Lucene search
+L

2758 matches found

Kitploit
Kitploit
added 2013/03/05 8:23 p.m.43 views

[Patator] Brute-Force Attack And Dns Reverse And Forward Lookup

Patator is developed by Sebastien Macke. In this video I will show you how to use Patator for a Brute-Force Attack and DNS Forward and reverse lookup. Patator is a multi-purpose brute-force, with a modular design and a flexible usage. http://code.google.com/p/patator...

7.3AI score
SaveExploits0
The Hacker News
The Hacker News
added 2013/01/17 1:0 a.m.16 views

The use of passwords in a technological evolution

Every day we read about an incredible number of successful attacks and data breaches that exploited leak of authentication mechanisms practically in every sector. Often also critical control system are exposed on line protected only by a weak password, in many cases the default one of factory...

6.9AI score
SaveExploits0
FreeBSD
FreeBSD
added 2013/01/15 12:0 a.m.35 views

pyrad -- multiple vulnerabilities

Nathaniel McCallum reports: packet.py in pyrad before 2.1 uses weak random numbers to generate RADIUS authenticators and hash passwords, which makes it easier for remote attackers to obtain sensitive information via a brute force attack. The CreateID function in packet.py in pyrad before 2.1 uses...

5.9CVSS5AI score0.02833EPSS
SaveExploits0References2
n0where
n0where
added 2013/01/05 7:20 p.m.70 views

Bugtraq Penetration Testing Linux

Bugtraq -2 Blackwidow is a Open-Source Linux Distribution based in Ubuntu and Debian with PAE kernel 3.2 and 3.4 Hacker ‘s suite where you will find all kinds of tools for the best systems auditory. Adapted for beginners in Ethical hacking computer security, and for experts in this field. Is not...

1.9AI score
SaveExploits0
NVD
NVD
added 2012/12/27 11:47 a.m.27 views

CVE-2012-5868

WordPress 3.4.2 does not invalidate a wordpresssec session cookie upon an administrator's logout action, which makes it easier for remote attackers to discover valid session identifiers via a brute-force attack, or modify data via a replay attack...

2.6CVSS6.5AI score0.02432EPSS
SaveExploits1References1
OSV
OSV
added 2012/12/27 11:47 a.m.12 views

CVE-2012-5868

WordPress 3.4.2 does not invalidate a wordpresssec session cookie upon an administrator's logout action, which makes it easier for remote attackers to discover valid session identifiers via a brute-force attack, or modify data via a replay attack...

2.6CVSS6.4AI score0.02432EPSS
SaveExploits1References1
Prion
Prion
added 2012/12/27 11:47 a.m.15 views

Design/Logic Flaw

WordPress 3.4.2 does not invalidate a wordpresssec session cookie upon an administrator's logout action, which makes it easier for remote attackers to discover valid session identifiers via a brute-force attack, or modify data via a replay attack...

2.6CVSS7.1AI score0.02432EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
added 2012/12/27 11:0 a.m.24 views

CVE-2012-5868

WordPress 3.4.2 does not invalidate a wordpresssec session cookie upon an administrator's logout action, which makes it easier for remote attackers to discover valid session identifiers via a brute-force attack, or modify data via a replay attack...

6.5AI score0.02432EPSS
SaveExploits1References1
exploitpack
exploitpack
added 2012/12/06 12:0 a.m.21 views

Oracle MySQL MariaDB - Insecure Salt Generation Security Bypass

Oracle MySQL MariaDB - Insecure Salt Generation Security Bypass source: https://www.securityfocus.com/bid/56837/info MySQL and MariaDB are prone to a security-bypass weakness. An attacker may be able to exploit this issue to aid in brute-force attacks; other attacks may also be possible. use...

0.5AI score
SaveExploits0
NVD
NVD
added 2012/11/30 10:55 p.m.32 views

CVE-2012-4571

Python Keyring 0.9.1 does not securely initialize the cipher when encrypting passwords for CryptedFileKeyring files, which makes it easier for local users to obtain passwords via a brute-force attack...

2.1CVSS6AI score0.0037EPSS
SaveExploits0References4
OSV
OSV
added 2012/11/30 10:55 p.m.4 views

DEBIAN-CVE-2012-4571

Python Keyring 0.9.1 does not securely initialize the cipher when encrypting passwords for CryptedFileKeyring files, which makes it easier for local users to obtain passwords via a brute-force attack...

2.1CVSS6.5AI score0.0037EPSS
SaveExploits0References1
OSV
OSV
added 2012/11/30 10:55 p.m.9 views

CVE-2012-4571

Python Keyring 0.9.1 does not securely initialize the cipher when encrypting passwords for CryptedFileKeyring files, which makes it easier for local users to obtain passwords via a brute-force attack...

5.9AI score
SaveExploits0References4
Prion
Prion
added 2012/11/30 10:55 p.m.21 views

Default credentials

Python Keyring 0.9.1 does not securely initialize the cipher when encrypting passwords for CryptedFileKeyring files, which makes it easier for local users to obtain passwords via a brute-force attack...

2.1CVSS6.4AI score0.0037EPSS
SaveExploits0References4Affected Software1
OSV
OSV
added 2012/11/30 10:55 p.m.27 views

PYSEC-2012-8

Python Keyring 0.9.1 does not securely initialize the cipher when encrypting passwords for CryptedFileKeyring files, which makes it easier for local users to obtain passwords via a brute-force attack...

2.1CVSS3.6AI score0.0037EPSS
SaveExploits0References5
Debian CVE
Debian CVE
added 2012/11/30 10:0 p.m.62 views

CVE-2012-4571

Python Keyring 0.9.1 does not securely initialize the cipher when encrypting passwords for CryptedFileKeyring files, which makes it easier for local users to obtain passwords via a brute-force attack...

2.1CVSS5.9AI score0.0037EPSS
SaveExploits0
Cvelist
Cvelist
added 2012/11/16 12:0 a.m.19 views

CVE-2012-4613

EMC RSA Data Protection Manager Appliance 2.7.x and 3.x before 3.2.1 does not properly restrict the number of authentication attempts by a user account, which makes it easier for local users to bypass intended access restrictions via a brute-force attack...

6.4AI score0.00334EPSS
SaveExploits0References2
UbuntuCve
UbuntuCve
added 2012/11/06 12:0 a.m.32 views

CVE-2012-4571

Python Keyring 0.9.1 does not securely initialize the cipher when encrypting passwords for CryptedFileKeyring files, which makes it easier for local users to obtain passwords via a brute-force attack...

2.1CVSS5.9AI score0.0037EPSS
SaveExploits0References3
NVD
NVD
added 2012/10/08 10:47 a.m.21 views

CVE-2012-5309

servlet/traveler in IBM Lotus Notes Traveler through 8.5.3.3 Interim Fix 1 does not properly restrict invalid authentication attempts, which makes it easier for remote attackers to obtain access via a brute-force attack...

6.8CVSS6.5AI score0.01337EPSS
SaveExploits1References1
Prion
Prion
added 2012/10/08 10:47 a.m.18 views

Design/Logic Flaw

The createRandomPassword function in includes/functionscommon.php in Virtual War aka VWar 1.6.1 R2 uses a small range of values to select the seed argument for the PHP mtsrand function, which makes it easier for remote attackers to determine randomly generated passwords via a brute-force attack...

4.3CVSS7.2AI score0.01179EPSS
SaveExploits1References2Affected Software1
Cvelist
Cvelist
added 2012/10/08 10:0 a.m.29 views

CVE-2010-5066

The createRandomPassword function in includes/functionscommon.php in Virtual War aka VWar 1.6.1 R2 uses a small range of values to select the seed argument for the PHP mtsrand function, which makes it easier for remote attackers to determine randomly generated passwords via a brute-force attack...

6.7AI score0.01179EPSS
SaveExploits1References2
Rows per page
Query Builder