EUVD-2016-0406

Malware in sbrugna...

EUVD-2016-6861

Malware in sbrugna...

EUVD-2017-4354

Malware in sbrugna...

CVE-2017-1378

IBM Spectrum Protect 7.1 and 8.1 formerly Tivoli Storage Manager disclosed unencrypted login credentials to Vmware vCenter in the application trace output which could be obtained by a local user. IBM X-Force ID: 126875...

Design/Logic Flaw

IBM Spectrum Protect 7.1 and 8.1 formerly Tivoli Storage Manager disclosed unencrypted login credentials to Vmware vCenter in the application trace output which could be obtained by a local user. IBM X-Force ID: 126875...

PT-2017-13095

Name of the Vulnerable Software and Affected Versions IBM Spectrum Protect versions 7.1 through 8.1 Description The issue allows a local user to obtain unencrypted login credentials to Vmware vCenter from the application trace output. Recommendations For IBM Spectrum Protect versions 7.1 through...

CVE-2017-1378: Insufficiently Protected Credentials

IBM Spectrum Protect 7.1 and 8.1 formerly Tivoli Storage Manager disclosed unencrypted login credentials to Vmware vCenter in the application trace output which could be obtained by a local user. IBM X-Force ID: 126875...

CVE-2017-12817: Missing Encryption of Sensitive Data

In Kaspersky Internet Security for Android 11.12.4.1622, some of the application trace files were not encrypted...

PT-2017-2934

Name of the Vulnerable Software and Affected Versions Kaspersky Internet Security for Android version 11.12.4.1622 Description The issue is related to the lack of encryption for some application trace files. This could allow a remote attacker to disclose confidential information. Recommendations...

Design/Logic Flaw

IBM Tivoli Storage Manager HSM for Windows displays the encrypted Tivoli Storage Manager password in application trace output if the password access option is prompt and the password is changed...

CVE-2016-5918: Exposure of Sensitive Information to an Unauthorized Actor

IBM Tivoli Storage Manager HSM for Windows displays the encrypted Tivoli Storage Manager password in application trace output if the password access option is prompt and the password is changed...

Design/Logic Flaw

The Tivoli Storage Manager TSM password may be displayed in plain text via application trace output while application tracing is enabled...

CVE-2016-0371

The CVE-2016-0371 issue affects IBM Tivoli Storage Manager family where the password can be disclosed in plain text via application tracing output when tracing is enabled. IBM security bulletins list affected products/versions across several components: IBM Tivoli Storage Manager Client/API (and ...

CVE-2016-0371

The Tivoli Storage Manager TSM password may be displayed in plain text via application trace output while application tracing is enabled...

CVE-2016-0371: Undefined Security Weakness

The Tivoli Storage Manager TSM password may be displayed in plain text via application trace output while application tracing is enabled...

Input validation

IBM Tivoli Storage Manager for Space Management aka Spectrum Protect for Space Management 6.3.x before 6.3.2.6, 6.4.x before 6.4.3.3, and 7.1.x before 7.1.6, when certain dsmsetpw tracing is configured, allows local users to discover an encrypted password by reading application-trace output...

CVE-2016-5927

IBM Tivoli Storage Manager for Space Management aka Spectrum Protect for Space Management 6.3.x before 6.3.2.6, 6.4.x before 6.4.3.3, and 7.1.x before 7.1.6, when certain dsmsetpw tracing is configured, allows local users to discover an encrypted password by reading application-trace output...

PT-2016-6726

Name of the Vulnerable Software and Affected Versions IBM Tivoli Storage Manager for Space Management aka Spectrum Protect for Space Management versions 6.3.x through 6.3.2.5 IBM Tivoli Storage Manager for Space Management aka Spectrum Protect for Space Management versions 6.4.x through 6.4.3.2 I...

CVE-2016-5927: Exposure of Sensitive Information to an Unauthorized Actor

IBM Tivoli Storage Manager for Space Management aka Spectrum Protect for Space Management 6.3.x before 6.3.2.6, 6.4.x before 6.4.3.3, and 7.1.x before 7.1.6, when certain dsmsetpw tracing is configured, allows local users to discover an encrypted password by reading application-trace output...

Ruby on Rails - Development Web Console (v2) Code Execution (Metasploit)

Exploit for ruby platform in category remote exploits This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class MetasploitModule 'Ruby on Rails Development Web Console v2 Code Execution', 'Description' =...