2758 matches found
CVE-2015-0886
Integer overflow in the cryptraw method in the key-stretching implementation in jBCrypt before 0.4 makes it easier for remote attackers to determine cleartext values of password hashes via a brute-force attack against hashes associated with the maximum exponent...
Code injection
The WebRTC subsystem in Mozilla Firefox before 36.0 recognizes turns: and stuns: URIs but accesses the TURN or STUN server without using TLS, which makes it easier for man-in-the-middle attackers to discover credentials by spoofing a server and completing a brute-force attack within a short time...
Linux Kernel ASLR Implementation Insufficient Moisture Vulnerability
Linux Kernel is an open source operating system. The Linux Kernel ALSR implementation suffers from an insufficient moisture problem that allows attackers to exploit vulnerabilities to bypass security restrictions through brute force techniques for further attacks...
CVE-2015-1355
Siemens SIMATIC STEP 7 TIA Portal before 13 SP1 uses a weak password-hash algorithm, which makes it easier for local users to determine cleartext passwords by reading a project file and conducting a brute-force attack...
CVE-2015-1355
Siemens SIMATIC STEP 7 TIA Portal before 13 SP1 uses a weak password-hash algorithm, which makes it easier for local users to determine cleartext passwords by reading a project file and conducting a brute-force attack...
FancyFon FAMOC Cryptographic Hash Algorithm Vulnerability
FancyFon FAMOC is a mobile device management platform. FancyFon FAMOC suffers from a password hashing algorithm vulnerability that can be exploited by an attacker to conduct a brute force attack and obtain a user's password...
AIX 7.1 TL 3 : ntp (IV68430)
The version of NTP installed on the remote AIX host is affected by the following vulnerabilities : - A security weakness exists due to the configauth function improperly generating default keys when no authentication key is defined in the ntp.conf file. Key size is limited to 31 bits and the...
SUSE-SU-2015:0274-1 Security update for ntp
ntp was updated to fix four security issues. These security issues were fixed: - CVE-2014-9294: util/ntp-keygen.c in ntp-keygen used a weak RNG seed, which made it easier for remote attackers to defeat cryptographic protection mechanisms via a brute-force attack bnc910764 911792. - CVE-2014-9293:...
CVE-2014-9044
Asset Pipeline in ownCloud 7.x before 7.0.3 uses an MD5 hash of the absolute file paths of the original CSS and JS files as the name of the concatenated file, which allows remote attackers to obtain sensitive information via a brute force attack...
Information disclosure
Asset Pipeline in ownCloud 7.x before 7.0.3 uses an MD5 hash of the absolute file paths of the original CSS and JS files as the name of the concatenated file, which allows remote attackers to obtain sensitive information via a brute force attack...
CVE-2014-9044
Asset Pipeline in ownCloud 7.x before 7.0.3 uses an MD5 hash of the absolute file paths of the original CSS and JS files as the name of the concatenated file, which allows remote attackers to obtain sensitive information via a brute force attack...
CVE-2014-9044
CVE-2014-9044 relates to ownCloud 7.x prior to 7.0.3, where the Asset Pipeline names the concatenated CSS/JS blob using an MD5 hash of the absolute file paths. This allowed an attacker to brute-force disclose the install path (e.g., /var/www/owncloud/). The root cause is the use of absolute paths...
Vimeo: Brute force on "vimeo" cookie
I took at "vimeo" cookie "Vimeo authentication token" https://vimeo.com/cookielist And to show approximately my thought process I did : 1. compare two generate values from two different sessions of mine epk9rrdskc70pcdxxmrdmdx7jpcdxxmrdmdx7%2Cpv222v2mfw90w5dcv5wtkmsfffxfsxc2tdruxmcrt...
Dell iDRAC Weak SessionID Vulnerability (IPMI Protocol) - Active Check
Intelligent Platform Management Interface IPMI v1.5 SessionID SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if description...
Cisco WebEx Meetings Server User Enumeration Vulnerability (CNVD-2015-00225)
Cisco WebEx Meetings are web conferencing solutions. A user enumeration vulnerability exists in Cisco WebEx Meetings Server, which could be exploited by an attacker to obtain valid user accounts via a brute force attack...
Majority of 4G USB Modems, SIM Cards Exploitable
Researchers say 4G USB modems contain exploitable vulnerabilities through which attackers could, and researchers have, managed to gain full control of the machines to which the devices are connected. Researchers from Positive Technologies presented a briefing detailing how to compromise USB modem...
Phase Botnet SQL Injection
import requests import time import sys waitdelay = 5 Depending on connection delay and server speed, you may need to make this a larger number KnockString = 'g=a&w=a&b=a&d=a&p=a&m=a' lol no integrity verification PostData = "" def rc4cryptdata , key: S = listrange256 j = 0 out = for i in range256...
Design/Logic Flaw
The configauth function in ntpd in NTP before 4.2.7p11, when an auth key is not configured, improperly generates a key, which makes it easier for remote attackers to defeat cryptographic protection mechanisms via a brute-force attack...
CVE-2014-9293
The configauth function in ntpd in NTP before 4.2.7p11, when an auth key is not configured, improperly generates a key, which makes it easier for remote attackers to defeat cryptographic protection mechanisms via a brute-force attack...