CVE-2020-12772

An issue was discovered in Ignite Realtime Spark 2.8.3 and the ROAR plugin for it on Windows. A chat message can include an IMG element with a SRC attribute referencing an external host's IP address. Upon access to this external host, the NTLM hashes of the user are sent with the HTTP request. Th...

Design/Logic Flaw

An issue was discovered in Ignite Realtime Spark 2.8.3 and the ROAR plugin for it on Windows. A chat message can include an IMG element with a SRC attribute referencing an external host's IP address. Upon access to this external host, the NTLM hashes of the user are sent with the HTTP request. Th...

PT-2020-13255

Name of the Vulnerable Software and Affected Versions Ignite Realtime Spark version 2.8.3 Description A issue was discovered where a chat message can include an IMG element with a SRC attribute referencing an external host's IP address. Upon access to this external host, the NTLM hashes of the us...

PT-2020-2569

Name of the Vulnerable Software and Affected Versions Squid versions prior to 4.10 Description The issue exists due to insufficient input validation in the ext lm group acl, specifically in the NTLM authentication credentials parser. This can allow a remote attacker to terminate the Squid process...

CVE-2019-1338

A security feature bypass vulnerability exists in Microsoft Windows when a man-in-the-middle attacker is able to successfully bypass the NTLMv2 protection if a client is also sending LMv2 responses, aka 'Windows NTLM Security Feature Bypass Vulnerability'...

SAP Diagnostics Agent OS Command Injection Vulnerability

SAP Diagnostics Agent is a system diagnostic agent program from SAP. An operating system command injection vulnerability exists in SAP Diagnostic Agent LM-Service version 7.2. An attacker could exploit this vulnerability to inject code and take control of the application...

CVE-2019-0330: Improper Control of Generation of Code

The OS Command Plugin in the transaction GPAADMIN and the OSCommand Console of SAP Diagnostic Agent LM-Service, version 7.2, allow an attacker to inject code that can be executed by the application. An attacker could thereby control the behavior of the application...

Rockwell Automation Kinetix 350 Drive 2097-V31PR0-LM CIP Motion Drive

Binary data 753344.prm...

Rockwell Automation Kinetix 350 Drive 2097-V32PR2-LM CIP Motion Drive

Binary data 753347.prm...

Rockwell Automation Kinetix 350 Drive 2097-V34PR3-LM CIP Motion Drive

Binary data 753353.prm...

Rockwell Automation Kinetix 350 Drive 2097-V33PR6-LM CIP Motion Drive

Binary data 753352.prm...

Rockwell Automation Kinetix 350 Drive 2097-V33PR5-LM CIP Motion Drive

Binary data 753351.prm...

Rockwell Automation Kinetix 350 Drive 2097-V32PR4-LM CIP Motion Drive

Binary data 753348.prm...

Rockwell Automation Kinetix 350 Drive 2097-V33PR3-LM CIP Motion Drive

Binary data 753350.prm...

Rockwell Automation Kinetix350 2097-V31PR2-LM CIP Motion Drive

Binary data 753345.prm...

Rockwell Automation Kinetix 350 Drive 2097-V32PR0-LM CIP Motion Drive

Binary data 753346.prm...

Rockwell Automation Kinetix 350 Drive 2097-V34PR6-LM CIP Motion Drive

Binary data 753355.prm...

Rockwell Automation Kinetix 350 Drive 2097-V33PR1-LM CIP Motion Drive

Binary data 753349.prm...

Rockwell Automation Kinetix 350 Drive 2097-V34PR5-LM CIP Motion Drive

Binary data 753354.prm...

Ophcrack - A Windows Password Cracker Based On Rainbow Tables

Ophcrack is a free Windows password cracker based on rainbow tables. It is a very efficient implementation of rainbow tables done by the inventors of the method. It comes with a Graphical User Interface and runs on multiple platforms. Features: Runs on Windows, Linux/Unix, Mac OS X, ... Cracks LM...