Squiz Matrix User Enumeration Scanner

This module attempts to enumerate remote users that exist within the Squiz Matrix and MySource Matrix CMS by sending GET requests for asset IDs e.g. ?a=14 and searching for a valid username eg "root" or "test" which is prefixed by a "" in the response. It will also try to GET the users full name ...

krb5-enum-users NSE Script

Discovers valid usernames by brute force querying likely usernames against a Kerberos service. When an invalid username is requested the server will respond using the Kerberos error code KRB5KDCERRCPRINCIPALUNKNOWN, allowing us to determine that the user name was invalid. Valid user names will...

TimeLive <= 4.2.1 Multiple Vulnerabilities - Active Check

TimeLive is prone to multiple vulnerabilities. Copyright C 2011 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

TimeLive Time and Expense Tracking Multiple Vulnerabilities

The host is running TimeLive Time and Expense Tracking and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: secpodtimelivetimeandexpensetrackingmultvuln.nasl 7029 2017-08-31 11:51:40Z teissa $ TimeLive Time and Expense Tracking Multiple Vulnerabilities Authors: Antu Sanadi...

Uronimo - Mobile platform website Hacked by Team Inj3ct0r

Uronimo - Mobile platform website Hacked by Team Inj3ct0r Uronimo - Mobile platform Hacked by Team Inj3ct0r today. They leak the database of site on Pastebin , including Username, Hash Password, emails and Phone Numbers of 1000 users...

NetSaro Enterprise Messenger Server Plaintext Password Storage Vulnerability

NetSaro Enterprise Messenger Server is prone to a security bypass vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Apache "mod_userdir" User Enumeration

Apache with the UserDir directive enabled generates different error codes when a username exists and there is no publichtml directory and when the username does not exist, which could allow remote attackers to determine valid usernames on the server. This module requires Metasploit:...

CVE-2011-3126

WordPress 3.1 before 3.1.3 and 3.2 before Beta 2 allows remote attackers to determine usernames of non-authors via canonical redirects...

CVE-2011-3126

WordPress 3.1 before 3.1.3 and 3.2 before Beta 2 allows remote attackers to determine usernames of non-authors via canonical redirects...

10GB data of law enforcement agencies leaked by #AntiSec

10GB data of law enforcement agencies leaked by AntiSec AntiSec , Lulzsec and Anonymous Hackers once again leak a huge data of 10GB at https://vv7pabmmyr2vnflf.tor2web.org/ , hacked from 70 law enforcement agencies. The leak contain hundreds of compromising email spools, personal information abou...

SIG Sauer - Security Intelligence Group Hacked by LulzaMac

SIG Sauer - Security Intelligence Group Hacked by LulzaMac Nothing is Secure on Internet Now. SIGARMS Academy website Hacked by hacker "LulzaMac". SIGARMS Academy is committed to providing safe, responsible and accurate firearms training and courses which are nationally and internationally...

Enumeration of usernames possible in Jira

We found enumeration of usernames to be possible in Jira 4.3.4 despite the login failure message not revealing whether it was the username or password that was incorrect. After 3 failed login attempts a captcha appears only if the user exists, otherwise not. This allows an attacker to enumerate t...

Enumeration of usernames possible in Jira

We found enumeration of usernames to be possible in Jira 4.3.4 despite the login failure message not revealing whether it was the username or password that was incorrect. After 3 failed login attempts a captcha appears only if the user exists, otherwise not. This allows an attacker to enumerate t...

Enumeration of usernames possible in Jira

We found enumeration of usernames to be possible in Jira 4.3.4 despite the login failure message not revealing whether it was the username or password that was incorrect. After 3 failed login attempts a captcha appears only if the user exists, otherwise not. This allows an attacker to enumerate t...

Trixbox Information Disclosure Vulnerability

The host is running Trixbox and is prone to information disclosure vulnerability. OpenVAS Vulnerability Test $Id: gbtrixboxinfodiscvuln.nasl 7015 2017-08-28 11:51:24Z teissa $ Trixbox Information Disclosure Vulnerability Authors: Sooraj KS Copyright: Copyright c 2011 Greenbone Networks GmbH,...

WPSCAN - WordPress Security & vulnerability Scanner

WPSCAN - WordPress Security & vulnerability Scanner WPScan is a vulnerability scanner which checks the security of WordPress installations using a black box approach. Details Username enumeration from author querystring and location header Weak password cracking multithreaded Version enumeration...

Stevens Institute of Technology database leaked by p0keu for #Antisec

Stevens Institute of Technology database leaked by p0keu for Antisec Stevens Institute of Technology database leaked by Anonymous - p0keu for Antisec on pastebin, the leaks are a MySQL database and a cms database, usernames/passwords, this leak comes from the same source as the 4 random leaks and...

ScriptMafia.com Database Leaked

ScriptMafia.com Database Leaked Unknown hacker seems to be leak the database of one of the biggest nulled script website ScriptMafia.com. Yesterday a pastebin link https://pastebin.com/72xbSGsi come forward with usernames and passwords of thousands of users from ScriptMafia.com . After the hack,...

Mesa Arizona Fraternal Order of Police website hacked, Data exposed !

Mesa Arizona Fraternal Order of Police website hacked, Data exposed ! Anonymous Hackers deface Mesa Arizona Fraternal Order of Police website - . This hack is done for Operation Antisec. The Post a message and All data of Arizona Police on the deface page. Alternate you can see written part on :...

Groupon India Subsidiary Database Published, 300k Affected

Groupon is calling on users of their India subsidiary, Sosasta.com, to change their passwords after the company accidentally published a database containing the usernames and passwords of some 300,000 customers, according to a report from Risky.biz. The database, including plaintext passwords and...