8483 matches found
WordPress < 2.8.4 Password Reset
The version of WordPress hosted on the remote web server has a flaw in the password reset mechanism. Validation of the secret user activation key can be bypassed by providing an array instead of a string. This allows anyone to reset the password of the first user in the database, which is usually...
2WIRE Gateway Authentication Bypass & Password Reset
2WIRE GATEWAY AUTHENTICATION BYPASS & PASSWORD RESET ==================================================== DESCRIPTION ----------------- There is an authentication bypass vulnerability in page=CD35SETUP01 that allows you to set a new password even if the password was previously set. By setting a n...
Gazelle CMS 1.0 Multiple Vulnerabilities / RCE Exploit
Exploit for unknown platform in category web applications ====================================================== Gazelle CMS 1.0 Multiple Vulnerabilities / RCE Exploit ====================================================== !/bin/bash Gazelle CMS 1.0 Multiple Vulnerabilities Script Download:...
Gazelle CMS 1.0 - Multiple Vulnerabilities Remote Code Execution
Gazelle CMS 1.0 - Multiple Vulnerabilities Remote Code Execution !/bin/bash Gazelle CMS 1.0 Multiple Vulnerabilities Script Download: http://www.anantasoft.com/index.php?Gazelle%20CMS/Download Found by whitesheep on 11/08/2009 Contact: [email protected] - https://www.ihteam.net Need...
2WIRE Gateway - Authentication Bypass Password Reset (1)
2WIRE Gateway - Authentication Bypass Password Reset 1 2WIRE GATEWAY AUTHENTICATION BYPASS & PASSWORD RESET 08/04/09 ============================================================== DESCRIPTION ----------------- There is an authentication bypass vulnerability in page=CD35SETUP01 that allows you to...
2WIRE Gateway - Authentication Bypass / Password Reset (1)
2WIRE GATEWAY AUTHENTICATION BYPASS & PASSWORD RESET 08/04/09 ============================================================== DESCRIPTION ----------------- There is an authentication bypass vulnerability in page=CD35SETUP01 that allows you to set a new password even if the password was previously...
2WIRE Gateway Authentication Bypass & Password Reset Vulnerabilities
Exploit for hardware platform in category remote exploits ==================================================================== 2WIRE Gateway Authentication Bypass & Password Reset Vulnerabilities ==================================================================== 2WIRE GATEWAY AUTHENTICATION...
2Wire routers unauthorized access
It's possible to reset password without knowledge of old one...
Gazelle CMS 1.0 Multiple Vulnerabilities / RCE Exploit
No description provided by source. !/bin/bash Gazelle CMS 1.0 Multiple Vulnerabilities Script Download: http://www.anantasoft.com/index.php?Gazelle%20CMS/Download Found by whitesheep on 11/08/2009 Contact: [email protected] - https://www.ihteam.net Need magicquotegpc Off for RCE and LFI...
WordPress < 2.8.4 'wp-login.php' 'key' Parameter Remote Administrator Password Reset (uncredentialed check)
According to its version number, the version of WordPress running on the remote server has a flaw in the password reset mechanism. Validation of the secret user activation key can be bypassed by providing an array instead of a string. This allows anyone to reset the password of the first user in...
Gazelle CMS 1.0 - Multiple Vulnerabilities / Remote Code Execution
!/bin/bash Gazelle CMS 1.0 Multiple Vulnerabilities Script Download: http://www.anantasoft.com/index.php?Gazelle%20CMS/Download Found by whitesheep on 11/08/2009 Contact: [email protected] - https://www.ihteam.net Need magicquotegpc Off for RCE and LFI Thanks to r00t PASSWORD RESET:...
WordPress Hit by Password-Reset Vulnerability
Researchers are sounding the alarm for a serious administrator password-reset vulnerability affecting the latest version of WordPress, the popular open-source blog publishing platform. The flaw, which can be exploited via the browser, gives an attacker a trivial way to compromise the admin accoun...
Spiceworks 3.6.31847 XSS / XSRF
nGenuity Information Services - Security Advisory Advisory ID: NGENUITY-2009-009 - Spiceworks Multiple Vulnerabilities XSS & CSRF Application: Spiceworks 3.6.31847 Vendor: Spiceworks Vendor website: http://www.spiceworks.com Author: Adam Baldwin [email protected] Class: XSS, CSRF I...
WordPress 2.8.3 Admin Reset Password
============================================= - Release date: August 10th, 2009 - Discovered by: Laurent Gaffié - Severity: Medium ============================================= I. VULNERABILITY ------------------------- WordPress = 2.8.3 Remote admin reset password II. BACKGROUND...
WordPress Core 2.8.3 - Remote Admin Reset Password
============================================= - Release date: August 10th, 2009 - Discovered by: Laurent Gaffié - Severity: Medium ============================================= I. VULNERABILITY ------------------------- WordPress = 2.8.3 Remote admin reset password II. BACKGROUND...
[NGENUITY] - Spiceworks Multiple Vulnerabilities (XSS & CSRF)
nGenuity Information Services - Security Advisory Advisory ID: NGENUITY-2009-009 - Spiceworks Multiple Vulnerabilities XSS & CSRF Application: Spiceworks 3.6.31847 Vendor: Spiceworks Vendor website: http://www.spiceworks.com Author: Adam Baldwin [email protected] Class: XSS, CSRF I...
wordpress -- remote admin password reset vulnerability
WordPress reports: A specially crafted URL could be requested that would allow an attacker to bypass a security check to verify a user requested a password reset. As a result, the first account without a key in the database usually the admin account would have its password reset and a new passwor...
Alternative get 94kk Forum administrator password to get the shell-vulnerability warning-the black bar safety net
Excerpt from: Qglfnt's Blog Not much to say, directly into the topic. Can to on Google to the“Powered by 94kk 2.1.0”this is 94KKBBS the latest edition, as a keyword search. Just find a forum, click on“login”in the login do not fill in the user name and password, but directly click on the“Forgot...
Modify the MYSQL password and the password to crack the commonly used method-vulnerability warning-the black bar safety net
Modify the MYSQL password and the password to crack the commonly used method First statement a little, in most cases, modify the MySQL is need to have mysql in root, so the General user cannot change the password, unless the request is an administrator. Method one Using phpmyadmin, this is the...
ZenPhoto Gallery 1.2.5 Password Reset
?php Zen Photo Adminstrator Password Steal/Reset Exploit +================================================================+ Discovered and coded by petros at dusecurity.com +----------------------------------------------------------------+ Affects: ZenPhoto Gallery 1.2.5...