SoftPerfect Bandwidth Manager 2.9.10 - Authentication Bypass

No description provided by source. Authentication Bypass and Password disclosure. SoftPerfect Bandwidth Manager Authentication Bypass Date: 22-June-2012 Author: Gitsnik http://dracyrys.com/softperfect Vendor Homepage: http://www.softperfect.com/ Software Link:...

phpDEV5 - Remote Default Insecure Users Vuln

No description provided by source. ------------------------------------------------------------------------ PHPDev5 Remote Insecure Default Users & Passwords vuln. By : Ali7 e-mail : [email protected] date : 09-03-2k5 greetz : all my friends ; AlkaeN ; s4a.cc boyz ; Target : PHPDev 5 URL :...

DLA-0011-1 libemail-address-perl - security update

Bulletin has no description...

Western Digital Arkeia Virtual Appliance Blank Password

The remote Western Digital Arkeia Virtual Appliance uses a blank password to control access to its management interface. With this information, an attacker can gain administrative access to the web administration interface for the appliance. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...

CVE-2011-2198

The "insert-blank-characters" capability in caps.c in gnome-terminal vte before 0.28.1 allows remote authenticated users to cause a denial of service CPU and memory consumption and crash via a crafted file, as demonstrated by a file containing the string "\033100000000000000000@"...

CVE-2014-0097 Spring Security Blank password may bypass user authentication

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 CVE-2014-0097 Blank password may bypass user authentication Severity: Important Vendor: Spring by Pivotal Versions Affected: - - Spring Security 3.2.0 to 3.2.1 - - Spring Security 3.1.0 to 3.1.5 Description: The ActiveDirectoryLdapAuthenticator does n...

Blank password may bypass user authentication

The ActiveDirectoryLdapAuthenticator does not check the password length. If the directory allows anonymous binds then it may incorrectly authenticate a user who supplies an empty password...

CVE-2014-1911

The Foscam FI8910W camera with firmware before 11.37.2.55 allows remote attackers to obtain sensitive video and image data via a blank username and password...

CVE-2014-1911

The Foscam FI8910W camera with firmware before 11.37.2.55 allows remote attackers to obtain sensitive video and image data via a blank username and password...

TP-Link TD-8840t - CSRF Vulnerability

TP-Link TD-8840t is a ADSL2+ Ethernet/USB Modem Router which works with a 24-Mbps downstream connection. Usage Info TP-Link TD-8840t is a ADSL2+ Ethernet/USB Modem Router which works with a 24-Mbps downstream connection. You can easily change the default user's admin password by the default route...

Cisco TelePresence VX Clinical Assistant WIL-A Module Reboot Admin Password Removal

Cisco TelePresence VX Clinical Assistant is affected by a password reset vulnerability. The WIL-A module causes the administrative password to be reset to a blank password every time the device is rebooted. This plugin attempts to authenticate to the device using the username 'admin' and a blank...

Cisco Fixes Blank Admin Password Flaw in TelePresence Product

Cisco has patched a number of vulnerabilities in several separate products, including a serious remote code execution flaw in its Wide Area Application Services Mobile software that could allow an attacker to take complete control of a vulnerable device. Cisco also has patched a vulnerability in...

CVE-2013-3279: Undefined Security Weakness

EMC Atmos before 2.1.4 has a blank password for the PostgreSQL account, which allows remote attackers to obtain sensitive administrative information via a database-server connection...

PT-2013-4275

Name of the Vulnerable Software and Affected Versions EMC Atmos versions prior to 2.1.4 Description The issue allows remote attackers to obtain sensitive administrative information via a database-server connection due to a blank password for the PostgreSQL account. Recommendations For versions...

Threat Outbreak Alert: Blank Email Messages with Malicious Attachments on September 25, 2013

Medium Alert ID: 30987 First Published: 2013 September 26 12:59 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that contain a malicious attachment. The email message does not contain a message body or subject line, but the .zip attachment...

CVE-2013-2297

CVE-2013-2297 concerns Eucalyptus EuStore in default EMI configurations (EMI 3868652036, EMI 0400376721, EMI 2425352071, EMI 1347115203). The issue arises from a blank root password being set, enabling local users to gain privileges via unspecified vectors. This is a local-privilege-escalation ri...

PT-2013-3642

Name of the Vulnerable Software and Affected Versions Eucalyptus EuStore versions associated with EMI 3868652036, EMI 0400376721, EMI 2425352071, and EMI 1347115203 Description The issue allows local users to gain privileges via unspecified vectors due to a blank root password set in the default...

CVE-2013-2297: Undefined Security Weakness

Eucalyptus EuStore sets a blank root password in the default configuration of EMI 3868652036, EMI 0400376721, EMI 2425352071, and EMI 1347115203, which allows local users to gain privileges via unspecified vectors, a related issue to CVE-2013-2069...

blank_body

This plugin finds HTTP responses with a blank body, these responses may indicate errors or misconfigurations in the web application or the web server. Plugin type Grep Options This plugin doesnt have any user configured options. Source For more information about this plugin and the associated...

Apache Struts2 includeParams属性远程命令执行漏洞(CVE-2013-1966)

No description provided by source. 打开Struts Blank App中的 HelloWorld.jsp增加类似下列代码： s:url id="url" action="HelloWorld" includeParams="all" 运行 struts2-blank app 访问下列地址:...