sip:192.168.2.1...

Asterisk 1.8.x SIP User Enumeration

Asterisk, sip response permit username identification through use INVITE Author: francesco.tornieri "At" verona-wireless.net Summary: Sip responses permit user identification Release Date: 01/05/2011 Criticality level: Low Impact: Information leak Software: Asterisk 1.8.x tested 1.8.3.2...

WordPress User Enumeration

+Exploit Title: Wordpress Abuse of Functionality Vulnerability +Created By: ^Xecuti0n3r + Date : 23.04.2011 + Hour : 13:37 PM + E-mail : xecuti0n3ryahoo.com Abuse of Functionality WASC-42:- Login Username enumeration is possible in Wordpress using a functionality provided by Wordpress itself ;...

Xerox WorkCentre User Enumeration (SNMP)

This module will do user enumeration based on the Xerox WorkCentre present on the network. SNMP is used to extract the usernames. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Xerox WorkCentr...

EggAvatar for vBulletin 3.8.x - SQL Injection

EggAvatar for vBulletin 3.8.x - SQL Injection !/usr/bin/env perl use LWP::UserAgent; sub banner print "\n"; print " DSecurity \n"; print "\n"; print " Email:dsecurity.vnatgmail.com \n"; print "\n"; if@ARGVnew; $ua-agent"DSecurity"; $ua-cookiejar; sub login@ my $username=shift; my $password=shift;...

TOTVS ERP Microsiga Protheus User Enumeration

DCA-2011-0002 Discussion - DcLabs Security Research Group advises about following vulnerabilityies: Software - TOTVS ERP Microsiga Protheus Vendor Product Description - Portuguese - Software de Gestão - TOTVS A TOTVS é uma empresa de software, inovação, relacionamento e suporte à gestão, líder...

User Enumeration

Security auditing tests performed on a Jira Bug Issue and Project Tracking Software locally running instance shown that at least two vulnerabilities regarding User Enumeration were found within the software. Case 1: Logged In Whenever a logged user accesses the Url...

User Enumeration

Security auditing tests performed on a Jira Bug Issue and Project Tracking Software locally running instance shown that at least two vulnerabilities regarding User Enumeration were found within the software. Case 1: Logged In Whenever a logged user accesses the Url...

User Enumeration

Security auditing tests performed on a Jira Bug Issue and Project Tracking Software locally running instance shown that at least two vulnerabilities regarding User Enumeration were found within the software. Case 1: Logged In Whenever a logged user accesses the Url...

Windows Gather Logged On User Enumeration (Registry)

This module will enumerate current and recently logged on Windows users. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Windows Gather Logged On User Enumeration Registry', 'Description' = %q...

[ACM, Ariadne Content Manager] unauth. SQL injection + user enumeration

Hi sec-folks, I recently discuss with Ariadne team to public disclose two new different vulnerabilities found in Ariadne Content Manager ACM. As the name says, ACM is an enterprise solution for content management mainly used by big private and public companies and institutions. This is the site o...

EimsCMS V3. 7 a very tasteless of vulnerability-vulnerability warning-the black bar safety net

| EimsCMS V3. 7 0day Default background: admin/login. asp Default database: data/eimscms. mdb Vulnerability file: admin/checklogin. asp --- " Response. Write "" Response. Write "" Response. Write "verify login" Response. Write "" Response. Write "" '-------------------------------------------- Di...

SAP BusinessObjects User Bruteforcer

This module attempts to bruteforce SAP BusinessObjects users. The dswsbobje interface is only used to verify valid credentials for CmcApp. Therefore, any valid credentials that have been identified can be leveraged by logging into CmcApp. This module requires Metasploit:...

SAP BusinessObjects User Enumeration

This module simply attempts to enumerate SAP BusinessObjects users. The dswsbobje interface is only used to verify valid users for CmcApp. Therefore, any valid users that have been identified can be leveraged by logging into CmcApp. This module requires Metasploit: https://metasploit.com/download...

iDisk User Enumeration

Binary data 5679.prm...

CVE-2010-3195

Unspecified vulnerability in IBM DB2 9.1 before FP9, 9.5 before FP6, and 9.7 before FP2 on Windows Server 2008 allows attackers to cause a denial of service trap via vectors involving "special group and user enumeration."...

CVE-2010-3195

Unspecified vulnerability in IBM DB2 9.1 before FP9, 9.5 before FP6, and 9.7 before FP2 on Windows Server 2008 allows attackers to cause a denial of service trap via vectors involving "special group and user enumeration."...

CVE-2010-3195: Undefined Security Weakness

Unspecified vulnerability in IBM DB2 9.1 before FP9, 9.5 before FP6, and 9.7 before FP2 on Windows Server 2008 allows attackers to cause a denial of service trap via vectors involving "special group and user enumeration."...

oracle-enum-users NSE Script

Attempts to enumerate valid Oracle user names against unpatched Oracle 11g servers this bug was fixed in Oracle's October 2009 Critical Patch Update. Script Arguments oracle-enum-users.sid the instance against which to attempt user enumeration tns.sid See the documentation for the tns library...

domino-enum-users NSE Script

Attempts to discover valid IBM Lotus Domino users and download their ID files by exploiting the CVE-2006-5835 vulnerability. Script Arguments domino-enum-users.path the location to which any retrieved ID files are stored domino-enum-users.username the name of the user from which to retrieve the I...