CVE-2020-3330

A vulnerability in the Telnet service of Cisco Small Business RV110W Wireless-N VPN Firewall Routers could allow an unauthenticated, remote attacker to take full control of the device with a high-privileged account. The vulnerability exists because a system account has a default and static...

CVE-2019-14782

CentOS-WebPanel.com aka CWP CentOS Web Panel 0.9.8.856 through 0.9.8.864 allows an attacker to get a victim's session file name from the /tmp directory, and the victim's token value from /usr/local/cwpsrv/logs/accesslog, then use them to make a request to extract the victim's password for the OS...

LinPwn - Interactive Post Exploitation Tool

LinPwn is a interactive tool created to assist you in post exploitation enumeration and privilege escalation. Connection Set your IP and port you want it to connect to in the Connection class. Place the LinPwn binary on the target machine. Run nc -lvp PORT on your machine and then run LinPwn on t...

Intelbras Router WRN150 1.0.18 - Cross-Site Request Forgery Vulnerability

Exploit for hardware platform in category web applications Exploit Title: Intelbras Router WRN150 1.0.18 - Cross-Site Request Forgery Exploit Author: Prof. Joas Antonio Vendor Homepage: https://www.intelbras.com/pt-br/ Software Link: http://en.intelbras.com.br/node/25896 Version: 1.0.18 Tested on...

The vulnerability of the vi command-line editor for system data storage, Backup Manager, allows a hacker to obtain root privileges.

The vulnerability of the vi script service for the system data storage, Backup Manager, is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to obtain root privileges and compromise the integrity of the critical /etc/passwd file by executing a speci...

IBM BigFix (Formerly Tivoli Endpoint Manager) Multiple Vulnerabilities (Oct 2016)

IBM BigFix Formerly Tivoli Endpoint Manager is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

CVE-2016-0292

WebReports in IBM BigFix Platform formerly Tivoli Endpoint Manager 9.x before 9.5.2 allows local users to discover the cleartext system password by reading a report...

CVE-2016-0292

WebReports in IBM BigFix Platform formerly Tivoli Endpoint Manager 9.x before 9.5.2 allows local users to discover the cleartext system password by reading a report...

ZyXEL PMG5318-B20A - OS Command Injection Vulnerability

Exploit for hardware platform in category web applications Exploit Title: ZyXEL PMG5318-B20A OS Command Injection Vulnerability Discovered by: Karn Ganeshen CERT VU 870744 Vendor Homepage: www.zyxel.com Version Reported: Firmware version V100AANC0b5 CVE-2015-6018...

MyAuth3 - Blind SQL Injection

Exploit Title: MyAuth3 Blind SQL Injection / Root Shell Access 0day exploit Google Dork: allinurl:1881/?console=panel Date: 09/06/2011 Author: Marcio Almeida marcioatalligatorteamdot org | @marcioalm Version: 3.0 Tested on: Linux EDB-Note: apparently no true exploit is needed to dump system pwd...

CVE-2010-2083

Microsoft Dynamics GP has a default value of ACCESS for the system password, which might make it easier for remote authenticated users to bypass intended access restrictions via unspecified vectors...

Design/Logic Flaw

Microsoft Dynamics GP has a default value of ACCESS for the system password, which might make it easier for remote authenticated users to bypass intended access restrictions via unspecified vectors...

CVE-2010-2083

Microsoft Dynamics GP has a default value of ACCESS for the system password, which might make it easier for remote authenticated users to bypass intended access restrictions via unspecified vectors...

CVE-2010-2011

Microsoft Dynamics GP uses a substitution cipher to encrypt the system password field and unspecified other fields, which makes it easier for remote authenticated users to obtain sensitive information by decrypting a field's contents...

Think of a use webshell to run the system password of the way-vulnerability warning-the black bar safety net

| Haiyang the webshell has a switch is to control what logged in webshell. --- Assumed to have been the target of the webshell, and collected some of the password, and the target has no ftp, mssql like the port is open, then we can be used to run the system password, try luck. Specific: Modify...

Think of a use webshell to run the system password of the way-vulnerability warning-the black bar safety net

Haiyang the webshell has a switch is to control what logged in webshell. Assumed to have been the target of the webshell, and collected some of the password, and the target has no ftp, mssql like the port is open, then we can be used to run the system password, try luck. Specific: Modify...

Oracle 10g R1 xdb.xdb_pitrig_pkg PLSQL Injection (change sys password)

No description provided by source. // / Oracle 10g R1 xDb.XDBPITRIGPKG.PITRIGDROP / / SQL Injection Exploit / // / exploit change system password / // / BY Sh2kerr Digital Security / // / tested on oracle 10.1.0.2.0 / // // / Date of Public EXPLOIT: January 25, 2008 / / Written by: &nbs...

sentineldetails-traverse.txt

SUMMARY ======= SafeNet Inc.'s Sentinel Protection Server and Sentinel Keys Server products include web servers which are vulnerable to directory traversal attacks. A remote attacker could exploit these vulnerabilities to read arbitrary files with the permissions of the web server, typically...

Clear the system password(0day)-vulnerability warning-the black bar safety net

This stuff is then put long hair up,release to.... Elves also wrote A to use the tool,find out. Back up.. ystem32 under 有 个 msv10.dll xp sp2 F8 1 0 7 5 1 1 B0 0 1 8B 4D Modified to E0 0 0 7 5 1 1 B0 0 1 8B 4D 2k professinal F8 1 0 0F 8 4 7 1 FF FF Modified to E0 0 0 0F 8 4 7 1 FF FF 2k sp4 F8 1 0...

CVE-2007-0859

The Find feature in Palm OS Treo smart phones operates despite the system password lock, which allows attackers with physical access to obtain sensitive information memory contents by doing 1 text searches or 2 paste operations after pressing certain keyboard shortcut keys...