Simple File Manager vX.X File Upload Vulenrability

Exploit for php platform in category web applications + Author: TUNISIAN CYBER + Exploit Title: Simple File Manager vX.X File Upload Vulenrability + Date: 11-12-2013 + Category: WebApp + Vendor:onedotoh.sourceforge.net/‎ + Google Dork: Do Some Work and you'll find it : + Tested on: Win7 , ubuntu...

CVE-2013-3271: Undefined Security Weakness

EMC RSA Authentication Agent for PAM 7.0 before 7.0.2.1 enforces the maximum number of login attempts within the PAM-enabled application codebase, instead of within the Agent codebase, which makes it easier for remote attackers to discover correct login credentials via a brute-force attack...

PT-2013-4063

Name of the Vulnerable Software and Affected Versions IBM InfoSphere Optim Data Growth for Oracle E-Business Suite versions 6.x through 9.x before 9.1.0.3 Description The issue concerns the transmission of login credentials in an unencrypted manner, allowing remote attackers to intercept sensitiv...

D-Link DSL-320B Authentication Bypass / Cross Site Scripting

Device: DSL-320B Firmware Version: EUDSL-320B v1.23 date: 28.12.2010 Vendor URL: http://www.dlink.com/de/de/home-solutions/connect/modems-and-gateways/dsl-320b-adsl-2-ethernet-modem ============ Vulnerability Overview: ============ Access to the Config file without authentication = full...

D-Link DSL-320B - Multiple Vulnerabilities

Device: DSL-320B Firmware Version: EUDSL-320B v1.23 date: 28.12.2010 Vendor URL: http://www.dlink.com/de/de/home-solutions/connect/modems-and-gateways/dsl-320b-adsl-2-ethernet-modem ============ Vulnerability Overview: ============ Access to the Config file without authentication = full...

Mozilla Drops Second Beta of Persona Privacy System

Mozilla has pushed out the second beta version of its Persona authentication system . The move is the latest step in the company’s campaign to rid the Web of passwords and make it easier for consumers to log on to sites regardless of the browser they’re using. The goal of Persona is that it will...

Unofficial Pakistan Intelligence website hacked

While the rest of the world engaged in cyber security conferences and Anonymous operations, an Indian patriotic hacker used the time to attack Unofficial Pakistan Intelligence agency ISI. Hacker going by name "Godzilla" today claimed to hack into one of the server belongs to ISI website...

Nmap NSE 6.01: telnet-brute

Tries to get Telnet login credentials by guessing usernames and passwords. SYNTAX: userdb: The filename of an alternate username database. unpwdb.passlimit: The maximum number of passwords 'passwords' will return default unlimited. passdb: The filename of an alternate password database...

Reflective/Stored XSS in Responsive Logo Slideshow Plugin Cross-Site Scripting Vulnerability

Exploit Title : Reflective/Stored XSS in Responsive Logo Slideshow Plugin Cross-Site Scripting Vulnerability Author: Aditya Balapure home: http://adityabalapure.blogspot.in/ Date: 18/02/13 software link: http://wordpress.org/extend/plugins/responsive-logo-slideshow/ CVE Assigned - CVE-2013-1759...

Bicololo malware spreading via 404 Error targeting Russians

A Trojan that attacks Russian Internet users using a new trick to spread itself. Known as "Bicololo" was first discovered in October 2012 and specially designed to steal login credentials from users. For this, the malware modify the system Hosts file i.e etc/hosts to host perfect phishing sites v...

Windows Gather FTP Explorer (FTPX) Credential Extraction

This module finds saved login credentials for the FTP Explorer FTPx FTP client for Windows. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'rexml/document' class MetasploitModule 'Windows Gather FTP Explorer...

CVE-2012-0959

Remote Login Service RLS 1.0.0 does not properly clear account information when switching users, which might allow physically proximate users to obtain login credentials...

CVE-2012-0959: Exposure of Sensitive Information to an Unauthorized Actor

Remote Login Service RLS 1.0.0 does not properly clear account information when switching users, which might allow physically proximate users to obtain login credentials...

PT-2012-2975

Name of the Vulnerable Software and Affected Versions Remote Login Service RLS version 1.0.0 Description The issue arises from the Remote Login Service RLS not properly clearing account information when switching users. This could potentially allow physically proximate users to obtain login...

PT-2012-4706

Name of the Vulnerable Software and Affected Versions Teiid Java Database Connectivity JDBC socket versions prior to 5.3.0 Description The issue allows remote attackers to obtain login credentials via a man-in-the-middle MITM attack because login messages are not encrypted by default, contrary to...

CVE-2012-0959

Remote Login Service RLS 1.0.0 does not properly clear account information when switching users, which might allow physically proximate users to obtain login credentials...

Fluger Edit 2 Blind SQL Injection / Cross Site Scripting Vulnerability

Exploit for php platform in category web applications ===================================================== Vulnerable Software: Fluger Edit v.2 || administration software Vendor: http://www.fluger.com/ Software License: Commercial Vulnerabilities: Blind SQL Injection And XSS Tested: In Wild...

Scientific Linux Security Update : firefox on SL4.x, SL5.x i386/x86_64

Several flaws were found in the processing of malformed web content. A web page containing malicious content could cause Firefox to crash or, potentially, execute arbitrary code as the user running Firefox. CVE-2009-1302, CVE-2009-1303, CVE-2009-1304, CVE-2009-1305 Several flaws were found in the...

WordPress Thinkun Remind Plugin 1.1.3 - Remote File Disclosure

WordPress Tinymce Thumbnail plugin is prone to a remote file disclosure vulnerability. It allows an attacker to compromise encrypted login credentials for or retrieve the device's administrator password allowing them to directly access the device's configuration control panel. Solution Update the...

WordPress Newsletter Plugin 1.5 - Remote File Disclosure

WordPress Newsletter plugin is prone to a remote file disclosure vulnerability. It allows an attacker to compromise encrypted login credentials for or retrieve the device's administrator password allowing them to directly access the device's configuration control panel. Solution Update the plugin...