International Islamic University Chittagong: Admin access on http://119.18.148.140/iiuc/ through leaked credentials

The researcher was able to access admin panel using admin credential that leaked as a plain text through error message...

Yahoo Investigates 200 Million Alleged Accounts For Sale On Dark Web

Yahoo says it is investigating reports of 200 million user credentials advertised for sale on the Dark Web by a hacker that goes by the handle “peaceofmind”. The Yahoo credentials, according to the site listing the database for sale, includes usernames, passwords hashed using the MD5 algorithm,...

用友某服务器sql注入

简要描述： 路过. 详细说明： http://academy.yonyou.com/Pxplan1.aspx?infoid=109 http://academy.yonyou.com/News1.aspx?newsid=105 http://academy.yonyou.com/openCourses.aspx?year=2014 Place: GET Parameter: infoid Type: boolean-based blind Title: AND boolean-based blind - WHERE or HAVING clause Payload: infoid=109...

Cisco CallManager / Unified Communications Manager privilege escalation

During authentication process for address book synchronization, full access account credentials are leaked to client...