[waraxe-2009-SA#074] - Multiple Vulnerabilities in TorrentTrader Classic 1.09

waraxe-2009-SA074 - Multiple Vulnerabilities in TorrentTrader Classic 1.09 =============================================================================== Author: Janek Vind "waraxe" Date: 15. June 2009 Location: Estonia, Tartu Web: http://www.waraxe.us/advisory-74.html Description of vulnerable...

TorrentTrader Classic 1.09 Multiple Remote Vulnerabilities

Exploit for unknown platform in category web applications ========================================================== TorrentTrader Classic 1.09 Multiple Remote Vulnerabilities ========================================================== waraxe-2009-SA074 - Multiple Vulnerabilities in TorrentTrader...

TorrentTrader Classic 1.09 SQL Injection

waraxe-2009-SA074 - Multiple Vulnerabilities in TorrentTrader Classic 1.09 =============================================================================== Author: Janek Vind "waraxe" Date: 15. June 2009 Location: Estonia, Tartu Web: http://www.waraxe.us/advisory-74.html Description of vulnerable...

TorrentTrader Classic 1.09 - Multiple Vulnerabilities

TorrentTrader Classic 1.09 - Multiple Vulnerabilities waraxe-2009-SA074 - Multiple Vulnerabilities in TorrentTrader Classic 1.09 =============================================================================== Author: Janek Vind "waraxe" Date: 15. June 2009 Location: Estonia, Tartu Web:...

TorrentTrader Classic 1.09 - Multiple Vulnerabilities

waraxe-2009-SA074 - Multiple Vulnerabilities in TorrentTrader Classic 1.09 =============================================================================== Author: Janek Vind "waraxe" Date: 15. June 2009 Location: Estonia, Tartu Web: http://www.waraxe.us/advisory-74.html Description of vulnerable...

Oracle Database password weakness

Added: 05/12/2009 Background Oracle Database is a relational database solution available for multiple platforms. Problem The Oracle Database service has accounts with default or easily guessed passwords, which could allow an attacker to make unauthorized SQL queries. Resolution Set a strong...

Acer notebooks weak passwords

Administrator system account has empty password and password is not reset during initial system account setup...

The MYSQL user is root password is a weak password and a mention of the right method-vulnerability warning-the black bar safety net

In General is to write an ASP or PHP back door, not only very troublesome, but also to guess the site directory, if the other party is not on IIS, that we not no way?? Later, their thinking think of a way, in my test a few sets with the vulnerability of the machines are a success, it will now be ...

VM-Builder weak password

Weak PRNG is used to generate virtual machine root password...

Linksys Router Default Account (HTTP)

The remote Linksys device has its default account no username / SPDX-FileCopyrightText: 2008 Renaud Deraison Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPEPREFIX = "cpe:/o:linksys:...

Retrospect Backup Server Authentication Module Password Hash Weakness (ESA-08-009)

According to its version number, the Authentication Module in the Retrospect Backup Server installed on the remote host uses a weak hash algorithm to hash a user's password, which could allow a remote attacker to gain control of a client's machine. C Tenable Network Security, Inc...

[Full-disclosure] EMC Dantz Retrospect 7 backup Client PlainText Password Hash Disclosure Vulnerability

FGA-2008-16: EMC Dantz Retrospect 7 backup Client PlainText Password Hash Disclosure Vulnerability http://www.fortiguardcenter.com/advisory/FGA-2008-16.html July 20, 2008 -- Affected Vendors: EMC -- Affected Products: EMC Dantz Retrospect 7 backup Client 7.5.116 -- Vulnerability Details: The...

FGA-2008-16: EMC Dantz Retrospect 7 backup Server Authentication Module Weak Password Hash Arithmetic Vulnerability

FGA-2008-16: EMC Dantz Retrospect 7 backup Server Authentication Module Weak Password Hash Arithmetic Vulnerability http://www.fortiguardcenter.com/advisory/FGA-2008-16.html July 20, 2008 -- Affected Vendors: EMC -- Affected Products: EMC Dantz Retrospect Backup Server 7.5.508 -- Vulnerability...

Folder Lock 5.9.5 - Weak Password Encryption Local Information Disclosure

source: https://www.securityfocus.com/bid/30766/info Folder Lock is prone to an information-disclosure vulnerability because it stores credentials in an insecure manner. A local attacker can exploit this issue to obtain passwords used by the application, which may aid in further attacks. Folder...

Vulnerabilities in WordPress

Здравствуйте 3APA3A! Сообщаю вам о найденных мною Abuse of Functionality и Weak Password уязвимостях в WordPress. Abuse of Functionality: В WordPress имеется возможность определения логинов в системе. Уязвимость заключается в том, что при введении верного и неверного логина при неверном пароле...

Microsoft ActiveSync弱口令混淆信息泄露漏洞

BUGTRAQ ID: 25976 CVECAN ID: CVE-2007-5460 Microsoft ActiveSync是用于同步计算机与PDA的应用程序。 ActiveSync设备建立连接口令交换的过程实现上存在漏洞，攻击者可能利用此漏洞获取口令信息。 插入到USB口时设备会使用类似于标准网络接口的连接，获得IP地址后设备会通过RAPI在990/TCP端口初始化与主机的通讯，这个过程也会经历一个小型的握手例程，如果合适的话，会对主机挑战设备PIN或口令。用户提供了主机的PIN/口令后，会通过XOR与E9固定密钥进行混淆，然后通过USB网络连接发送给设备进行验证。...

Default Password (password) for 'root' Account

The account 'root' has the password 'password'. An attacker may use it to gain further privileges on this system. Note that Korenix Jetport installs are known to use these credentials although other hosts are likely to as well as 'password' is reportedly a common password. %NASLMINLEVEL 70300 C...

avast! Antivirus Server Edition Password Setting Weakness

The remote host is running avast! Antivirus Server Edition. The installed version of this software reportedly does not ask for a password even if one is set. A local attacker may be able to leverage this issue to bypass authentication and manipulate settings of the affected application. C Tenable...

System safety SA weak passwords bring security risks-vulnerability warning-the black bar safety net

The presence of the Microsoft SQL Server SA of the weak password vulnerability of the computer has been cyber attackers favor of one of the objects, through this loophole, you can easily get the Server Management permission, and thus a threat to network and data security. As a network...

Barracuda Arbitrary File Disclosure + Command Execution

Title: Barracuda Arbitrary File Disclosure + Command Execution Severity: High Sensitive Information Disclosure Date: 01 August 2006 Version Affected: Barracuda Spam Firewall version 3.3.01.001 to 3.3.03.053 Discovered by: Greg Sinclair Credits: Matthew Hall Update: 07 August 2006 Updated by: PATz...