CVE-2023-38307

Webmin 2.021 contains a Stored XSS in Users and Groups when adding a new user and injecting payload into the real name. Root cause is tied to insufficient protection of the web page structure, enabling an attacker with authenticated access to execute script in victims’ browsers. Exploitation deta...

Exploiting Windows 2008 Group Policy Preferences: получение некоторых паролей из AD

Active Directory в Windows 2008 содержит такую Group Policy Preferences как "Local Users and Groups". При создании юзеров из AD в этом пункте, компьютеры, для которых создаются эти юзеры, скачивают файл с AD и находят там нового юзера и его пароль, который необходимо создать у себя локально. В...

Default credentials

system-tools-backends before 2.6.0-1ubuntu1.1 in Ubuntu 8.10, as used by "Users and Groups" in GNOME System Tools, hashes account passwords with 3DES and consequently limits effective password lengths to eight characters, which makes it easier for context-dependent attackers to successfully condu...

CVE-2008-6792

system-tools-backends before 2.6.0-1ubuntu1.1 in Ubuntu 8.10, as used by "Users and Groups" in GNOME System Tools, hashes account passwords with 3DES and consequently limits effective password lengths to eight characters, which makes it easier for context-dependent attackers to successfully condu...

Information disclosure

The TRUSTEDSYSTEMSECURITY function in the SAP RFC Library 6.40 and 7.00 before 20061211 allows remote attackers to verify the existence of users and groups on systems and domains via unspecified vectors, a different vulnerability than CVE-2006-6010. NOTE: This information is based upon a vague...

CVE-2001-0102

"Multiple Users" Control Panel in Mac OS 9 allows Normal users to gain Owner privileges by removing the Users & Groups Data File, which effectively removes the Owner password and allows the Normal user to log in as the Owner account without a password...

MacOS_encryption.txt

Subject: MacOS system encryption algorithm To: [email protected] The encryption algorithm in MacOS system is simple and the password can be easily decoded. Password is stored in Users & Groups Data File in Preferences folder. Offset is different on each system and depends on Users & Group...

CVE-1999-1543

MacOS uses weak encryption for passwords that are stored in the Users & Groups Data File...

Apple Mac OS 8 8.6 - Weak Password Encryption

source: https://www.securityfocus.com/bid/519/info The encryption algorithm in MacOS system is simple and the password can be easily decoded. Password is stored in Users & Groups Data File in Preferences folder. Offset is different on each system and depends on Users & Groups configuration, but i...