PrivateTunnel Client 2.7.0 (x64) - Local Credentials Disclosure

PrivateTunnel Client v2.7.0 x64 Local Credentials Disclosure After Sign out Exploit Tested on Windows Windows 7 64bit, English Vendor Homepage @ https://www.privatetunnel.com Date 14/09/2016 Bug Discovery by: Yakir Wizman https://www.linkedin.com/in/yakirwizman http://www.black-rose.ml Viktor Min...

FreeBSD : asterisk -- RTP Resource Exhaustion (5cb18881-7604-11e6-b362-001999f8d30b)

The Asterisk project reports : The overlap dialing feature in chansip allows chansip to report to a device that the number that has been dialed is incomplete and more digits are required. If this functionality is used with a device that has performed username/password authentication RTP resources...

Octopus Deploy Login Utility

This module simply attempts to login to an Octopus Deploy server using a specific username and password. It has been confirmed to work on version 3.4.4 This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require...

WordPress RB Agency Plugin Local File Disclosure Vulnerability

WordPress RB Agency Plugin is prone to local file disclosure vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

WIN-911 7.17.00 Insecure File Permissions / Plaintext Password Storage

Title: WIN-911 - Insecure File Permissions EoP CWE Class: CWE-276: Incorrect Default Permissions Date: 05/09/2016 Vendor: Win911 Product: WIN-911 Type: Alarm Notification Software Version: V7.17.00 Download URL: through Rockwell Automation downloads:...

MySQL 5.5.45 (x64) - Local Credentials Disclosure

Exploit for windows platform in category local exploits MySQL 5.5.45 64bit Local Credentials Disclosure Tested on Windows Windows Server 2012 R2 64bit, English Vendor Homepage @ https://www.mysql.com Date 05/09/2016 Bug Discovered by Yakir Wizman https://www.linkedin.com/in/yakirwizman...

FortiClient SSLVPN 5.4 - Credentials Disclosure

''' Title : Extracting clear text passwords from running processesFortiClient CVE-ID : none Product : FortiClient SSLVPN Service : FortiTray.exe Affected : =5.4 Impact : Critical Remote : No Website link : http://forticlient.com/ Reported : 31/08/2016 Authors : Viktor Minin https://1-33-7.com...

SQL Injection Vulnerability in the Parameter txtUsername in the Login.aspx Page of Penta Software Education Management System

Pangda software education management system is .net development for vocational education WEB teaching management system. There is a SQL injection vulnerability in this product, the vulnerability URL is: http://target/NewPage/Login.aspx The vulnerability parameter is txtUsername and the type is PO...

Multiple IP-Cameras Information Disclosure Vulnerability (Aug 2016) - Active Check

The IP-Camera is prone to an information disclosure vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Gratipay: Username Restriction is not applied for reserved folders

Hi, This issue is same as 128121 reported by a5tronaut. He reported some of the usernames for restriction and you applied check only for those usernames. I think username restriction should applied for all the usersnames, those are used for a directory or a link in gratipay. a5tronaut mentioned t...

Gratipay: Username can be used to trick the victim on the name of www.gratipay.com

Hi, I found a vulnerability in www.gratipay.com Steps to reproduce: 1. Login in gratipay using any social account which do not provide the email to gratipay. 2. In my case i use twiiter.com, i got the message from gratipay that no Email id is associated with this account. 3. Click on settings and...

SQL Injection Vulnerability in Labthink DSS-MAX Decision Support System

Labthink Innovation is a leading digital workshop solution provider in China, with a high market share in aerospace DNC/MDC/MES, and is also the main integrator of CIMCO in China. Labthink DSS-Max is a DNC/MDC production decision support system, which is mainly used for machine tool data collecti...

Gratipay: Usernames ending in .json are not restricted

Desciption: Username in .json is not restricted. disallowed .json is allowed in username restriction URL : https://gratipay.com/robots.txt User-agent: Disallow: /.json Disallow: /on/ POC URL: https://gratipay.com/karthic.json/ and you will end up at my profile page...

Vanderbilt IP-Camera CCPW3025-IR / CVMW3025-IR Credential Disclosure

Advisory Information ======================================== Title : Vanderbilt IP-Camera CCPW3025-IR + CVMW3025-IR Remote Credentials Disclosure Vendor Homepage : https://is.spiap.com/ Remotely Exploitable : Yes Tested on Camera types : CCPW3025-IR , CVMW3025-IR Product References :...

JVC IP Camera VN-T216VPRU - Credentials Disclosure

Exploit for cgi platform in category web applications 1. Advisory Information ======================================== Title : JVC IP-Camera VN-T216VPRU Remote Credentials Disclosure Vendor Homepage : http://pro.jvc.com/ Remotely Exploitable : Yes Tested on Camera types : VN-T216VPRU Product...

JVC IP-Camera VN-T216VPRU - Credentials Disclosure

JVC IP-Camera VN-T216VPRU - Credentials Disclosure 1. Advisory Information ======================================== Title : JVC IP-Camera VN-T216VPRU Remote Credentials Disclosure Vendor Homepage : http://pro.jvc.com/ Remotely Exploitable : Yes Tested on Camera types : VN-T216VPRU Product...

Vanderbilt IP-Camera CCPW3025-IR CVMW3025-IR - Credentials Disclosure

Vanderbilt IP-Camera CCPW3025-IR CVMW3025-IR - Credentials Disclosure 1. Advisory Information ======================================== Title : Vanderbilt IP-Camera CCPW3025-IR + CVMW3025-IR Remote Credentials Disclosure Vendor Homepage : https://is.spiap.com/ Remotely Exploitable : Yes Tested on...

Honeywell IP-Camera HICC-1100PT Credential Disclosure

Advisory Information ======================================== Title : Honeywell IP-Camera HICC-1100PT Unauthenticated Remote Credentials Disclosure Vendor Homepage : https://www.asia.security.honeywell.com Remotely Exploitable : Yes Tested on Camera types : HICC-1100PT Reference :...

Honeywell IP-Camera HICC-1100PT - Credentials Disclosure

Advisory Information ======================================== Title : Honeywell IP-Camera HICC-1100PT Unauthenticated Remote Credentials Disclosure Vendor Homepage : https://www.asia.security.honeywell.com Remotely Exploitable : Yes Tested on Camera types : HICC-1100PT Reference :...

Siemens IP-based CCTV Cameras Credentials Disclosure Vulnerability (SSA-284765) - Active Check

Siemens IP-based CCTV camera devices are prone to a credentials disclosure vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...