CVE-2021-31539

Wowza Streaming Engine before 4.8.8.01 in a default installation has cleartext passwords stored in the conf/admin.password file. A regular local user is able to read usernames and passwords...

Wowza Media Systems Streaming Engine 安全漏洞

Wowza Media Systems Streaming Engine is a suite of streaming media server software from Wowza Media Systems, USA. A security vulnerability exists in Wowza Streaming Engine 4.8.5 and earlier versions. The vulnerability stems from a plaintext password stored in the conf/admin.password file. An...

Improper access control

TFT Gallery 0.10 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the admin password file and obtain password hashes via a direct request to admin/passwd...

CVE-2006-1412

TFT Gallery 0.10 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the admin password file and obtain password hashes via a direct request to admin/passwd...