Centreon 19.10.5 - Database Credentials Disclosure Vulnerability

Exploit for php platform in category web applications Exploit Title: Centreon 19.10.5 - Database Credentials Disclosure Exploit Author: Fabien AUNAY, Omri Baso Vendor Homepage: https://www.centreon.com/ Software Link: https://github.com/centreon/centreon Version: 19.10.5 Tested on: CentOS 7 CVE :...

Centreon 19.10.5 - Database Credentials Disclosure

Exploit Title: Centreon 19.10.5 - Database Credentials Disclosure Date: 2020-01-27 Exploit Author: Fabien AUNAY, Omri Baso Vendor Homepage: https://www.centreon.com/ Software Link: https://github.com/centreon/centreon Version: 19.10.5 Tested on: CentOS 7 CVE : - Centreon 19.10.5 Database...

Unspecified Vulnerability in Aruba Networks ClearPass Policy Manager

Aruba Networks ClearPass is an access management system from Aruba Networks that integrates network control, application, and device management capabilities.Policy Manager is one of the policy managers. An unspecified vulnerability exists in Aruba Networks ClearPass Policy Manager. An attacker...

CVE-2016-4401

Aruba ClearPass Policy Manager before 6.5.7 and 6.6.x before 6.6.2 allows attackers to obtain database credentials...

CVE-2016-4401

Aruba ClearPass Policy Manager before 6.5.7 and 6.6.x before 6.6.2 allows attackers to obtain database credentials...

Command injection

Aruba ClearPass Policy Manager before 6.5.7 and 6.6.x before 6.6.2 allows attackers to obtain database credentials...

CVE-2016-4401

Aruba ClearPass Policy Manager before 6.5.7 and 6.6.x before 6.6.2 allows attackers to obtain database credentials...

CVE-2016-4401

Aruba ClearPass Policy Manager is affected by CVE-2016-4401. Affected versions are before 6.5.7 and 6.6.x before 6.6.2. The vulnerability allows attackers to obtain database credentials. No explicit root-cause, exploit details, or remediation steps are provided in the connected documents beyond t...

Anchor Information Disclosure Vulnerability

Anchor is an open source light blogging system. The system supports Markdown editor , custom fields and multiple languages and so on. An information disclosure vulnerability exists in the config/error.php file in Anchor version 0.12.3, which can be exploited to obtain database credentials with th...

Information Disclosure

ibmdb is vulnerable to information disclosure. The application prints the plaintext database credentials into log files while in debug mode. A local attacker will be able to access the log files and retrieve the credentials and gain access to the database...

Duplicator Pro 1.3.14 Local Information Disclosure

Product: Duplicator Pro Vendor: SnapCreek Website: https://snapcreek.com/ Discovered by: Evolution Hosting Version vulnerable: = 1.3.14 Fixed in: 1.3.15+ Vulnerability Type: Information Disclosure, local exposure of entire webinstallation content remotely triggerable: not for itself. Needs wp adm...

WordPress Advance Contact Form Plugin SQL Injection

An SQL injection vulnerability exists in WordPress Advance Contact Form Plugin. Successful exploitation of this vulnerability could lead to disclosure of database credentials...

WordPress Form Maker Plugin SQL Injection (CVE-2019-10866)

An SQL injection vulnerability exists in WordPress Form Maker Plugin. Successful exploitation of this vulnerability could lead to disclosure of database credentials...

Design/Logic Flaw

Fuji Electric V-Server before 6.0.33.0 stores database credentials in project files as plaintext. An attacker that can gain access to the project file can recover the database credentials and gain access to the database server...

CVE-2019-3947

Fuji Electric V-Server before 6.0.33.0 stores database credentials in project files as plaintext. An attacker that can gain access to the project file can recover the database credentials and gain access to the database server...

CVE-2019-3947

CVE-2019-3947 affects Fuji Electric V-Server prior to 6.0.33.0 where database credentials are stored in project files as plaintext. The underlying issue is the plaintext storage of credentials in project files, enabling an attacker who can access those files to recover the credentials and gain ac...

CVE-2019-3947

Fuji Electric V-Server before 6.0.33.0 stores database credentials in project files as plaintext. An attacker that can gain access to the project file can recover the database credentials and gain access to the database server...

PT-2019-12182 · Tibco · Tibco Spotfire Statistics Services

Name of the Vulnerable Software and Affected Versions: TIBCO Spotfire Statistics Services versions up to and including 7.11.1 TIBCO Spotfire Statistics Services version 10.0.0 Description: The web interface component of TIBCO Spotfire Statistics Services contains an issue that could allow an...

CVE-2019-3891

It was discovered that a world-readable log file belonging to Candlepin component of Red Hat Satellite 6.4 leaked the credentials of the Candlepin database. A malicious user with local access to a Satellite host can use those credentials to modify the database and prevent Satellite from fetching...

CVE-2019-3891

It was discovered that a world-readable log file, belonging to the Candlepin component of Red Hat Satellite 6.4, leaked the credentials of the Candlepin database. A malicious user with local access to a Satellite host can use those credentials to modify the database and prevent Satellite from...