73 matches found
CVE-2021-44207
Acclaim USAHERDS through 7.4.0.1 uses hard-coded credentials...
Disable caching of credentials on Citrix Workspace App
...
Design/Logic Flaw
Playground Sessions v2.5.582 and earlier for Windows, stores the user credentials in plain text allowing anyone with access to UserProfiles.sol to extract the email and password...
CA Network Flow Analysis CVE-2019-13658 Default Credentials Security Bypass Vulnerability
Description CA Network Flow Analysis is prone to a security-bypass vulnerability. An attacker can exploit this issue to bypass the authentication mechanism and execute arbitrary command. The following versions are vulnerable: CA Network Flow Analysis 10.0.xCA Network Flow Analysis 9.x Technologie...
GHSA-X52F-H74P-9JH8 node-sqlite is malware
The node-sqlite package is a piece of malware that steals environment variables and sends them to attacker controlled locations. All versions have been unpublished from the npm registry. Recommendation As this package is malware, if you find it installed in your environment, the real security...
Authentication flaw
Xpress Server in SAP POS does not require authentication for file read and erase operations, daemon shutdown, terminal read operations, or certain attacks on credentials. This is SAP Security Note 2520064...
phpLDAPadmin 1.2.2 - 'base' Cross-Site Scripting
source: https://www.securityfocus.com/bid/51793/info phpLDAPadmin is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context ...
PowerNews 2.5.4 SQL Injection
...:::::powernews 2.5.4 SQL Injection Vulnerability::::.... Virangar Security Team www.virangar.net -------- Discoverd By :virangar security teamhadihadi special tnx to:MR.nosrati,black.shadowes,MR.hesy,Ali007,Zahra & all virangar members & all hackerz greetz:to my best friend in the world...
PHP-Fusion Mod Classifieds - lid SQL Injection
PHP-Fusion Mod Classifieds - lid SQL Injection Php fusion "classifieds" SQL-injetion ++++++++++++++++++++++++++++ Author : boom3rang contact : boomerang at knaqu-shqipe dot de webpage : www.khg-crew.ws ++++++++++++++++++++++++++++ ---- Remote SQL Injection ------ + Dork:...
CVE-2003-0048
PuTTY 0.53b and earlier does not clear logon credentials from memory, including plaintext passwords, which could allow attackers with access to memory to steal the SSH credentials...
CVE-2002-0933
Datalex PLC BookIt! Consumer before 2.2 stores usernames and passwords in plaintext in a cookie, which could allow remote attackers to gain privileges via Cross-site scripting or sniffing attacks...
