285 matches found
Openfire 3.x jabber:iq:auth 'passwd_change' Remote Password Change Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/34804/info Openfire is prone to a vulnerability that can permit an attacker to change the password of arbitrary users. Exploiting this issue can allow the attacker to gain unauthorized access to the affected application a...
Cain & Abel <= 4.9.24 - .RDP Stack Overflow Exploit
No description provided by source. !/usr/bin/perl Cain & Abel = v4.9.24 .RDP Stack Overflow Exploit Exploit by SkD [email protected] ----------------------------------------------- Nothing much to say about this one. This works on an updated Windows XP SP3. On Vista this exploit is way easier th...
Enthrallweb eNews 1.0 - Remote User Pass Change Exploit
No description provided by source. form action=target/classifieds/myprofile.asp method=POST name=form2 User Id: input type=text name=MMrecordId value=1 p /p table align=center cellpadding=1 cellspacing=1 tr valign=baseline td align=right nowrap class=titlestrongfont face=Verdana, Arial, Helvetica...
TotalCalendar 2.4 - Remote Password Change Exploit
No description provided by source. title Powered by: TotalCalendar 2.4 Remote Password Change /title tr align=left td width=10 /td td align=centerspan class=boxHeaderCod3d By ThE g0bL!N/span/td td width=10 align=right/td /tr /table/span/td /tr /table /td /tr tr td style=padding: 0px; table...
BlackBerry Z10 Privilege Escalation Vulnerability
BlackBerry Z10 users should be aware that there is a privilege escalation vulnerability. The vulnerability potentially allows a hacker to modify or edit data on a stolen BlackBerry Z10 smartphone with BlackBerry Protect enabled, identified as BSRT-2013-006 CVE-2013-3692 According to the...
Free Monthly Websites 2.0 Administrator Remote Password Change
========================================================================================== Title : Free Monthly Websites 2.0 Administrator Remote Password Change Date : 10/04/2013 Name : Free Monthly Websites Affected Version : 2.0 Vendor : http://www.freemonthlywebsites2.com/ Category : Web...
Free Monthly Websites 2.0 - Admin Password Change
Free Monthly Websites 2.0 - Admin Password Change ========================================================================================== Title : Free Monthly Websites 2.0 Administrator Remote Password Change Date : 10/04/2013 Name : Free Monthly Websites Affected Version : 2.0 Vendor :...
Free Monthly Websites 2.0 - Admin Password Change
========================================================================================== Title : Free Monthly Websites 2.0 Administrator Remote Password Change Date : 10/04/2013 Name : Free Monthly Websites Affected Version : 2.0 Vendor : http://www.freemonthlywebsites2.com/ Category : Web...
0Day Remote Password Reset Vulnerability in MSN Hotmail patched
Microsoft's MSN Hotmail Live email service currently hosts over 350 million unique users. A Vulnerability Laboratory senior researcher, Benjamin Kunz Mejri, identified a critical security vulnerability in Microsoft's official MSN Hotmail Live service. A critical vulnerability was found in the...
WikiWebHelp v0. 3. 3 CSRF attack to modify the password vulnerability-vulnerability warning-the black bar safety net
WikiWebHelp v0. 3. 3 CMS the presence of CSRF（cross-site request forgery attack, the remote can modify the user password Exp: form name="CSRF" method="post" action=" http://127.0.0.1/wwh/handlers/updateprofile.php?id=1" input type='hidden' name='pass' value='password' input type='hidden'...
TotalCalendar manage_users.php页面非授权更改口令漏洞
BUGTRAQ ID: 34619 CVE ID: CVE-2009-4929 TotalCalendar是一种基于Web的日程管理系统。 TotalCalendar的admin/manageusers.php页面没有强制管理认证，远程用户可以通过在HTTP请求中包含newPW1和 newPW2参数任意更改口令。 SweetPHP TotalCalendar 2.4 厂商补丁： SweetPHP -------- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本：...
DEBIAN-CVE-2009-4810
The Secure Remote Password SRP implementation in Samhain before 2.5.4 does not check for a certain zero value where required by the protocol, which allows remote attackers to bypass authentication via crafted input...
CVE-2009-4810
The Secure Remote Password SRP implementation in Samhain before 2.5.4 does not check for a certain zero value where required by the protocol, which allows remote attackers to bypass authentication via crafted input...
CVE-2009-4810
The Secure Remote Password SRP implementation in Samhain before 2.5.4 does not check for a certain zero value where required by the protocol, which allows remote attackers to bypass authentication via crafted input...
Mail Manager Pro XSRF (Change Admin Password)
No description provided by source. ----------------------------------------------------------------------------------------------- Title: Mail Manager Pro XSRF Change Admin Password Author: Milos Zivanovic Email: milosz.securityatgmail.com Date: 14. December 2009. Application: Mail Manager Pro...
On linux modify change the user password-vulnerability warning-the black bar safety net
This article summarizes how to manually and automatically modify the local password of the user and the remote machine of the user password. To do test automation provides automatically modify the user password of the principles and methods. Modify the local user password: 1, the interactive...
ZaoCMS Remote Password Changer
Cod3 By ThE g0bL!N ZaoCMS Remote Change Password ThE g0bL!N Contact/Login Info Username admin Password Real Name Email Phone input type="checkbox" checked="checked" name="isadmin" value="y" disabled...
ZaoCMS (user_updated.php) Remote Change Password Exploit
No description provided by source. form action="http://demo.zaocms.com/admin/modules/Users/userupdated.php" method="post" onsubmit="return checkFormthis;" id=form1 Name=form1 h2Cod3 By ThE g0bL!N ZaoCMS Remote Change Password /h2 tittle ThE g0bL!N/tittle table cellSpacing="0" cellPadding="0"...
Teraway LinkTracker 1.0 Remote Password Change Exploit
No description provided by source. titleTeraway LinkTracker V1.0 Remote Password Change/title form name="form1" method="post" action="http://www.teraway.com/linktracker/demo/edituser.asp" table width="90%" border="0" cellspacing="2" cellpadding="2" align="center" tr td class="Titles"Cod3d By ThE...
VisionLMS 1.0 (changePW.php) Remote Password Change Exploit
No description provided by source. html head titleVisionLMS 1.0 | Change Password/title p VisionLMS 1.0 Remote Password Changebr Coded by Mr.tro0oqybr E-mail [email protected] --- Yemeni hackerbr Greetz All my Friendsbr /p form enctype="multipart/form-data" method="post" name="form"...