RSA Self-Service Console Detection

The remote web server hosts an RSA Self-Service Console, which is used with RSA appliances by users to reset their PINs, create security questions, etc. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid55509; scriptversion"1.5"; scriptcvsdate"Date: 2019/11/22";...

Facebook hacker posts stolen pics on porn site !

Facebook hacker posts stolen pics on porn site ! A 26-year-old man faces 13 felony charges after being accused of hacking into Facebook accounts, stealing photos of young women and posting them on porn sites, reports the Kansas City Star. Along with content belonging to the 13 young women ages 17...

Richard Kirk hacked into more than 300 eBay users' e-mail & PayPal accounts !

Richard Kirk Kirk hacked into more than 300 eBay users' e-mail accounts after cracking their passwords. He then was able to steal money from his victims' usually secure PayPal accounts. He transferred money from PayPal into hundreds of his own accounts, and then used the stolen cash to buy valuab...

CVE-2010-3272

accounts/ValidateAnswers in the security-questions implementation in ZOHO ManageEngine ADSelfService Plus before 4.5 Build 4500 makes it easier for remote attackers to reset user passwords, and consequently obtain access to arbitrary user accounts, via a modified 1 HideCaptcha or 2 quesList...

Design/Logic Flaw

accounts/ValidateAnswers in the security-questions implementation in ZOHO ManageEngine ADSelfService Plus before 4.5 Build 4500 makes it easier for remote attackers to reset user passwords, and consequently obtain access to arbitrary user accounts, via a modified 1 HideCaptcha or 2 quesList...

CVE-2010-3272

accounts/ValidateAnswers in the security-questions implementation in ZOHO ManageEngine ADSelfService Plus before 4.5 Build 4500 makes it easier for remote attackers to reset user passwords, and consequently obtain access to arbitrary user accounts, via a modified 1 HideCaptcha or 2 quesList...

CVE-2010-1910

The Forgot Password implementation in Consona Live Assistance, Dynamic Agent, and Subscriber Assistance allows remote attackers to reset passwords of accounts with blank Hint questions and Hint answers by sending an empty value for each of these two Hint fields...

Sql injection

SQL injection vulnerability in the administrative interface in Questions Answered 1.3 allows remote attackers to execute arbitrary SQL commands via the username parameter. NOTE: some of these details are obtained from third party information...

CVE-2009-4728

SQL injection vulnerability in the administrative interface in Questions Answered 1.3 allows remote attackers to execute arbitrary SQL commands via the username parameter. NOTE: some of these details are obtained from third party information...

CVE-2009-4728

CVE-2009-4728 affects the administrative interface of the application “Questions Answered 1.3.” The vulnerability is a SQL injection via the username parameter that could allow an attacker to execute arbitrary SQL commands on the database. Documents do not specify exact vulnerable versions beyond...

CVE-2009-4728

SQL injection vulnerability in the administrative interface in Questions Answered 1.3 allows remote attackers to execute arbitrary SQL commands via the username parameter. NOTE: some of these details are obtained from third party information...

E-Mail Security Questions Easily Answered

A Cambridge University study has shown how easy it is to guess the answer to common questions, such as someone’s mother’s maiden name. It found attackers will be able to break into 1 in 80 accounts if they get three chances to guess answers. Read the full article. BBC...

Article Friendly Local File Inclusion

======================================================================= Article friendly Insecure direct object Referece Vulnerability ======================================================================= by Pratul Agrawal Vulnerability found in- Admin module email [email protected] company...

CVE-2009-4436

Multiple SQL injection vulnerabilities in Active Web Softwares eWebquiz 8 allow remote attackers to execute arbitrary SQL commands via the QuizID parameter to 1 questions.asp, 2 importquestions.asp, and 3 quiztakers.asp, different vectors than CVE-2007-1706...

PHP-Ultimate WebBoard 2.0 - admindel.php Multiple Input Validation Vulnerabilities

PHP-Ultimate WebBoard 2.0 - admindel.php Multiple Input Validation Vulnerabilities source: https://www.securityfocus.com/bid/30822/info PHP-Ultimate Webboard is prone multiple-input validation vulnerabilities because the application fails to sufficiently sanitize user-supplied input. Successful...

PHP Live! 3.2.2 - 'questid' SQL Injection (1)

!Info! PHP Live! © OSI Codes Inc. enables live help and live customer support communication directly from your website. With PHP Live!, you can provide one-on-one chat assistance in real-time, answer visitor questions and add that extra human touch to your website. !SQL Injection! Code:...

vBulletin 3.6.4 - 'inlinemod.php?postids' SQL Injection

input-cleanarraygpc'p', array 'postids' = TYPESTR, ; $postids = explode',', $vbulletin-GPC'postids'; foreach $pos...

A-FAQ SQL inj. vuln.

A-FAQ SQL inj. vuln. Vuln. dicovered by : r0t Date: 6 dec. 2005 orginal advisory:http://pridels.blogspot.com/2005/12/faq-sql-inj-vuln.html vendor:http://www.alanward.net/afaq affected version:1.0 and prior Product Description: A-FAQ is an ASP application used for managing a database of questions...

FAQ System 1.1 SQL inj. vuln.

FAQ System 1.1 SQL inj. vuln. Vuln. dicovered by : r0t Date: 29 nov. 2005 Orginal advisory:http://pridels.blogspot.com/2005/11/faq-system-11-sql-inj-vuln.html Vendor:http://ilyav.net/?q=node/23 affected version: 1.1 and prior Product Description: This extremely detailed Frequently Asked Questions...

Newcomers scratch contact of hacking knowledge learning method-vulnerability warning-the black bar safety net

Today there are many people ask me:“I read your article, but I'm new, Is there any learning method?” My answer is:“of course there Ah, but people and people are different, the method is their summary out, and my previous articles the noun are the same as me in learning based on their own experien...