Default credentials

SOSreport stores the md5 hash of the GRUB bootloader password in an archive, which allows local users to obtain sensitive information by reading the archive...

UBUNTU-CVE-2014-0246

SOSreport stores the md5 hash of the GRUB bootloader password in an archive, which allows local users to obtain sensitive information by reading the archive...

CVE-2014-0246

The CVE-2014-0246 issue affects SOSreport: it stores the md5 hash of the GRUB bootloader password inside an archive, enabling local users to read sensitive information. This is a local information-disclosure risk tied to SOSreport. Some connected advisories describe Fedora updates to sos packages...

CVE-2014-0246

SOSreport stores the md5 hash of the GRUB bootloader password in an archive, which allows local users to obtain sensitive information by reading the archive...

Threat Outbreak Alert: Email Messages with Malicious Attachments on May 30, 2014

Medium Alert ID: 34405 First Published: 2014 May 29 13:19 GMT Last Updated: 2014 May 31 03:50 GMT Version: 2 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain an attachment for the recipient. The email message attempts to convince the...

Threat Outbreak Alert: Fake Product Requirements List Email Messages on May 28, 2014

Medium Alert ID: 34385 First Published: 2014 May 29 13:01 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a product requirements list for the recipient. The email message attempts to convince the recipient to open the...

Threat Outbreak Alert: Email Messages with Malicious Attachments on May 28, 2014

Medium Alert ID: 34390 First Published: 2014 May 28 16:20 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that contain an attachment relating to a purchase order payment for the recipient. The email message attempts to convince the recipient ...

Threat Outbreak Alert: Email Messages with Malicious Attachment on May 27, 2014

Medium Alert ID: 34370 First Published: 2014 May 27 19:20 GMT Last Updated: 2014 May 29 12:59 GMT Version: 2 Summary Cisco Security has detected significant activity related to German-language spam email messages that contain an attachment for the recipient. The email message attempts to convince...

oclHashcat v1.2 - GPGPU-based Multi-hash Cracker

oclHashcat is a GPGPU-based multi-hash cracker using a brute-force attack implemented as mask attack, combinator attack, dictionary attack, hybrid attack, mask attack, and rule-based attack. This GPU cracker is a fusioned version of oclHashcat-plus and oclHashcat-lite. GPU Driver requirements: NV...

Moscrack - Cluster Cracking Tool For WPA Keys

Moscrack is a PERL application designed to facilitate cracking WPA keys in parallel on a group of computers. This is accomplished by use of either Mosix clustering software, SSH or RSH access to a number of nodes. With Moscrack’s new plugin framework, hash cracking has become possible. SHA256/512...

Srun3000命令执行第4弹

简要描述： 第4弹 详细说明： getonlineuser.php 这回有个key需算MD5 不用登陆。 $key = "oeit&^df"; $uname = $GET'uname'; $action = $GET'action'; if $GET'k' != md5 $action.$uname.$key //有个验证 算一下就好。 exit ; switch $action case "show4" : $pfd = popen "/srun3/bin/onlineuser -4 -u ".$uname, "r" ; //这里 if $pfd while $con = fgets...

Threat Outbreak Alert: Fake Money Transfer Notification Email Messages on May 21, 2014

Medium Alert ID: 34318 First Published: 2014 May 21 14:14 GMT Version: 1 Summary Cisco Security has detected significant activity related to Portuguese-language spam email messages that claim to contain payment transfer details for the recipient. The text in the email message attempts to convince...

Threat Outbreak Alert: Email Messages with Malicious Attachments on May 21, 2014

Medium Alert ID: 34316 First Published: 2014 May 21 14:07 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain an attachment for the recipient. The text in the email message attempts to convince the recipient to open the...

Threat Outbreak Alert: Fake Security Program Attachment Email Messages on May 19, 2014

Medium Alert ID: 34282 First Published: 2014 May 19 20:19 GMT Last Updated: 2014 May 20 13:47 GMT Version: 2 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a software program for the recipient. The text in the email message attempts t...

CVE-2013-7385

LiveZilla 5.1.2.1 and earlier includes the MD5 hash of the operator password in plaintext in Javascript code that is generated by lz/mobile/chat.php, which allows remote attackers to obtain sensitive information and gain privileges by accessing the loginName and loginPassword variables using an...

Cross site scripting

LiveZilla 5.1.2.1 and earlier includes the MD5 hash of the operator password in plaintext in Javascript code that is generated by lz/mobile/chat.php, which allows remote attackers to obtain sensitive information and gain privileges by accessing the loginName and loginPassword variables using an...

CVE-2013-7385

Technical details about this CVE are not publicly available in the provided Connected documents. Monitor for updates.

CVE-2013-7385

LiveZilla 5.1.2.1 and earlier includes the MD5 hash of the operator password in plaintext in Javascript code that is generated by lz/mobile/chat.php, which allows remote attackers to obtain sensitive information and gain privileges by accessing the loginName and loginPassword variables using an...

Threat Outbreak Alert: Fake Email Messages Distributing Malicious Software on May 17, 2014

Medium Alert ID: 34264 First Published: 2014 May 19 13:24 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that contain malicious software for the recipient. The text in the email message attempts to convince the recipient to open the attachme...

Threat Outbreak Alert: Fake Bank Account Transfer Notification Email Messages on May 15, 2014

Medium Alert ID: 34255 First Published: 2014 May 16 13:49 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a bank payment transfer notification for the recipient. The text in the email message attempts to convince the...