12611 matches found
Suspicious HTML Mail Phishing Attempt
Several mail phishing campaigns use malicious HTML files to lure victim users to send the attacker the username and password to their e-mail account...
Thomson CableHome Gateway (DWG849) Cable Modem Gateway - Information Exposure
Thomson CableHome Gateway DWG849 Cable Modem Gateway - Information Exposure Exploit Title: Information Exposure via SNMP on Thomson CableHome Gateway MODEL: DWG849 Cable Modem Gateway Google Dork: n/a Date: 09/18/2015 Exploit Author: Matt Dunlap Vendor Homepage:...
Thomson CableHome Gateway (DWG849) Cable Modem Gateway - Information Exposure
Exploit Title: Information Exposure via SNMP on Thomson CableHome Gateway MODEL: DWG849 Cable Modem Gateway Google Dork: n/a Date: 09/18/2015 Exploit Author: Matt Dunlap Vendor Homepage: http://www.technicolor.com/en/solutions-services/connected-home/modems-gateways Software Link: n/a Version:...
Serendipity cross-site scripting vulnerability (CNVD-2015-06044)
Serendipity is a PHP-based blogging system developed by Serendipity team. The system supports the creation of online journals, blogs, web pages and more. A cross-site scripting vulnerability exists in the js/2k11.min.js file in Serendipity 2.0.1 and prior versions of the 2k11 theme, which stems...
SQL Injection Vulnerability in the username parameter of Wave Software Administrative Services System
The Administrative Service System ASS is a comprehensive administrative service system that integrates information and consultation, approval and charging, management and coordination, and complaints and supervision. A SQL injection vulnerability exists in the username parameter of WaveSoft...
Sophos Cyberoam CR500iNG-XP Firewall SQL Injection Vulnerability
Sophos Cyberoam CR500iNG-XP firewall appliance with CyberoamOS is a new-generation firewall from Sophos, UK, running the CyberoamOS operating system, which provides online application detection and control, web filtering, HTTPS checking, intrusion prevention and other features. It provides online...
American Internet Emergency Response Center CERT: Seagate wireless hard drive to a vulnerability-vulnerability warning-the black bar safety net
! American Internet emergency center released a on Seagate wireless hard drive with a warning, because the products were found to have multiple vulnerabilities could be exploited by attackers to download to disk all of the files. The default“root”login American Internet emergency center noted:...
Revived Wire Media PHP File Manager Username Backdoor
An attacker might use a backdoor which exists in PHP File Manager's user database. A successful exploitation might allow the attacker to create an administrator user on vulnerable installations or to run arbitrary code...
PCS pcsd competitive conditions loophole
PCS is a set of tools for configuring and managing Pacemaker and Corosync clustering software using the command line and web UI. A competitive condition vulnerability exists in PCS 0.9.139 and prior versions of pcsd that stems from the program's use of global variables to validate usernames. A...
Cyberoam - Blind SQL Injection
Description The username field in the captive portal of Cyberoam NG firewall is vulnerable to SQL Injection and can be exploited to execute sql commands on the database. The username field is vulnerable to the following types of SQL Injections a Boolean-based blind sql injection b Stacked...
ownCloud: Password appears in user name field
step1:Reset password step2:In the pop up--click auto save password step3:Just login to own cloud Step4:You will see your password in the user name field I hope you catch me...
Samsung SyncThruWeb 2.01.00.26 - SMB Hash Disclosure
Samsung SyncThruWeb 2.01.00.26 - SMB Hash Disclosure Exploit Title: Samsung SyncThruWeb SMB Hash Disclosure Date: 8/28/15 Exploit Author: Shad Malloy Contact: http://twitter.com/SecureNM Website: https://securenetworkmanagement.com Vendor Homepage: http://www.samsung.com Software Link:...
Apache ActiveMQ Java Authentication and Authorization Service Certificate Acquisition Vulnerability
Apache ActiveMQ is the United States Apache Apache Software Foundation developed a set of open source messaging middleware , which supports Java messaging services , clustering , Spring Framework and so on. Apache ActiveMQ 5.10.1 before version 5.x of the Java Authentication and Authorization...
vBulletin 3.6.0 4.2.3 - ForumRunner SQL Injection
vBulletin 3.6.0 4.2.3 - ForumRunner SQL Injection Exploit Title : vBulletin = 4.2.3 SQL Injection CVE-2016-6195 Author : Manish Kishan Tanwar AKA error1046 https://twitter.com/IndiShell1046 Date : 25/08/2015 Love to : zero cool,Team indishell,Mannu,Viki,Hardeep Singh,Jagriti,Kishan Singh and ritu...
DEBIAN-CVE-2015-3238
The unixrunhelperbinary function in the pamunix module in Linux-PAM aka pam before 1.2.1, when unable to directly access passwords, allows local users to enumerate usernames or cause a denial of service hang via a large password...
CVE-2015-3238
The unixrunhelperbinary function in the pamunix module in Linux-PAM aka pam before 1.2.1, when unable to directly access passwords, allows local users to enumerate usernames or cause a denial of service hang via a large password...
UBUNTU-CVE-2014-3612
The LDAPLoginModule implementation in the Java Authentication and Authorization Service JAAS in Apache ActiveMQ 5.x before 5.10.1 allows remote attackers to bypass authentication by logging in with an empty password and valid username, which triggers an unauthenticated bind. NOTE: this identifier...
CVE-2014-3612
The LDAPLoginModule implementation in the Java Authentication and Authorization Service JAAS in Apache ActiveMQ 5.x before 5.10.1 allows remote attackers to bypass authentication by logging in with an empty password and valid username, which triggers an unauthenticated bind. NOTE: this identifier...
UBUNTU-CVE-2015-3238
The unixrunhelperbinary function in the pamunix module in Linux-PAM aka pam before 1.2.1, when unable to directly access passwords, allows local users to enumerate usernames or cause a denial of service hang via a large password...
FreeBSD : froxlor -- database password information leak (9ee72858-4159-11e5-93ad-002590263bf5)
[email protected] reports : An unauthenticated remote attacker is able to get the database password via webaccess due to wrong file permissions of the /logs/ folder in froxlor version 0.9.33.1 and earlier. The plain SQL password and username may be stored in the /logs/sql-error.log file...