RedHat Update for freeradius RHSA-2015:1287-01

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2014-5036

The Storage Controller SC component in Eucalyptus 3.4.2 through 4.0.x before 4.0.1, when Dell Equallogic SAN is used, logs the CHAP user credentials, which allows local users to obtain sensitive information by reading the logs...

Information disclosure

The Storage Controller SC component in Eucalyptus 3.4.2 through 4.0.x before 4.0.1, when Dell Equallogic SAN is used, logs the CHAP user credentials, which allows local users to obtain sensitive information by reading the logs...

CVE-2014-5036

The Storage Controller SC component in Eucalyptus 3.4.2 through 4.0.x before 4.0.1, when Dell Equallogic SAN is used, logs the CHAP user credentials, which allows local users to obtain sensitive information by reading the logs...

CVE-2014-5036

The Storage Controller SC component in Eucalyptus 3.4.2 through 4.0.x before 4.0.1, when Dell Equallogic SAN is used, logs the CHAP user credentials, which allows local users to obtain sensitive information by reading the logs...

CVE-2014-5036

The CVE-2014-5036 entry applies to Eucalyptus Storage Controller (SC) in versions 3.4.2–4.0.x prior to 4.0.1 when used with Dell EqualLogic SAN. The underlying issue is that CHAP user credentials are logged, enabling local users to read logs and obtain sensitive information, causing partial confi...

PT-2014-6261

Name of the Vulnerable Software and Affected Versions Eucalyptus versions 3.4.2 through 4.0.x Description The issue allows local users to obtain sensitive information, specifically CHAP user credentials, by reading the logs when Dell Equallogic SAN is used. This is due to the Storage Controller...

CVE-2014-5036: Exposure of Sensitive Information to an Unauthorized Actor

The Storage Controller SC component in Eucalyptus 3.4.2 through 4.0.x before 4.0.1, when Dell Equallogic SAN is used, logs the CHAP user credentials, which allows local users to obtain sensitive information by reading the logs...

oclHashcat v1.20 - Worlds fastest password cracker

oclHashcat is a GPGPU-based multi-hash cracker using a brute-force attack implemented as mask attack, combinator attack, dictionary attack, hybrid attack, mask attack, and rule-based attack. This GPU cracker is a fusioned version of oclHashcat-plus and oclHashcat-lite. GPU Driver requirements: NV...

Microsoft Internet Authentication Service MS-CHAP Security Bypass (MS09-071) - Ver2 (CVE-2009-3677)

An elevation of privilege vulnerability has been reported in the Internet Authentication Service. Internet Authentication Service IAS is the Microsoft implementation of a Remote Authentication Dial-in User Service RADIUS server and proxy. As a RADIUS server, IAS performs centralized connection...

D-Link DIR-Series Routers - '/model/__show_info.php' Local File Disclosure

source: https://www.securityfocus.com/bid/64043/info Multiple D-Link DIR series routers are prone to a local file-disclosure vulnerability because it fails to adequately validate user-supplied input. Exploiting this vulnerability would allow an attacker to obtain potentially sensitive information...

Linux Gather PPTP VPN chap-secrets Credentials

This module collects PPTP VPN information such as client, server, password, and IP from your target server's chap-secrets file. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Linux Gather PPTP...

MySQL Squid Access Report 2.1.4 HTML Injection

Exploit Title: MySQL Squid Access Report 2.1.4 / HTML Injection Date: 23/07/2012 Author: Daniel Godoy Author Mail:DanielGodoyatGobiernoFederaldotcom Author Web: www.delincuentedigital.com.ar Software web: http://sourceforge.net/projects/mysar/ Tested on: Linux Dork: MySQL Squid Access Report 2.1....

MySQL Squid Access Report 2.1.4 - HTML Injection

MySQL Squid Access Report 2.1.4 - HTML Injection Exploit Title: MySQL Squid Access Report 2.1.4 / HTML Injection Date: 23/07/2012 Author: Daniel Godoy Author Mail:DanielGodoyatGobiernoFederaldotcom Author Web: www.delincuentedigital.com.ar Software web: http://sourceforge.net/projects/mysar/ Test...

MySQL Squid Access Report 2.1.4 - HTML Injection

Exploit Title: MySQL Squid Access Report 2.1.4 / HTML Injection Date: 23/07/2012 Author: Daniel Godoy Author Mail:DanielGodoyatGobiernoFederaldotcom Author Web: www.delincuentedigital.com.ar Software web: http://sourceforge.net/projects/mysar/ Tested on: Linux Dork: MySQL Squid Access Report 2.1....

Webify Link Directory SQL Injection

Exploit Title: Webify Link Directory / SQL Injection Date: 04/07/2012 Author: Daniel Godoy Author Mail: DanielGodoyatGobiernoFederaldotcom Author Web: www.delincuentedigital.com.ar Sofware web: http://webify.ws/index.php?page=getapp&id=10 Tested on: Linux Dork: allinurl: index.php?page=browse&id=...

Webify Link Directory / SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Webify Link Directory / SQL Injection Date: 04/07/2012 Author: Daniel Godoy Author Mail: DanielGodoyatGobiernoFederaldotcom Author Web: www.delincuentedigital.com.ar Sofware web: http://webify.ws/index.php?page=getapp&id=10 Test...

Webify Link Directory - SQL Injection

Webify Link Directory - SQL Injection Exploit Title: Webify Link Directory / SQL Injection Date: 04/07/2012 Author: Daniel Godoy Author Mail: DanielGodoyatGobiernoFederaldotcom Author Web: www.delincuentedigital.com.ar Sofware web: http://webify.ws/index.php?page=getapp&id=10 Tested on: Linux Dor...

CLscript Classified Script 3.0 SQL Injection

Exploit Title: CLscript - Classified Script 3.0 / SQL Injection Date: 03/07/2012 Author: Daniel Godoy Author Mail: DanielGodoyatGobiernoFederaldotcom Author Web: www.delincuentedigital.com.ar Sofware web: http://www.phpkode.com/scripts/item/clscript-classified-script/ Tested on: Linux Dork:...

Sava’s Simple Upload Script / Delete Arbitrary File

Exploit for php platform in category web applications Exploit Title: Sava’s Simple Upload Script / Delete Arbitrary File Date: 03/07/2012 Author: Daniel Godoy Author Mail: DanielGodoyatGobiernoFederaldotcom Author Web: www.delincuentedigital.com.ar Sofware web:...