7694 matches found
VBZoom 1.0 - SQL Injection
source: https://www.securityfocus.com/bid/5919/info A SQL injection vulnerability has been discovered in VBZoom v1.01. Due to insufficient sanitization of variables used to construct SQL queries, it is possible to modify the logic of a query, via a malicious request. Exploiting this issue could...
CVE-2001-1040
CVE-2001-1040 affects HP LaserJet and possibly other JetDirect devices, where certain power-off behavior resets the admin password. The result is that a remote attacker could gain administrative access without a password after the device is turned off, per the available description. The provided ...
Vulnerability in all versions of DCForum from dcscripts.com
When a user requests a new password for his account, a new password is generated and sent to the requester anyone that knows the username+email information, which is usually available in "user profile". The problem is that the password is simply the first 6 characters of the user's SessionID, whi...
CVE-2001-1040
HP LaserJet, and possibly other JetDirect devices, resets the admin password when the device is turned off, which could allow remote attackers to access the device without the password...
ISSalert: Internet Security Systems Security Advisory: Multiple vulnerabilities in the WatchGuard SOHO Firewall
TO UNSUBSCRIBE: email "unsubscribe alert" in the body of your message to [email protected] Contact [email protected] for help with any problems! --------------------------------------------------------------------------- -----BEGIN PGP SIGNED MESSAGE----- Internet Security Systems Security...
PowerScripts PlusMail WebConsole 1.0 - Weak Authentication (3)
PowerScripts PlusMail WebConsole 1.0 - Weak Authentication 3 // source: https://www.securityfocus.com/bid/2653/info PowerScripts PlusMail Web Control Panel is a web-based administration suite for maintaining mailing lists, mail aliases, and web sites. It is reportedly possible to change the...
PowerScripts PlusMail WebConsole 1.0 - Weak Authentication (3)
// source: https://www.securityfocus.com/bid/2653/info PowerScripts PlusMail Web Control Panel is a web-based administration suite for maintaining mailing lists, mail aliases, and web sites. It is reportedly possible to change the administrative username and password without knowing the current...
PowerScripts PlusMail WebConsole 1.0 - Weak Authentication (2)
PowerScripts PlusMail WebConsole 1.0 - Weak Authentication 2 // source: https://www.securityfocus.com/bid/2653/info PowerScripts PlusMail Web Control Panel is a web-based administration suite for maintaining mailing lists, mail aliases, and web sites. It is reportedly possible to change the...
PowerScripts PlusMail WebConsole 1.0 - Weak Authentication (2)
// source: https://www.securityfocus.com/bid/2653/info PowerScripts PlusMail Web Control Panel is a web-based administration suite for maintaining mailing lists, mail aliases, and web sites. It is reportedly possible to change the administrative username and password without knowing the current...
slmail3.txt
Date: Fri, 4 Sep 1998 16:38:13 +0100 From: Mnemonix Subject: SL-Mail ver 3.0.2423 security Hi, I thought I'd write to advise of a security issue with SLMail version 3.0.3423. Other versions may also be affected. During the install you choose whether the passowrd is set to the account name,...
Linux imapd Remote Overflow File Retrieve Exploit
Exploit for linux platform in category remote exploits ================================================= Linux imapd Remote Overflow File Retrieve Exploit ================================================= / This is the remote exploit of the hole in the imap daemon, for Linux. The instruction code...
Password reset phishing vulnerability
More info at https://laravel.com/docs/5.4/releaseslaravel-5.4.22...
XSS vulnerability on password reset page
Impact For Mautic versions prior to 3.3.4, there is an XSS vulnerability on Mautic's password reset page where a vulnerable parameter, "bundle," in the URL could allow an attacker to execute Javascript code. The attacker would be required to convince or trick the target into clicking a password...