PT-2018-6842

Name of the Vulnerable Software and Affected Versions: Joomanager component for Joomla! versions through 2.0.0 Description: The issue allows for arbitrary file download, which can expose database credentials. This can be achieved through a request to "index.php?option=com...

CVE-2017-18345: Exposure of Sensitive Information to an Unauthorized Actor

The Joomanager component through 2.0.0 for Joomla! has an arbitrary file download issue, resulting in exposing the credentials of the database via an index.php?option=comjoomanager&controller=details&task=download&path=configuration.php request...

CVE-2018-15808

POSIM EVO 15.13 for Windows stores hardcoded credentials for the root database user. This could give an attacker with network access to the POSIM EVO database the ability to access/modify data and potentially remotely execute code on POSIM EVO clients. Multiple sources document hardcoded credenti...

PT-2018-13220

Name of the Vulnerable Software and Affected Versions POSIM EVO version 15.13 for Windows Description The issue concerns hardcoded database credentials for the root database user in POSIM EVO. This could lead to a breach of confidentiality, integrity, or availability, and may allow attackers to...

Online Trade 1 Information Disclosure

Exploit Title: Online Trade 1 - Information Disclosure Exploit Author: Dhamotharan Date: 2018-07-17 Vendor Homepage: https://codecanyon.net/item/online-trade-online-forex-and-cryptocurrency-investment-system/21987193?srank=14 CVE : CVE-2018-14328 Version: 1 Tested on: Kali Linux Description :...

CVE-2018-14328: Exposure of Sensitive Information to an Unauthorized Actor

Brynamics "Online Trade - Online trading and cryptocurrency investment system" allows remote attackers to obtain sensitive information via a direct request for /dashboard/addplan, /dashboard/paywithcard/charge, /dashboard/withdrawal, or /privacy&terms, as demonstrated by reading database username...

SS-2018-018: Database credentials disclosure during connection failure

More info at https://www.silverstripe.org/download/security-releases/ss-2018-018/...

Red Hat oVirt ovirt-engine Information Disclosure Vulnerability

Red Hat oVirt is an open source virtualization management platform from Red Hat, an open source version of RHEV Platform for Enterprise Virtualization, consisting of the oVirt-node client and the overt-engine management side. oVirt-engine is one of the management engines. An information disclosur...

Online Trade - Information Disclosure

Online Trade - Information Disclosure Exploit Title: Online Trade 1 - Information Disclosure Date: 2018-07-03 Exploit Author: L0RD Vendor Homepage: https://codecanyon.net/item/online-trade-online-forex-and-cryptocurrency-investment-system/21987193?srank=14 CVE: CVE-2018-12908 Version: 1 Tested on...

Online Trade - Information Disclosure Vulnerability

Exploit for php platform in category web applications Exploit Title: Online Trade 1 - Information Disclosure Exploit Author: L0RD Vendor Homepage: https://codecanyon.net/item/online-trade-online-forex-and-cryptocurrency-investment-system/21987193?srank=14 CVE: CVE-2018-12908 Version: 1 Tested on:...

Online Trade - Information Disclosure

Exploit Title: Online Trade 1 - Information Disclosure Date: 2018-07-03 Exploit Author: L0RD Vendor Homepage: https://codecanyon.net/item/online-trade-online-forex-and-cryptocurrency-investment-system/21987193?srank=14 CVE: CVE-2018-12908 Version: 1 Tested on: Win 10...

Design/Logic Flaw

Brynamics "Online Trade - Online trading and cryptocurrency investment system" allows remote attackers to obtain sensitive information via a direct request for the /dashboard/deposit URI, as demonstrated by discovering database credentials...

CVE-2018-12908

Brynamics "Online Trade - Online trading and cryptocurrency investment system" allows remote attackers to obtain sensitive information via a direct request for the /dashboard/deposit URI, as demonstrated by discovering database credentials...

CVE-2018-12908

CVE-2018-12908 affects Brynamics “Online Trade” system. Connected documents describe an information-disclosure vulnerability where remote attackers can obtain sensitive data by directly requesting several dashboard endpoints, notably /dashboard/deposit (and related paths such as /dashboard/addpla...

ovirt-engine-setup: unfiltered db password in engine-backup log

A flaw was found in ovirt-engine. When engine-backup was run with one of the options "--provisiondb", the database username and password were logged in cleartext. Sharing the provisioning log might inadvertently leak database passwords...

CVE-2018-12908: Exposure of Sensitive Information to an Unauthorized Actor

Brynamics "Online Trade - Online trading and cryptocurrency investment system" allows remote attackers to obtain sensitive information via a direct request for the /dashboard/deposit URI, as demonstrated by discovering database credentials...

PT-2018-11465

Name of the Vulnerable Software and Affected Versions Brynamics Online Trade affected versions not specified Description The issue allows remote attackers to obtain sensitive information by making a direct request for the "/dashboard/deposit" API endpoint. This could potentially lead to the...

CVE-2018-1072

ovirt-engine before version ovirt 4.2.2 is vulnerable to an information exposure through log files. When engine-backup was run with one of the options "--provisiondb", the database username and password were logged in cleartext. Sharing the provisioning log might inadvertently leak database...

CVE-2018-1072

A flaw was found in ovirt-engine. When engine-backup was run with one of the options "--provisiondb", the database username and password were logged in cleartext. Sharing the provisioning log might inadvertently leak database passwords...

CVE-2018-1072: Insertion of Sensitive Information into Log File

ovirt-engine before version ovirt 4.2.2 is vulnerable to an information exposure through log files. When engine-backup was run with one of the options "--provisiondb", the database username and password were logged in cleartext. Sharing the provisioning log might inadvertently leak database...