Getsimple CMS 2.01 2.02 - Administrative Credentials Disclosure

Getsimple CMS 2.01 2.02 - Administrative Credentials Disclosure Researcher: Michael Brooks Affecting: GetSimple CMS 2.01 and 2.02 Fixed:2.03 Vulnerability: Administrative Credentials Disclosure Vendor's Homepage: http://code.google.com/p/get-simple-cms download url for 2.01:...

wdb-version NSE Script

Detects vulnerabilities and gathers information such as version numbers and hardware support from VxWorks Wind DeBug agents. Wind DeBug is a SunRPC-type service that is enabled by default on many devices that use the popular VxWorks real-time embedded operating system. H.D. Moore of Metasploit ha...

Design/Logic Flaw

Semantically-Interconnected Online Communities SIOC 5.x before 5.x-1.2 and 6.x before 6.x-1.1, a module for Drupal, does not properly implement menu and database APIs, which allows remote attackers to obtain usernames and read hashed emails and comments via unspecified vectors...

CVE-2008-6160

Semantically-Interconnected Online Communities SIOC 5.x before 5.x-1.2 and 6.x before 6.x-1.1, a module for Drupal, does not properly implement menu and database APIs, which allows remote attackers to obtain usernames and read hashed emails and comments via unspecified vectors...

CVE-2008-6160

Semantically-Interconnected Online Communities SIOC 5.x before 5.x-1.2 and 6.x before 6.x-1.1, a module for Drupal, does not properly implement menu and database APIs, which allows remote attackers to obtain usernames and read hashed emails and comments via unspecified vectors...

eVision CMS 2.0 - SQL Injection

--+++============================================================+++-- --+++====== eVision CMS 78 79 80 81 82 '.settext$row$GET'field'.' 83 84 '; + It prints admin's password hashed: + /iframe.php?field=pass&module=users&id=1 milw0rm.com 2009-01-30...

Design/Logic Flaw

libxcrypt in SUSE openSUSE 11.0 uses the DES algorithm when the configuration specifies the MD5 algorithm, which makes it easier for attackers to conduct brute-force attacks against hashed passwords...

CVE-2008-3188

libxcrypt in SUSE openSUSE 11.0 uses the DES algorithm when the configuration specifies the MD5 algorithm, which makes it easier for attackers to conduct brute-force attacks against hashed passwords...

CVE-2008-3188

libxcrypt in SUSE openSUSE 11.0 uses the DES algorithm when the configuration specifies the MD5 algorithm, which makes it easier for attackers to conduct brute-force attacks against hashed passwords...

Triton CMS Pro 1.06 - 'x-forwarded-for' Blind SQL Injection

!/usr/bin/perl -w Triton CMS Pro X-Forwarded-For Blind SQL Injection Admin's username/hash disclosure exploit Benchmark method, so take a coffee and relax Coded by GiReX use LWP::UserAgent; use HTTP::Request; ifnot defined $ARGV0 print "\nUsage: perl $0 host path 1/2\n"; print "Example: perl $0...

Mambo Component mambads <= 1.0 RC1 Beta SQL Injection Vulnerability

No description provided by source. !/usr/bin/perl -w Mambo Component mambads 1.0 RC1 Beta & 1.0 RC1 Remote SQL Injection Found by : Houssamix From H-T Team H-T Team HouSSaMix + ToXiC350 from MoroCCo Greetz : Stack & CoNaN & HaCkeREgY & room-hacker & Hak3r-b0y & All friends & All muslims HaCkeRs :...

phpizabi-disclose.txt

-------------------------------------------------------- PHPizabi v0.848b C1 HFP3 database information exposure -------------------------------------------------------- I would like to state that I am in no way responsible for how this information is used. It is just that, information and is...

CVE-2008-1114

Vocera Communications wireless handsets, when using Protected Extensible Authentication Protocol PEAP, do not validate server certificates, which allows remote wireless access points to steal hashed passwords and conduct man-in-the-middle MITM attacks...

Mihalism Multi Host Download (Username) Blind SQL Injection Exploit

No description provided by source. ?php / Moubik Romanian Security Team - http://rstzone.org presents Mihalism Multi Host Download - Blind SQL Injection Attack Thanks to Vladii for telling me about the CMS. Thanks to Shocker for telling Vladii about the CMS. Shoutz to Kw3rln, Bankai, Slick,...

Mihalism Multi Host Download - 'Username' Blind SQL Injection

query"SELECT FROM ".SQLUSERSTABLE." WHERE username = '".$POST'username'."'"; Line 112: $DB-query"INSERT INTO ".SQLUSERSTABLE." VALUES'', '".$POST'username'."', '".md5$POST'userpass1'."', '', '".$SERVER'REMOTEADDR'."', '".$POST'useremail'."', '".$POST'private'."', '".time."', 'NORMAL',...

RunCMS Newbb_plus <= 0.92 Client IP Remote SQL Injection Exploit

Exploit for unknown platform in category web applications ================================================================ RunCMS Newbbplus "UnderWHAT?!" ; $mw-geometry '420x383' ; $mw-resizable0,0; $mw-Label-text = '', -font = 'Verdana 8',-foreground='red'-pack; $mw-Label-text = 'Newbbplus 'Taho...

Moderate: Red Hat Security Advisory: pam security, bug fix, and enhancement update

Updated pam packages that fix two security flaws, resolve several bugs, and add enhancements are now available for Red Hat Enterprise Linux 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Pluggable Authentication Modules PAM provide a system...

CVE-2007-4600 - Mathcad Protect Worksheet Vulnerability

Mathcad Security Vulnerability Briefing - CVE-2007-4600 Synopsis of Vulnerability ========================== The ‘Protect Worksheet’ functionality, used to protect sections Mathcad sheets from alterations, in versions 12 through 14 is easily bypassed allowing access to the protected data due to t...

WWWboard password disclosure

//A vulnerability found in WWWboard that shows the administrative user names and passwords. Althought the password is hashed, It can easily be decoded. //Effected versions: Version 2.0 ALPHA 2 //File name: passwd.txt //File location: http://victim/wwwboard/passwd.txt //Google dork:...

HyperBook Guestbook 1.3 - GBConfiguration.DAT Hashed Password Information Disclosure

HyperBook Guestbook 1.3 - GBConfiguration.DAT Hashed Password Information Disclosure source: https://www.securityfocus.com/bid/22754/info HyperBook Guestbook is prone to an information-disclosure vulnerability because the application fails to protect sensitive information. An attacker can exploit...