CVE-2008-2279

Freelance Auction Script 1.0 stores user passwords in plaintext in the tblusers table, which allows attackers to gain privileges by reading the table...

Design/Logic Flaw

Symantec Altiris Deployment Solution before 6.9.164 stores the Deployment Solution Agent aka AClient password in cleartext in memory, which allows local users to obtain sensitive information by dumping the AClient.exe process memory...

Microsoft Expression Media Plaintext Password Storage Weakness

CVE-2007-5470 Microsoft Expression Media is prone to a weakness because passwords are stored in plain-text format. This issue stems from a design error in the catalog password-protection feature. Attackers could use this issue in conjunction with other vulnerabilities in a host to gain access to...

QQ website login RSA encrypted transmission defect analysis-vulnerability warning-the black bar safety net

! QQ Thanks to anonymous people posting QQ website login not using https is encrypted, instead of using the RSA asymmetric encryption to protect transmission of passwords and sensitive information security. QQ is in javascript to achieve the entire process. This idea is very novel, but is also...

contentcustom-disclose.txt

CONTENTCustomizer Trick: Hit Ctrl+Y on a page that ContentCustomizer controls and it brings you to the login screen ; Dork: inurl:"generator/default.php?doc=" Other fun stuff: dialog.php?action=del&doc='+pagename // Delete dialog.php?action=delbackup&doc='+pagename // Delete Backup...

CVE-2003-1482

The backup configuration file for Microsoft MN-500 wireless base station stores administrative passwords in plaintext, which allows local users to gain access...

CVE-2003-1482

CVE-2003-1482 affects the Microsoft MN-500 wireless base station. The issue is that the backup configuration file stores administrative passwords in plaintext, which enables local users to gain access. The available connected documents corroborate this exact description; no public details about a...

CVE-2003-1437

BEA WebLogic Express and WebLogic Server 7.0 and 7.0.0.1 store passwords in plaintext when a keystore is used to store a private key or trust certificate authorities. This plaintext storage enables local users to gain access. The vulnerability affects the authentication/secret handling in the key...

Fragile shangdu v1. 0 1 Press system-vulnerability warning-the black bar safety net

Last weekend at the forum saw a friend made a penetration shangdu official station of the post, the points go see a bit of the original is one of the official demo station of penetration. Penetration of the condition is the default password into the background, and then use the program whole and ...

CVE-2004-2723

CVE-2004-2723 affects NessusWX 1.4.4, which stores account passwords in plaintext in .session files. This local-privilege–limited vulnerability can allow local users to obtain passwords; the provided sources do not specify a remediation or fix version. No exploitation details are provided in the ...

CVE-2004-2722

Nessus 2.0.10a stores account passwords in plaintext in .nessusrc files, enabling local users to obtain passwords. This issue is noted with vendor dispute. A remediation suggestion is to restrict access to .nessusrc files; no fixed version is provided in the sources.

Firebird Database Client Plaintext Password

Binary data 4226.prm...

Firebird Database Server Plaintext Password

Binary data 4227.prm...

Get cuteftp of ssh password-vulnerability warning-the black bar safety net

Yesterday to take to an administrator of the machine, the analysis above him the file in the Application Data directory to find the cuteftp dat file, and quickly. import into cuteftp get the password, the above is all within the network ip of the ftp connection, the network is a large network...

Chatness 2.5.3 - '/options.php/save.php' Remote Code Execution

?/ Files: options.php, save.php Affects: Chatness = 2.5.3 Date: 12th April 2007 Issue Description: =========================================================================== Chatness suffers with two main vulnerabilities, the first of these in /admin/options.php the problems occur because the...

CVE-2007-1940

IBM Tivoli Business Service Manager TBSM 4.1 before Interim Fix 1 logs passwords in plaintext, which allows local users to obtain sensitive information by reading 1 ncisetup.db or 2 msi.log...

Information disclosure

IBM Tivoli Business Service Manager TBSM 4.1 before Interim Fix 1 logs passwords in plaintext, which allows local users to obtain sensitive information by reading 1 ncisetup.db or 2 msi.log...

CVE-2007-1940

IBM Tivoli Business Service Manager (TBSM) 4.1 before Interim Fix 1 logs passwords in plaintext, enabling local users to read sensitive data from ncisetup.db or msi.log. Root cause: plaintext password storage during setup/logging. Affected component: TBSM 4.1 prior to Interim Fix 1. Impact: poten...

CVE-2006-6182

CVE-2006-6182 affects the GNotebook 0.7.0.1 gadget for Google Desktop. The vulnerability is that Gmail passwords are stored in plaintext in the log file at %SYSTEMDRIVE%\temp\Gnotebook.txt, enabling local users to read the file and obtain passwords. The available sources confirm local access as t...

Conti FTP不安全默认帐号及目录遍历漏洞

Conti FtpServer是Windows平台下的多线程FTP服务器。 Conti FTPServer在处理传送给各种命令的参数时存在输入验证错误，允许攻击者通过目录遍历攻击列出并下载FTP根目录以外任意位置的文件。 Conti FTPServer以明文将用户口令存储到了MyServerSettings.ini文件中，因此攻击者可以轻易的检索到口令，获得非授权访问。 Conti FTPServer 1.0 Build 2.8 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本：...