Nmap NSE net: oracle-enum-users

Attempts to enumerate valid Oracle user names against unpatched Oracle 11g servers this bug was fixed in Oracle's October 2009 Critical Patch Update. SYNTAX: userdb: The filename of an alternate username database. passdb: The filename of an alternate password database. tns.sid: specifies the Orac...

Nmap NSE net: ms-sql-brute

Performs password guessing against Microsoft SQL Server ms-sql. SYNTAX: userdb: The filename of an alternate username database. passdb: The filename of an alternate password database. mssql.timeout: How long to wait for SQL responses. This is a number followed by 'ms' for milliseconds, 's' for...

Nmap NSE net: finger

Attempts to retrieve a list of usernames using the finger service. OpenVAS Vulnerability Test $Id: gbnmapfingernet.nasl 5499 2017-03-06 13:06:09Z teissa $ Autogenerated NSE wrapper Authors: NSE-Script: Eddie Bell NASL-Wrapper: autogenerated Copyright: NSE-Script: The Nmap Security Scanner...

Nmap NSE net: http-userdir-enum

Attempts to enumerate valid usernames on web servers running with the moduserdir module or similar enabled. The Apache moduserdir module allows user-specific directories to be accessed using the http://example.com/user/ syntax. This script makes http requests in order to discover valid user-...

Researcher Creates Database of 35 Million Identifiable Google Profiles

A Dutch researcher has discovered that he could convert most of the data within Google Profiles into a single SQL statement and expose, among other data, the usernames and Gmail addresses of some 35,000,000 people. The researcher, Matthijs R. Koot explained in a blogpost that there is an xml file...

USN-1140-1: PAM vulnerabilities

Marcus Granado discovered that PAM incorrectly handled configuration files with non-ASCII usernames. A remote attacker could use this flaw to cause a denial of service, or possibly obtain login access with a different users username. This issue only affected Ubuntu 8.04 LTS. CVE-2009-0887 It was...

CVE-2010-0216

authenticateadsetupfinished.cfm in MediaCAST 8 and earlier allows remote attackers to discover usernames and cleartext passwords by reading the error messages returned for requests that use the UserID parameter...

Hackers release usernames, passwords of several FOX.com affiliate employees !

Hackers release usernames, passwords of several FOX.com affiliate employees ! Hackers Post complete Usernames/Password of Fox.com users at :...

Simple Web Content Management System 1.21 SQL Injection

------------------------------------------------------------------------ Software................Simple Web Content Management System 1.21 Vulnerability...........Authentication Bypass/SQL Injection Download................http://www.allscoop.com/ Release Date............1/31/2011 Tested...

Facebook Awarded More Than $ 360 Million In Damages Against Spammer

Facebook's security team have reason to celebrate as they have claimed another scalp in the ongoing fight against spammers on the social network. A post on Facebook's Security page announced that this week a federal court has awarded the firm a whopping $360,500,000 in statutory damages and issue...

Camtron CMNC-200 IP Camera - Undocumented Default Accounts

Finding 4: Undocumented Default Accounts CVE: CVE-2010-4233 The CMNC-200 IP Camera has undocumented default accounts on its Linux operating system. These accounts can be used to login via the cameras telnet interface, which cannot be normally disabled. The usernames and passwords are listed below...

Joomla Grants SQL Injection

========================================================= Joomla Component Joomla! 1.6 b13 grants SQL Injection ========================================================= +Title : Joomla Component Joomla! 1.6 b13 grants SQL Injection +Software : Joomla! 1.6 b13 +Vendor :...

BroadWorks - Call Detail Record Security Bypass

BroadWorks - Call Detail Record Security Bypass source: https://www.securityfocus.com/bid/44597/info BroadWorks is prone to a security-bypass vulnerability. An attacker can exploit this issue to bypass certain security restrictions and to obtain sensitive information. Successful exploits will...

PYSEC-2010-21

FTPServer.py in pyftpdlib before 0.2.0 does not increment the attemptedlogins count for a USER command that specifies an invalid username, which makes it easier for remote attackers to obtain access via a brute-force attack...

Authentication Bypass Vulnerability in phpLiterAdmin

High-Tech Bridge SA Security Research Lab has discovered vulnerability in phpLiterAdmin which could be exploited to bypass authentication mechanism and gain unauthorized access to the application. 1 Authentication Bypass Vulnerability in phpLiterAdmin The vulnerability exists due to a design erro...

Suspicious Characters in FTP User Name (CVE-2009-0542; CVE-2010-2453)

File Transfer Protocol is a popular protocol. FTP server may ask connecting users for their usernames and passwords. While the official FTP specification allows all characters in user names certain FTP servers fail to properly parse FTP usernames that contain special characters, most notably...

Joomla JPodium SQL Injection

Joomla Component jpodium SQL Injection Vulnerability Author : Fl0riX Bug Researchers Greez: KEDESIGN , Sakkure , All CW And All My Friends. Name : Joomla comjpodium Bug Type : SQL injection Infection : Admin Login Bilgileri Alinabilir. Demo Vuln :...

CVE-2009-4905

Multiple cross-site request forgery CSRF vulnerabilities in index.php in Acc Statistics 1.1 allow remote attackers to hijack the authentication of administrators for requests that change 1 passwords, 2 usernames, and 3 e-mail addresses...

CVE-2009-4905

Multiple cross-site request forgery CSRF vulnerabilities in index.php in Acc Statistics 1.1 allow remote attackers to hijack the authentication of administrators for requests that change 1 passwords, 2 usernames, and 3 e-mail addresses...

Ubuntu Update for libpam-opie vulnerability USN-955-2

Ubuntu Update for Linux kernel vulnerabilities USN-955-2 OpenVAS Vulnerability Test $Id: gbubuntuUSN9552.nasl 7965 2017-12-01 07:38:25Z santu $ Ubuntu Update for libpam-opie vulnerability USN-955-2 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH,...