Lucene search
+L

522 matches found

exploitpack
exploitpack
added 2013/02/05 12:00 a.m.45 views

D-Link DIR-600 DIR-300 (Rev B) - Multiple Vulnerabilities

D-Link DIR-600 DIR-300 Rev B - Multiple Vulnerabilities Device Name: DIR-600 / DIR 300 - HW rev B1 Vendor: D-Link ============ Vulnerable Firmware Releases - DIR-300: ============ Firmware Version : 2.12 - 18.01.2012 Firmware Version : 2.13 - 07.11.2012 ============ Vulnerable Firmware Releases -...

0.3AI score
SaveExploits0
OSV
OSV
added 2012/11/30 10:55 p.m.12 views

CVE-2012-4571

Python Keyring 0.9.1 does not securely initialize the cipher when encrypting passwords for CryptedFileKeyring files, which makes it easier for local users to obtain passwords via a brute-force attack...

5.9AI score
SaveExploits0References4
NVD
NVD
added 2012/11/18 9:55 p.m.20 views

CVE-2012-4946

Agile FleetCommander and FleetCommander Kiosk before 4.08 use an XOR format for password encryption, which makes it easier for context-dependent attackers to obtain sensitive information by reading a key file and the encrypted strings...

5CVSS6.2AI score0.012EPSS
SaveExploits0References3
CVE
CVE
added 2012/11/18 9:00 p.m.62 views

CVE-2012-4946

Agile FleetCommander and FleetCommander Kiosk before 4.08 store passwords with a reversible XOR encryption, enabling an attacker who can read the password key file and encrypted strings to obtain sensitive information. This CVE is documented by NVD and CVE records; CERT notes updates to 4.08/4.08...

5CVSS6.3AI score0.012EPSS
SaveExploits0References3Affected Software2
Cvelist
Cvelist
added 2012/11/18 9:00 p.m.36 views

CVE-2012-4946

Agile FleetCommander and FleetCommander Kiosk before 4.08 use an XOR format for password encryption, which makes it easier for context-dependent attackers to obtain sensitive information by reading a key file and the encrypted strings...

6.2AI score0.012EPSS
SaveExploits0References3
securityvulns
securityvulns
added 2012/11/14 12:00 a.m.69 views

Weak password encryption on Huawei products

Weak password encryption on Huawei products =========================================== ADVISORY INFORMATION Title: Weak password encryption on Huawei products Release date: 13/11/2012 Credits: Roberto Paleari, Emaze Networks [email protected] Ivan Speziale, Emaze Networks...

7.1AI score
SaveExploits0
zdt
zdt
added 2012/11/14 12:00 a.m.67 views

Huawei Quidway / Huawei CX600 Weak Password Encryption

Various Huawei products use DES without any salt to encrypt passwords. Included vulnerable are the Huawei Quidway series and Huawei CX600. Weak password encryption on Huawei products =========================================== ADVISORY INFORMATION Title: Weak password encryption on Huawei product...

7AI score
SaveExploits0
exploitpack
exploitpack
added 2012/11/13 12:00 a.m.15 views

Huawei (Multiple Products) - Password Encryption

Huawei Multiple Products - Password Encryption source: https://www.securityfocus.com/bid/56510/info Multiple Huawei products are prone to a weak password encryption weakness. Successful exploits may allow an attacker to decrypt stored passwords; this may aid in further attacks. The following are...

0.1AI score
SaveExploits0
Exploit DB
Exploit DB
added 2012/11/13 12:00 a.m.76 views

Huawei (Multiple Products) - Password Encryption

source: https://www.securityfocus.com/bid/56510/info Multiple Huawei products are prone to a weak password encryption weakness. Successful exploits may allow an attacker to decrypt stored passwords; this may aid in further attacks. The following are vulnerable: Huawei Quidway series Huawei CX600...

6.5CVSS5.2AI score0.03453EPSS
SaveExploits1
OpenVAS
OpenVAS
added 2012/09/07 12:00 a.m.22 views

Fedora Update for gnome-keyring FEDORA-2012-12368

Check for the Version of gnome-keyring OpenVAS Vulnerability Test Fedora Update for gnome-keyring FEDORA-2012-12368 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

4.4CVSS6.5AI score0.00477EPSS
SaveExploits1References2
myhack58
myhack58
added 2012/07/31 12:00 a.m.15 views

Being the top academic system in the latest sql injection vulnerability fix-bug warning-the black bar safety net

You also again for the exam hanging branches and trouble? you also then for College how to sister phone and tangled? -, do you want to quickly find a school of nice girl?, then please see below 1. Classroom query at sql injection, as shown in Figure ! 1 union select NULL,owner from alltables brok...

7.2AI score
SaveExploits0
OSV
OSV
added 2012/06/29 5:55 p.m.10 views

CVE-2012-3818

The fpm exporter in Revelation 0.4.13-2 and earlier encrypts the version number but not the password when exporting a file, which might allow local users to obtain sensitive information...

6.5AI score
SaveExploits0References2
The Hacker News
The Hacker News
added 2012/06/10 12:51 p.m.8 views

Online game 'League of Legends' Compromised

Online game 'League of Legends' Compromised A recent slew of security failures have left countless accounts hacked at sites like Linkedin and eHarmoney. Now League of Legends is the latest database to suffer from hackers this week. Riot has sent out a mail to registered League of Legends players ...

6.5AI score
SaveExploits0
CheckPoint Security
CheckPoint Security
added 2012/06/02 9:00 p.m.24 views

Check Point response to "libcrypt 'crypt()' Password Encryption Weakness" (CVE-2012-2143)

...

4.3CVSS1.8AI score0.05734EPSS
SaveExploits0Affected Software1
myhack58
myhack58
added 2012/04/26 12:00 a.m.22 views

Most soil group purchase 2. 0_20110901 the background to BYPASS the login background 0day analysis-vulnerability warning-the black bar safety net

Two days before in the black bar to see the most soil group purchase network to BYPASS the login background 0day original of address: the vulnerability information for this vulnerability last year are already out, but the black bar article update comparing fall behind!, the Feel exploit tactics a...

7.2AI score
SaveExploits0
NVD
NVD
added 2011/09/20 10:55 a.m.29 views

CVE-2011-1509

The encryptPassword function in Login.js in ManageEngine ServiceDesk Plus SDP 8012 and earlier uses a Caesar cipher for encryption of passwords in cookies, which makes it easier for remote attackers to obtain sensitive information by sniffing the network...

5CVSS6AI score0.00787EPSS
SaveExploits1References5
Prion
Prion
added 2011/09/20 10:55 a.m.25 views

Design/Logic Flaw

The encryptPassword function in Login.js in ManageEngine ServiceDesk Plus SDP 8012 and earlier uses a Caesar cipher for encryption of passwords in cookies, which makes it easier for remote attackers to obtain sensitive information by sniffing the network...

5CVSS6.6AI score0.00787EPSS
SaveExploits1References5Affected Software1
Cvelist
Cvelist
added 2011/09/20 10:00 a.m.37 views

CVE-2011-1509

The encryptPassword function in Login.js in ManageEngine ServiceDesk Plus SDP 8012 and earlier uses a Caesar cipher for encryption of passwords in cookies, which makes it easier for remote attackers to obtain sensitive information by sniffing the network...

6AI score0.00787EPSS
SaveExploits1References5
securityvulns
securityvulns
added 2011/06/11 12:00 a.m.286 views

Multiple vulnerabilities in several IP camera products

Multiple vulnerabilities in several IP camera products ====================================================== ADVISORY INFORMATION Title: Multiple vulnerabilities in several IP camera products Release date: 08/06/2011 Last update: 08/06/2011 Credits: Roberto Paleari, Emaze Networks S.p.A...

0.3AI score
SaveExploits0
Packet Storm
Packet Storm
added 2011/06/09 12:00 a.m.50 views

Multiple IP Cameras Remote Command Execution

Multiple vulnerabilities in several IP camera products ====================================================== ADVISORY INFORMATION Title: Multiple vulnerabilities in several IP camera products Release date: 08/06/2011 Last update: 08/06/2011 Credits: Roberto Paleari, Emaze Networks S.p.A...

0.5AI score
SaveExploits0
Rows per page
Query Builder