Lucene search
+L

3170 matches found

Packet Storm
Packet Storm
added 2012/12/03 12:0 a.m.66 views

Oracle MySQL User Account Enumeration Utility

MySQL User Account Enumeration Utility When an attacker authenticates using an incorrect password with the old authentication mechanism from mysql 4.x and below to a mysql 5.x server the mysql server will respond with a different message than Access Denied, what makes User Account Enumeration...

5CVSS0.3AI score0.14784EPSS
SaveExploits3
seebug.org
seebug.org
added 2012/12/02 12:0 a.m.26 views

MySQL Remote Preauth User Enumeration Zeroday

No description provided by source. MySQL User Account Enumeration Utility When an attacker authenticates using an incorrect password with the old authentication mechanism from mysql 4.x and below to a mysql 5.x server the mysql server will respond with a different message than Access Denied, what...

7.1AI score
SaveExploits0
exploitpack
exploitpack
added 2012/12/02 12:0 a.m.23 views

MySQL - Remote User Enumeration

MySQL - Remote User Enumeration MySQL User Account Enumeration Utility When an attacker authenticates using an incorrect password with the old authentication mechanism from mysql 4.x and below to a mysql 5.x server the mysql server will respond with a different message than Access Denied, what...

7.5AI score
SaveExploits0
zdt
zdt
added 2012/12/02 12:0 a.m.54 views

MySQL Remote Preauth User Enumeration Zeroday

Exploit for windows platform in category remote exploits MySQL User Account Enumeration Utility When an attacker authenticates using an incorrect password with the old authentication mechanism from mysql 4.x and below to a mysql 5.x server the mysql server will respond with a different message th...

7.1AI score
SaveExploits0
Exploit DB
Exploit DB
added 2012/12/02 12:0 a.m.55 views

MySQL - Remote User Enumeration

MySQL User Account Enumeration Utility When an attacker authenticates using an incorrect password with the old authentication mechanism from mysql 4.x and below to a mysql 5.x server the mysql server will respond with a different message than Access Denied, what makes User Account Enumeration...

5CVSS7.1AI score0.14784EPSS
SaveExploits3
exploitpack
exploitpack
added 2012/10/17 12:0 a.m.17 views

Symphony CMS 2.3 - Multiple Vulnerabilities

Symphony CMS 2.3 - Multiple Vulnerabilities Symphony cms 2.3 multiple vulnerabilities -------------------------------------------------------------------------------------------- 20121017 - Justanotherhacker.com : Symphony cms - Multiple vulnerabilities JAHx122 -...

0.4AI score
SaveExploits0
Exploit DB
Exploit DB
added 2012/10/17 12:0 a.m.20 views

Symphony CMS 2.3 - Multiple Vulnerabilities

Symphony cms 2.3 multiple vulnerabilities -------------------------------------------------------------------------------------------- 20121017 - Justanotherhacker.com : Symphony cms - Multiple vulnerabilities JAHx122 - http://www.justanotherhacker.com/advisories/JAHx122.txt...

5.3AI score
SaveExploits0
Packet Storm
Packet Storm
added 2012/09/18 12:0 a.m.50 views

WordPress 3.4.2 User Enumeration / Path Disclosure

============================================================ Vulnerable Software: WordPress Version 3.4.2 Downloaded from: http://wordpress.org/latest.zip MD5SUM: d670508d81e2fd060c2041441bc03300 wordpress-3.4.2.zip =========================================================== Tested: php.ini...

0.1AI score
SaveExploits0
NVD
NVD
added 2012/09/05 11:55 p.m.21 views

CVE-2012-4390

1 apps/calendar/appinfo/remote.php and 2 apps/contacts/appinfo/remote.php in ownCloud before 4.0.7 allows remote authenticated users to enumerate the registered users via unspecified vectors...

4CVSS6.1AI score0.01797EPSS
SaveExploits1References3
Cvelist
Cvelist
added 2012/09/05 11:0 p.m.24 views

CVE-2012-4390

1 apps/calendar/appinfo/remote.php and 2 apps/contacts/appinfo/remote.php in ownCloud before 4.0.7 allows remote authenticated users to enumerate the registered users via unspecified vectors...

6.1AI score0.01797EPSS
SaveExploits1References3
CVE
CVE
added 2012/09/05 11:0 p.m.63 views

CVE-2012-4390

CVE-2012-4390 affects ownCloud Server prior to version 4.0.7. The issue resides in (1) apps/calendar/appinfo/remote.php and (2) apps/contacts/appinfo/remote.php, enabling remote authenticated users to enumerate registered users via unspecified vectors. The root cause is not fully detailed in the ...

4CVSS6.3AI score0.01797EPSS
SaveExploits1References3Affected Software2
Packet Storm
Packet Storm
added 2012/08/03 12:0 a.m.25 views

Liferay JSON Server API Authentication

============================================= - Release date: August 3rd, 2012 - Discovered by: Danilo Massa & Enrico Cinquini - Severity: High ============================================= I. VULNERABILITY ------------------------- Liferay JSON service API authentication vulnerability II...

0.2AI score
SaveExploits0
OwnCloud
OwnCloud
added 2012/07/10 5:16 p.m.45 views

User enumeration - ownCloud

apps/calendar/appinfo/remote.php and apps/contacts/appinfo/remote.php in ownCloud before 4.0.7 allows remote authenticated users to enumerate the registered users via unspecified vectors. Affected Software ownCloud Server 4.0.7 CVE-2012-4390 Action Taken It is recommended that all instances are...

4CVSS6AI score0.01797EPSS
SaveExploits1Affected Software1
OwnCloud
OwnCloud
added 2012/07/10 11:42 a.m.49 views

Server: User enumeration

apps/calendar/appinfo/remote.php and apps/contacts/appinfo/remote.php in ownCloud before 4.0.7 allows remote authenticated users to enumerate the registered users via unspecified vectors. For more information please consult the official advisory. This advisory is licensed CC BY-SA 4.0...

4CVSS6AI score0.01797EPSS
SaveExploits1Affected Software1
zdt
zdt
added 2012/05/10 12:0 a.m.32 views

Chevereto Upload Script Cross Site Scripting / User Enumeration

Exploit for php platform in category web applications ======================================================================================== Vulnerable Software: Chevereto upload script Downloaded from: http://code.google.com/p/chevereto/downloads/list...

7.1AI score
SaveExploits0
Packet Storm
Packet Storm
added 2012/05/10 12:0 a.m.18 views

Chevereto Upload Script suffers from cross site scripting and user enumeration vulnerabilities.

======================================================================================== Vulnerable Software: Chevereto upload script Downloaded from: http://code.google.com/p/chevereto/downloads/list http://code.google.com/p/chevereto/downloads/detail?name=cheveretonb1.91.zip&can=2&q= Official...

7.4AI score
SaveExploits0
Packet Storm
Packet Storm
added 2012/04/26 12:0 a.m.29 views

eFront CMS 3.6.10 User Enumeration

TITLE ....... eFront 3.6.10 CMS user enumeration attack DATE ........ 11.04.2012 AUTOHR ...... http://hauntit.blogspot.com SOFT LINK ... http://www.efrontlearning.net VERSION ..... 3.6.10 TESTED ON ... LAMP ----------------------------------------------------------------------- 1. What is this? 2...

7.4AI score
SaveExploits0
Nmap
Nmap
added 2012/03/22 12:9 a.m.589 views

http-drupal-enum-users NSE Script

Enumerates Drupal users by exploiting an information disclosure vulnerability in Views, Drupal's most popular module. Requests to admin/views/ajax/autocomplete/user/STRING return all usernames that begin with STRING. The script works by iterating STRING over letters to extract all usernames. For...

10CVSS9.1AI score0.99448EPSS
SaveExploits33
Packet Storm
Packet Storm
added 2012/03/11 12:0 a.m.32 views

WordPress 3.3.1 User Count Enumeration

TITLE ....... Wordpress 3.3.1 - users counter ..................... DATE ........ 15.02.2012 .......................................... AUTOHR ...... http://hauntit.blogspot.com ......................... SOFT LINK ... http://wordpress.org................................. VERSION ..... 3.3.1...

7.4AI score
SaveExploits0
Metasploit
Metasploit
added 2012/01/10 8:54 p.m.31 views

Drupal Views Module Users Enumeration

This module exploits an information disclosure vulnerability in the 'Views' module of Drupal, brute-forcing the first 10 usernames from 'a' to 'z'. Drupal 6 with 'Views' module 'Drupal Views Module Users Enumeration', 'Description' = %q This module exploits an information disclosure vulnerability...

6.4AI score
SaveExploits0
Rows per page
Query Builder