Username enumeration through the username parameter to the ViewUserHover resource.

It is possible to enumerate usernames through the secure/ViewUserHover resource through the username parameter. JIRA leaks the existence of a username by showing your entire name. 1. Log out of JIRA 2. Go to...

Username enumeration through the username parameter to the ViewUserHover resource.

It is possible to enumerate usernames through the secure/ViewUserHover resource through the username parameter. JIRA leaks the existence of a username by showing your entire name. 1. Log out of JIRA 2. Go to...

froxlor -- database password information leak

[email protected] reports: An unauthenticated remote attacker is able to get the database password via webaccess due to wrong file permissions of the /logs/ folder in froxlor version 0.9.33.1 and earlier. The plain SQL password and username may be stored in the /logs/sql-error.log file...

Seawind Solution Bypass Admin Page Vulnerability

Exploit for php platform in category web applications Exploit Title : Seawind Solution Bypass Admin Page Vulnerability Exploit Author : Ashiyane Digital Security Team Vendor Homepage : http://india.seawindsolution.com/ Google Dork : intext:"Design & Developed By Seawind Solution Pvt.Ltd." Date:...

SDCMS论坛存在高危漏洞可getshell，影响其大量系统

简要描述： shell 详细说明： 论坛存在解析漏洞，可利用该漏洞getshell 漏洞证明： 该论坛为aspx类型的论坛，但还可以做php容器可以执行php文件，且存在php解析漏洞。。然后就没有然后了。。。 找到论坛需要注册码：http://bbs.sdcms.cn/，十块钱一个。。。。 屌丝买不起，找到一个手机号昵称的用户：15837309973，手机号当用户名和密码居然登进去了。。 在头像上传处直接上传一张图片马，找到路径：http://bbs.sdcms.cn/max-temp/avatar/28a1ddde7e6a4ecbaf56e54ad06a3406.jpg...

Zendesk: Security Missconfiguration in Autologin

Here I am addressing Critical misconfiguration in autologin feature 1. Open the link in the browser https://dashboard.zopim.com/home and enter your username and password and don't tick select the option Always sign in automatically and login 2. now logout from your account 3. now you logged out...

Orchard 'username' field HTML injection vulnerability

Orchard is a Microsoft-led open source CMS project from the Outercurve Foundation. The project allows users to quickly build websites on the Asp.Net platform and provides an extension framework that allows customizers to add additional content through modules and themes. An HTML injection...

Updated pam package fixes security vulnerability

If SELinux is enabled, the unixrunhelperbinary function in Linux-PAM 1.1.8 and earlier hangs indefinitely when verifying a password of 65536 characters, which allows attackers to conduct username enumeration and denial of service attacks CVE-2015-3238...

MGASA-2015-0266 Updated pam package fixes security vulnerability

If SELinux is enabled, the unixrunhelperbinary function in Linux-PAM 1.1.8 and earlier hangs indefinitely when verifying a password of 65536 characters, which allows attackers to conduct username enumeration and denial of service attacks CVE-2015-3238...

WebCC Remote Video Surveillance System Exploits Violent Breach Vulnerability

WebCC remote video surveillance system is a video surveillance system of Jinan Zhongwei Century Technology Co. Zhongwei WebCC remote video surveillance system has a brute-force cracking vulnerability. Comprehensive use of the vulnerability, the attacker can use the vulnerability to blast the user...

The vulnerability of the microprogramming software of the Cisco TelePresence Conductor conference call control device allows a intruder to gain access to the device.

The vulnerability of the control interface for microprogramming-based conference communication devices like Cisco TelePresence Conductor is related to deficiencies in authentication procedures. Exploiting this vulnerability could allow a malicious actor to gain access to the device using a...

Endian Firewall 3.0.0 - OS Command Injection (Python)

Endian Firewall 3.0.0 - OS Command Injection Python !/usr/bin/env python Endian Firewall Proxy User Password Change /cgi-bin/chpasswd.cgi OS Command Injection Exploit POC Reverse TCP Shell Ben Lincoln, 2015-06-28 http://www.beneaththewaves.net/ Requires knowledge of a valid proxy username and...

The vulnerability of Cisco Expressway’s microprogramming software allows a hacker to gain access to the device.

The vulnerability of the management interface for Microprogramming Software in Cisco Expressway is related to deficiencies in the authentication process. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain access to the device using a specially crafted user name...

CVE-2015-5063

Multiple cross-site scripting XSS vulnerabilities in SilverStripe CMS & Framework 3.1.13 allow remote attackers to inject arbitrary web script or HTML via the 1 adminusername or 2 adminpassword parameter to install.php...

Tiny SRP Library Buffer Overflow Vulnerability

The Tiny SRP library is a library for secure authentication of small clients or servers. A buffer overflow vulnerability in the Tiny SRP library's handling of the 'username' field allows a remote attacker to submit a special request to crash an application linked to the library...

Cisco WebEx Meeting Center Legitimate Username Disclosure Vulnerability

Cisco WebEx Meetings Server is a Cisco meeting center implementation from Cisco. A security vulnerability exists in the Cisco WebEx Meetings Server WEB management interface that allows an attacker to exploit the vulnerability to submit a special request to determine username information...

OpenSSL Heartbleed 漏洞 (心脏出血)

OpenSSL“心脏出血”漏洞是一个非常严重的问题。这个漏洞使攻击者能够从内存中读取多达64 KB的数据。一些安全研究员表示：无需任何特权信息或身份验证，我们就可以从我们自己的（测试机上）偷来X.509证书的私钥、用户名与密码、聊天工具的消息、电子邮件以及重要的商业文档和通信等数据。这一切是如何发生的呢？让我们一起从代码中一探究竟吧。0x01 Bug请看ssl/dlboth.c，漏洞的补丁从这行语句开始：int dtls1processheartbeatSSL s unsigned char p = &s-s3-rrec.data0, pl; unsigned short hbtype;...

Buffer overflow

Buffer overflow in the Tiny SRP library aka TinySRP allows remote attackers to cause a denial of service crash or possibly execute arbitrary code via a crafted size value for the username field...

Drupal Password Policy Module Cross-Site Scripting Vulnerability

Drupal is a free, open source content management system developed in PHP.Password Policy is a module that provides more advanced password complexity detection capabilities. The Drupal Password Policy module has a cross-site scripting vulnerability when a website uses a username constraint policy ...

CVE-2015-4387

Cross-site scripting XSS vulnerability in unspecified administration pages in the Password Policy module 6.x-1.x before 6.x-1.11 and 7.x-1.x before 7.x-1.11 for Drupal, when a site has a policy that uses the username constraint, allows remote attackers to inject arbitrary web script or HTML via a...