SA-CONTRIB-2013-069 - Password Policy - XSS

This module enables you to specify a certain level of password complexity aka. "password hardening" for user passwords in Drupal by defining a password policy. When viewing and editing a password policy, the module doesn't sufficiently filter the form text field input and display for the "Passwor...

GAO: Flaws in IRS Network Could Put Taxpayer Information in Jeopardy

The United States Government Accountability Office GAO believes that “serious weaknesses remain” in the ways that the Internal Revenue Service handles its internal network, problems that could directly implicate taxpayer data according to a report the regulatory group released on Friday. The...

Hacker attack techniques of brute force method-vulnerability warning-the black bar safety net

Principle:now the lottery is very hot, a person spend two dollars to buy a lottery ticket that might, 5 0 0 million, but this probability is very low;you landed a system, The system ask you a password, you just wrote one, actually Simon's right, this probability and buy the 2 bucks, 5 0 0 million...

A brute-force of art-vulnerability warning-the black bar safety net

Brute force is simple to say is to use all possible characters or numbers to try until all of the test completed so far. For example, say we have a password that only allows the use of two-digit numbers, to obtain this password we have to have try from 0 0-9 9 all numbers that are decimal, until ...

Windows Execute net user /ADD

Create a new user and add them to local administration group. Note: The specified password is checked for common complexity requirements to prevent the target machine rejecting the user for failing to meet policy requirements. Complexity check: 8-14 chars 1 UPPER, 1 lower, 1 digit/special This...

Network Solutions Crypt-PW Authentication-Scheme vulnerability

Problem: While crypt password authentication is not in and of itself very secure, Network Sulotions have made it even less so by including the first two characters of the password as the salt of the encrypted form. While the password is transmitted via a secure session, the encrypted form is...

PT-1998-1091 · Microsoft · Windows Nt

Name of the Vulnerable Software and Affected Versions: Windows NT affected versions not specified Description: The issue concerns a Windows NT domain where a user or administrator account has a password that can be easily guessed. Recommendations: For all affected versions, ensure that strong,...