CVE-2003-1437

BEA WebLogic Express and WebLogic Server 7.0 and 7.0.0.1 store passwords in plaintext when a keystore is used to store a private key or trust certificate authorities. This plaintext storage enables local users to gain access. The vulnerability affects the authentication/secret handling in the key...

Fragile shangdu v1. 0 1 Press system-vulnerability warning-the black bar safety net

Last weekend at the forum saw a friend made a penetration shangdu official station of the post, the points go see a bit of the original is one of the official demo station of penetration. Penetration of the condition is the default password into the background, and then use the program whole and ...

CVE-2004-2722

Nessus 2.0.10a stores account passwords in plaintext in .nessusrc files, enabling local users to obtain passwords. This issue is noted with vendor dispute. A remediation suggestion is to restrict access to .nessusrc files; no fixed version is provided in the sources.

CVE-2004-2723

CVE-2004-2723 affects NessusWX 1.4.4, which stores account passwords in plaintext in .session files. This local-privilege–limited vulnerability can allow local users to obtain passwords; the provided sources do not specify a remediation or fix version. No exploitation details are provided in the ...

Firebird Database Client Plaintext Password

Binary data 4226.prm...

Firebird Database Server Plaintext Password

Binary data 4227.prm...

Get cuteftp of ssh password-vulnerability warning-the black bar safety net

Yesterday to take to an administrator of the machine, the analysis above him the file in the Application Data directory to find the cuteftp dat file, and quickly. import into cuteftp get the password, the above is all within the network ip of the ftp connection, the network is a large network...

Chatness 2.5.3 - '/options.php/save.php' Remote Code Execution

?/ Files: options.php, save.php Affects: Chatness = 2.5.3 Date: 12th April 2007 Issue Description: =========================================================================== Chatness suffers with two main vulnerabilities, the first of these in /admin/options.php the problems occur because the...

CVE-2007-1940

IBM Tivoli Business Service Manager TBSM 4.1 before Interim Fix 1 logs passwords in plaintext, which allows local users to obtain sensitive information by reading 1 ncisetup.db or 2 msi.log...

Information disclosure

IBM Tivoli Business Service Manager TBSM 4.1 before Interim Fix 1 logs passwords in plaintext, which allows local users to obtain sensitive information by reading 1 ncisetup.db or 2 msi.log...

CVE-2007-1940

IBM Tivoli Business Service Manager (TBSM) 4.1 before Interim Fix 1 logs passwords in plaintext, enabling local users to read sensitive data from ncisetup.db or msi.log. Root cause: plaintext password storage during setup/logging. Affected component: TBSM 4.1 prior to Interim Fix 1. Impact: poten...

CVE-2006-6182

CVE-2006-6182 affects the GNotebook 0.7.0.1 gadget for Google Desktop. The vulnerability is that Gmail passwords are stored in plaintext in the log file at %SYSTEMDRIVE%\temp\Gnotebook.txt, enabling local users to read the file and obtain passwords. The available sources confirm local access as t...

Conti FTP不安全默认帐号及目录遍历漏洞

Conti FtpServer是Windows平台下的多线程FTP服务器。 Conti FTPServer在处理传送给各种命令的参数时存在输入验证错误，允许攻击者通过目录遍历攻击列出并下载FTP根目录以外任意位置的文件。 Conti FTPServer以明文将用户口令存储到了MyServerSettings.ini文件中，因此攻击者可以轻易的检索到口令，获得非授权访问。 Conti FTPServer 1.0 Build 2.8 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本：...

CVE-2006-5982

SeleniumServer FTP Server 1.0, and possibly earlier, stores user passwords in plaintext in the Servers directory, which allows attackers to obtain passwords by reading the file. NOTE: the provenance of this information is unknown; details are obtained from third party sources...

CVE-2006-4642

AuditWizard 6.3.2 vulnerable when using Remote Audit: administrator password is logged in plaintext to LaytonCmdSvc.log, enabling local users to read sensitive information. The issue is evidenced by the CVE-2006-4642 records (NVD/NVD-derived description) and related advisories. No remediation det...

CVE-2006-4186

The iManager in eMBoxClient.jar in Novell eDirectory 8.7.3.8 writes passwords in plaintext to a log file, which allows local users to obtain passwords by reading the file...

CVE-2006-4186

The iManager in eMBoxClient.jar in Novell eDirectory 8.7.3.8 writes passwords in plaintext to a log file, which allows local users to obtain passwords by reading the file...

CVE-2005-2462

Kayako LiveResponse 2.x is affected by a vulnerability where, during user login, the password is recorded in plaintext in the URL. This enables local users and possibly remote attackers to gain privileges and access sensitive information. The issue is discussed across multiple sources, and relate...

Blackorpheus ClanMemberSkript 1.0 Remote SQL Injection Exploit

Exploit for unknown platform in category web applications ============================================================== Blackorpheus ClanMemberSkript 1.0 Remote SQL Injection Exploit ============================================================== Internet Security |...

CVE-2006-0314

PDFdirectory before 1.0 stores sensitive data in plaintext, which allows remote attackers to obtain arbitrary users' passwords by direct queries to the database, possibly via one of the SQL injection vulnerabilities...