5796 matches found
HealthNet Data Breach Affects 1.5 Mil Customers
Health Net Inc. announced Wednesday that it is investigating a healthcare data security breach that resulted in the loss of patient data, affecting 1.5 million customers. The healthcare provider said the lost files, a mixture of medical data, Social Security numbers and other personally...
Whois Server v2 XSS
Exploit for unknown platform in category web applications =================== Whois Server v2 XSS =================== Vuln in : "?query=" cuz when you Search about an domain in the script form you gonna find the typed text Clear ! no encryptiation! so we can use it as xss vuln :p here we got A li...
Unencrypted Telnet Server
The remote host is running a Telnet server over an unencrypted channel. Using Telnet over an unencrypted channel is not recommended as logins, passwords, and commands are transferred in cleartext. This allows a remote, man-in-the-middle attacker to eavesdrop on a Telnet session to obtain...
CVE-2009-3026
protocols/jabber/auth.c in libpurple in Pidgin 2.6.0, and possibly other versions, does not follow the "require TLS/SSL" preference when connecting to older Jabber servers that do not follow the XMPP specification, which causes libpurple to connect to the server without the expected encryption an...
CVE-2009-2319
The default configuration of the Wi-Fi component on the Axesstel MV 410R does not use encryption, which makes it easier for remote attackers to obtain sensitive information by sniffing the network...
Design/Logic Flaw
CFNetwork in Apple Mac OS X 10.5 before 10.5.7 does not properly parse noncompliant Set-Cookie headers, which allows remote attackers to obtain sensitive information by sniffing the network for "secure cookies" that are sent over unencrypted HTTP connections...
CVE-2009-0144
CFNetwork in Apple Mac OS X 10.5 before 10.5.7 does not properly parse noncompliant Set-Cookie headers, which allows remote attackers to obtain sensitive information by sniffing the network for "secure cookies" that are sent over unencrypted HTTP connections...
Ubuntu Update for fetchmail vulnerability USN-405-1
Ubuntu Update for Linux kernel vulnerabilities USN-405-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN4051.nasl 7969 2017-12-01 09:23:16Z santu $ Ubuntu Update for fetchmail vulnerability USN-405-1 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH,...
Arbitrary File Access
When told to follow a "redirect" automatically, libcurl does not question the new target URL but follows it to any new URL that it understands. As libcurl supports FILE:// URLs, a rogue server can thus "trick" a libcurl-using application to read a local file instead of the remote one. This is a...
Constructr CMS <= 3.02.5 Stable Multiple Remote Vulnerabilities
No description provided by source. Constructr CMS http://constructr-cms.org/ - = 3.02.5 "Stable" - magicquotesgpc = Off registerglobals = On - Directory Traversal - Source Disclosure - Arbitrary File Creation - Etc Etc Etc - http://site/constructr/backend/template.php?editfile= Db info:...
ampjuke-sql.txt
|-------------------------SDLAS------------------------- | | Script : AmpJuke 0.7.5 | Vuln. Type : SQL Injection | Founded By : SDLAS Th3 1r4Q1 Cr4Ck3r | CoNt4Ct : sdlasatHotmaild0tFr | Home : wWw.Iq-Ty.CoM | WwW.SdlaS-IQ.Co.CC | Th3 eXpl0T :...
Intrinsic Swimage Encore does not securely manage login credentials
Overview Intrinsic Swimage Encore has an unencrypted, hardcoded, default password that could allow an attacker access to protected data. Description Intrinsic Swimage Encore automates remote desktop, server, and device deployment. This product includes both a server and a client solution. The...
Retrospect Backup Client <= 7.5.116 Multiple Vulnerabilities (ESA-08-009)
Binary data 4606.prm...
Retrospect Backup Client Multiple Vulnerabilities (ESA-08-009)
According to its version number, the Retrospect Backup Client installed on the remote host is affected by several vulnerabilities : - An error in the client may lead to memory corruption and in turn a denial of service condition when processing specially crafted packets, although only when an...
Local vulnerability in WeFi Client v3.2.1.4.1(Update)
================================================== INFO ================================================== The wireless client, WeFi v3.2.1.4.1 is susceptible to local vulnerabilities due to improper coding. Earlier versions may also be affected. ==================================================...
CVE-2008-2780
The Anubis aka Anubis+Ripe160 plugin before 1.3 for encrypt stores the unencrypted file's size in cleartext in the header of the encrypted file, which allows attackers to distinguish between encrypted data and random padding at the end of the encrypted file...
CVE-2008-2780
The Anubis aka Anubis+Ripe160 plugin before 1.3 for encrypt stores the unencrypted file's size in cleartext in the header of the encrypted file, which allows attackers to distinguish between encrypted data and random padding at the end of the encrypted file...
Design/Logic Flaw
The Anubis aka Anubis+Ripe160 plugin before 1.3 for encrypt stores the unencrypted file's size in cleartext in the header of the encrypted file, which allows attackers to distinguish between encrypted data and random padding at the end of the encrypted file...
Hatena Toolbar sends URL information unecnrypted
Overview Hatena Toolbar improperly sends URL information to the Hatena server without being encrypted when a user views a web page secured by SSL. Impact When a user of Hatena Toolbar views a SSL secured web page, an attacker could obtain the information contained in the URL such as a session ID...
Yayoi Kaikei improper handling of credential information
Overview Yayoi Kaikei Quick Navigator sends user credentials unencrypted. Yayoi Kaikei Quick Navigator makes the user log into the vendor's server, and sends the user credentials unencrypted. Impact By monitoring the communication between Quick Navigator and the vendor's server, an attacker can...