Dana Portal - Remote Change Admin Password

!/usr/bin/python Abysssec Inc Public Exploit Code Title : Dana Portal Remote Change Admin Password Exploit Affected Version : ASP Version Vulnerable File : albumdetail.asp Vendor Site : www.dana.ir note : no point to keep it private anymore . This exploit ueses of sql injection vulnerability exis...

Dana Portal Remote Change Admin Password Exploit

Exploit for unknown platform in category web applications ================================================ Dana Portal Remote Change Admin Password Exploit ================================================ !/usr/bin/python Abysssec Inc Public Exploit Code Title : Dana Portal Remote Change Admin...

CVE-2008-4905

Typo 5.1.3 and earlier uses a hard-coded salt for calculating password hashes, which makes it easier for attackers to guess passwords via a brute force attack...

Hardcoded credentials

Typo 5.1.3 and earlier uses a hard-coded salt for calculating password hashes, which makes it easier for attackers to guess passwords via a brute force attack...

CVE-2008-4905

Typo 5.1.3 and earlier uses a hard-coded salt for calculating password hashes, which makes it easier for attackers to guess passwords via a brute force attack...

PT-2008-6083 · Typo · Typo

Name of the Vulnerable Software and Affected Versions: Typo versions 5.1.3 and earlier Description: The issue allows attackers to more easily guess passwords via a brute force attack because it uses a hard-coded salt for calculating password hashes. Recommendations: For Typo versions 5.1.3 and...

CVE-2008-4905

Typo 5.1.3 and earlier uses a hard-coded salt for calculating password hashes, which makes it easier for attackers to guess passwords via a brute force attack...

CVE-2008-4905

CVE-2008-4905 affects Typo (versions 5.1.3 and earlier) and is caused by a hard-coded salt used to hash passwords. This weakens brute-force resistance, making password guessing easier for attackers. Connected sources (NVD, UBUNTU, CVE listings) confirm the condition, but none provide a concrete f...

typo-sqlxss.txt

====================================================================== Typo Impact: Cross Site Scripting SQL Injection Insecure password hash salt Status: patch not available ------------------------------ Affected software description: ------------------------------ Application: Typo Version: =...

ipb235-sql.txt

?php errorreportingEALL; /////////////////////////////////////////////////////////////////////// /////////////////////////////////////////////////////////////////////// // IPB = 2.3.5 sql injection exploit // Version 1.0 // written by Janek Vind "waraxe" // Estonia, Tartu // http://www.waraxe.us/...

CVE-2008-2291

axengine.exe in Symantec Altiris Deployment Solution 6.8.x and 6.9.x before 6.9.176 generates credentials with a fixed salt or without any salt, which makes it easier for remote attackers to guess encrypted domain credentials...

Joomla Component com_datsogallery 1.6 Blind SQL Injection Exploit

No description provided by source. ? //Joomla Component comdatsogallery 1.6 Blind SQL Injection Exploit by +toxa+ //Greets: all members of antichat.ru & cih.ms //options settimelimit0; ignoreuserabort1; $normua='Mozilla/5.0 Windows; U; Windows NT 6.0; ru; rv:1.8.1.14 Gecko/20080404...

wp-saltcrack.txt

WORDPRESS 2.5 - SALT CRACKING VULNERABILITY ------------------------------------------- http://xiam.menteslibres.org/pages/advisories/wordpress-2-5-salt-cracking-vulnerability By J. Carlos Nieto http://xiam.menteslibres.org Severity ======== Medium. It affects only a determinate part of the...

RunCMS Newbb_plus 0.92 - Client IP SQL Injection

RunCMS Newbbplus 0.92 - Client IP SQL Injection !/usr/bin/perl use Tk; use Tk::BrowseEntry; use Tk::DialogBox; use LWP::UserAgent; $mw = new MainWindowtitle = "UnderWHAT?!" ; $mw-geometry '420x383' ; $mw-resizable0,0; $mw-Label-text = '', -font = 'Verdana 8',-foreground='red'-pack; $mw-Label-text...

RunCMS Newbb_plus 0.92 - Client IP SQL Injection

!/usr/bin/perl use Tk; use Tk::BrowseEntry; use Tk::DialogBox; use LWP::UserAgent; $mw = new MainWindowtitle = "UnderWHAT?!" ; $mw-geometry '420x383' ; $mw-resizable0,0; $mw-Label-text = '', -font = 'Verdana 8',-foreground='red'-pack; $mw-Label-text = 'Newbbplus 'Tahoma 7...

openSUSE 10 Security Update : CASA (CASA-1849)

Various bugs and problems were fixed in the CASA authentication framework, some of them security relevant : - Secrets with special characters inside were handled incorrectly. - Enhanced Salt generation. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks i...

rpginferno-sql.txt

--==+================================================================================+==-- --==+ RPG Inferno v2.4 SQL Injection Vulnerability +==-- --==+================================================================================+==-- AUTHOR: t0pP8uZz & xprog SITE:...

vBulletin Mod RPG Inferno 2.4 (inferno.php) SQL Injection Vulnerability

Exploit for unknown platform in category web applications ======================================================================= vBulletin Mod RPG Inferno 2.4 inferno.php SQL Injection Vulnerability =======================================================================...

vBulletin Mod RPG Inferno 2.4 - inferno.php SQL Injection

vBulletin Mod RPG Inferno 2.4 - inferno.php SQL Injection --==+================================================================================+==-- --==+ RPG Inferno v2.4 SQL Injection Vulnerability +==-- --==+================================================================================+==--...

security flaw

BusyBox 1.1.1 does not use a salt when generating passwords, which makes it easier for local users to guess passwords from a stolen password file using techniques such as rainbow tables...