FTP Media Server 3.0 - Authentication Bypass Denial of Service

FTP Media Server 3.0 - Authentication Bypass Denial of Service !/usr/bin/env python ================================================================================== Exploit Title: FTP Media Server 3.0 - Authentication Bypass and Denial of Service Date: 2015-05-25 Exploit Author: Wh1t3Rh1n0...

CVE-2014-3053: Improper Authentication

The Local Management Interface LMI in IBM Security Access Manager ISAM for Mobile 8.0 with firmware 8.0.0.0 through 8.0.0.3 and IBM Security Access Manager for Web 7.0, and 8.0 with firmware 8.0.0.2 and 8.0.0.3, allows remote attackers to bypass authentication via a login action with invalid...

CVE-2013-7239

memcached before 1.4.17 allows remote attackers to bypass authentication by sending an invalid request with SASL credentials, then sending another request with incorrect SASL credentials...

Debian Security Advisory DSA 2832-1 (memcached - several vulnerabilities)

Multiple vulnerabilities have been found in memcached, a high-performance memory object caching system. The Common Vulnerabilities and Exposures project identifies the following issues: CVE-2011-4971 Stefan Bucur reported that memcached could be caused to crash by sending a specially crafted...

JBoss: Datasource connection manager returns valid connection for wrong credentials when using security-domains

The IronJacamar container before 1.0.12.Final for JBoss Application Server, when allow-multiple-users is enabled in conjunction with a security domain, does not use the credentials supplied in a getConnection function call, which allows remote attackers to obtain access to an arbitrary datasource...

CVE-2011-5117

Sophos SafeGuard Enterprise Device Encryption 5.x through 5.50.8.13, Sophos SafeGuard Easy Device Encryption Client 5.50.x, and Sophos Disk Encryption 5.50.x have a delay before removal of 1 out-of-date credentials and 2 invalid credentials, which allows physically proximate attackers to defeat t...

Backup to CIFS Share fails with "Failed to call RPC function 'FcIsExists': The user name or password is incorrect."

Error Change in Veeam Backup & Replication 12.x Starting in Veeam Backup & Replication 12, the error message that will be displayed when the credentials to access the SMB share are invalid was changed. The underlying error is still the same and is recorded in the log file:...

qpopper user existance information leak

During USER/PASS authentication behaviour for invalid username and password is different...

CVE-2002-0545: Undefined Security Weakness

Cisco Aironet before 11.21 with Telnet enabled allows remote attackers to cause a denial of service reboot via a series of login attempts with invalid usernames and passwords...

Security Update for ISA Server 2006 Supportability Pack (KB 970811)

When publishing a Web server using forms-based authentication with Radius one-time password OTP as the credentials authority and Kerberos constrained delegation, it may be possible to bypass the form authentication and log on using invalid credentials...