Schrack MICROCONTROL XSS / Disclosure / Weak Default Password

SEC Consult Vulnerability Lab Security Advisory ======================================================================= title: Multiple critical vulnerabilites product: Schrack MICROCONTROL emergency light system vulnerable version: before 1.7.0 937 fixed version: 1.7.0 937 impact: critical...

D-Link Routers - Multiple Vulnerabilities

No description provided by source. The following five D-Link model routers suffer from several vulnerabilities including Clear Text Storage of Passwords, Cross Site Scripting and Sensitive Information Disclosure. DIR-652 D-Link Wireless N Gigabit Home Router DIR-835 D-Link Network DIR-835L Wirele...

Clear iSpot/Clearspot 2.0.0.0 - CSRF Vulnerabilities

No description provided by source. Trustwave's SpiderLabs Security Advisory TWSL2010-008: Clear iSpot/Clearspot CSRF Vulnerabilities https://www.trustwave.com/spiderlabs/advisories/TWSL2010-008.txt Published: 2010-12-10 Version: 1.0 Vendor: Clear http://www.clear.com http://www.clear.com/ Product...

Apple Mac OS X 10 nidump Password File Disclosure Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/2953/info A vulnerability exists in all versions of Apple MacOS X. It has been found to contain a vulnerability which could allow disclosure of passwords and other sensitive system information. nidump is a Mac OS X system...

123 flashchat 7.8 - Multiple Vulnerabilities

No description provided by source. |------------------------------------------------------------------| | | | / / / / | | / / / / / / / \ / / / / \ | | / // // / / / / / // / / / / / // / // / / / / / / | | /// //,// // //,// // // | | | | http://www.corelan.be:8800 | |...

Supermicro Onboard IPMI Port 49152 Sensitive File Exposure Exploit

This module abuses a file exposure vulnerability accessible through the web interface on port 49152 of Supermicro Onboard IPMI controllers. The vulnerability allows an attacker to obtain detailed device information and download data files containing the clear-text usernames and passwords for the...

RapidWareX 2.0.1 - (WebUI) CSRF Exploit

No description provided by source. RapidWareX v2.0.1 WebUI CSRF Exploit Author: l3D Sites: http://xraysecurity.blogspot.com, http://nullbyte.org.il IRC: irc://irc.nix.co.il Email: [email protected] RapidWareX v2.0.1 WebUI is prone to a post-authentication CSRF vulnerability, which allows the...

eXtreme Message Board 1.9.11 Multiple CSRF Vulnerabilities

No description provided by source. !--- Title: eXtreme Message Board 1.9.11 Multiple CSRF Vulnerabilities Author: 10n1z3d 10n1z3datwdotcn Date: Thu 15 Jul 2010 12:08:07 PM EEST Vendor: http://www.xmbforum.com/ Download: http://www.xmbforum.com/download/XMB-1.9.11.09.zip --- -= CSRF PoC 1 - Change...

Hancom Office 2007 Reboot.ini Clear-Text Passwords Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/228/info During installation of BackOffice 4.0, a file called reboot.ini is created and stored in the \Program Files\Microsoft BackOffice directory. This file contains clear-text usernames and passwords for several servic...

GetSimple CMS 2.01 and 2.02 Administrative Credentials Disclosure

No description provided by source. Researcher: Michael Brooks Affecting: GetSimple CMS 2.01 and 2.02 Fixed:2.03 Vulnerability: Administrative Credentials Disclosure Vendor's Homepage: http://code.google.com/p/get-simple-cms download url for 2.01: http://www.box.net/get-simple/1/30435008/399754548...

phpmoneybooks 1.03 - Stored XSS

No description provided by source. Exploit Title: phpmoneybooks 1.03 Stored XSS Date: Jun 28, 2012 Exploit Author: chap0 - chap0.blogspot.com - @chap0 Vendor Homepage: http://phpmoneybooks.com/ Software Link: http://sourceforge.net/projects/phpmoneybooks/files/phpMoneyBooks103.zip/download Versio...

Planetmoon Guestbook Clear Text Password Retrieval Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/7167/info A vulnerability has been reported in Planetmoon Guestbook. It has been reported that remote users may be able to retrieve clear text password lists. Access to this data may allow an attacker to carry out further...

PAExec - The Redistributable PsExec (Launch Remote Windows Apps)

PAExec lets you launch Windows programs on remote Windows computers without needing to install software on the remote computer first. For example, you could launch CMD.EXE remotely and have the equivalent of a terminal session to the remote server. PAExec is useful for doing remote installs,...

Openfiler NAS/SAN Appliance 2.99 XSS / Traversal / Command Injection

Tested on Openfiler NAS/SAN Appliance version 2.99 Author: MiDoveteMollare Date: 10 June 2014 OS Command Injection after authentication 1 page: servicesiscsitarget.html paramenter: password POST /admin/servicesiscsitarget.html HTTP/1.1 Host: IP:446 Accept: / Accept-Language: en User-Agent:...

Full Disclosure - DIR-652/DIR-835/DIR-855L/DGL-5500/DHP-1565 - Clear Text Password/XSS/Information Disclosure

The following five D-Link model routers suffer from several vulnerabilities including Clear Text Storage of Passwords, Cross Site Scripting and Sensitive Information Disclosure. DIR-652 D-Link Wireless N Gigabit Home Router DIR-835 D-Link Network DIR-835L Wireless N 750M Dual-band 802.11n 4Port...

D-Link Routers - Multiple Vulnerabilities

The following five D-Link model routers suffer from several vulnerabilities including Clear Text Storage of Passwords, Cross Site Scripting and Sensitive Information Disclosure. DIR-652 D-Link Wireless N Gigabit Home Router DIR-835 D-Link Network DIR-835L Wireless N 750M Dual-band 802.11n 4Port...

D-Link Routers - Multiple Vulnerabilities

D-Link Routers - Multiple Vulnerabilities The following five D-Link model routers suffer from several vulnerabilities including Clear Text Storage of Passwords, Cross Site Scripting and Sensitive Information Disclosure. DIR-652 D-Link Wireless N Gigabit Home Router DIR-835 D-Link Network DIR-835L...

D-Link Cross Site Scripting / Information Disclosure Vulnerability

D-Link DIR-652, DIR-835, DIR-855L, DGL-500, and DHP-1565 suffer from clear text storage of passwords, cross site scripting, and sensitive information disclosure vulnerabilities. The following five D-Link model routers suffer from several vulnerabilities including Clear Text Storage of Passwords,...

D-Link Cross Site Scripting / Information Disclosure

The following five D-Link model routers suffer from several vulnerabilities including Clear Text Storage of Passwords, Cross Site Scripting and Sensitive Information Disclosure. DIR-652 D-Link Wireless N Gigabit Home Router DIR-835 D-Link Network DIR-835L Wireless N 750M Dual-band 802.11n 4Port...

DIR-605L Disclosure / Bypass

DIR-605L Hardware version Ax, firmware 1.14 has two severe security bug: 1. The login password is printed out in clear text in the "Current Network Setting" page just after login "Device Info" section. 2. The router can be controlled using a crafted URL GET request, even without login e.g. use an...