HomeSeer HS2 and HomeSeer PRO - Multiple Vulnerabilities

HomeSeer HS2 and HomeSeer PRO - Multiple Vulnerabilities HomeSeer Home Automation Software Multiple Web Vulnerabilities 0day Date: 3/6/12 Author: SilentDream Software Link: http://www.homeseer.com/pub/setuphs25049.exe Version: 2.5.0.49 Tested on: Win XP CERT VU796883:...

Password Management: How many do you need to remember?

In todays online world, the proliferation of usernames and passwords has resulted in a cottage industry springing up to meet the need to keep track of them in a secure manner. Software and hardware providers have developed a number of unique approaches to deal with this problem, but they all...

Apple Supplier Foxconn's Servers Hacked, Exposing Vendor Usernames and Passwords

Apple Supplier Foxconn's Servers Hacked, Exposing Vendor Usernames and Passwords Apple supplier Foxconn has reportedly been hacked, exposing the usernames and passwords of the company's clients and employees. Hacker group SwaggSec just released a dump of Foxconn internal information, including a...

Tibetsystem OwnServer 1.0 Directory Traversal

I tried to report this to the vendor in 2009. SHODAN "OwnServer1.0": Results 1 - 10 of about 11832 for OwnServer1.0 country:US. -Jason Ellison ---------- Forwarded message ---------- From: Jason Ellison Date: Fri, Apr 10, 2009 at 5:02 PM Subject: DVR Security Issue To: [email protected] Hello...

Universal Music Portugal database dumped by Hackers

Universal Music Portugal database dumped by Hackers Another Latest Tip come in my Inbox today about the leak of Database of Universal Music Portugal's website. Hacker did not mention his name,or Codename, But he enumerate the Database and Extract it by Hacking the Site. 100's of Tables from...

Alkon Consulting Group SQL Injection

|=----=----=----=----=----=--------=| | | | /\ /\ \ /\ /\ \ | | //\ /\ \ \L\ \ \ \ \ Turki$ hackers | | \ \ \ \ \ '\ \ \ | | \ \ \ \ \ \L\ \ \ \ \ \ | | \ \ \ / \ \ \ | | // // //// | | | | Skotevahshat and bl4ck.viper | |=----=----=----=----=----=--------=|...

General Electric D20 Password Recovery

The General Electric D20ME and possibly other units D200? feature TFTP readable configurations with plaintext passwords. This module retrieves the username, password, and authentication level list. Module Options msf use auxiliary/gather/d20pass msf undefinedd20pass show actions ...actions... msf...

Tianya, China's biggest online forum 40 million users data leaked

Tianya, China's biggest online forum 40 million users data leaked Tianya.cn, China's biggest online forum confirmed on Sunday that private information for 40 million users had been leaked, three days after the country's largest programmers' website CSDN reported a similar leak. Tianya is one of t...

China Software Developer Network (CSDN) 6 Million user data Leaked

China Software Developer Network CSDN 6 Million user data Leaked The "Chinese Software Developer Network" CSDN, operated by Bailian Midami Digital Technology Co., Ltd., is one of the biggest networks of software developers in China. A text file with 6 Million CSDN user info including user name,...

AST-2011-013: Possible remote enumeration of SIP endpoints with differing NAT settings

Asterisk Project Security Advisory - AST-2011-013 Product Asterisk Summary Possible remote enumeration of SIP endpoints with differing NAT settings Nature of Advisory Unauthorized data disclosure Susceptibility Remote unauthenticated sessions Severity Minor Exploits Known Yes Reported On 2011-07-...

FreeBSD : asterisk -- Multiple Vulnerabilities (bb389137-21fb-11e1-89b4-001ec9578670)

Asterisk project reports : It is possible to enumerate SIP usernames when the general and user/peer NAT settings differ in whether to respond to the port a request is sent from or the port listed for responses in the Via header. When the 'automon' feature is enabled in features.conf, it is possib...

SIP Username Enumeration

The SIP server on the remote host appears to respond differently to registration requests for valid and invalid usernames. Using that fact, Nessus was able to enumerate some of the valid usernames. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc';...

Sudan Airways mailbox database leaked

Sudan Airways mailbox database leaked Sudan Airways mailbox database Hacked By Sudan Cyber Army - SD. Alsa7r and Leaked on Pastebin. The Targeted domains are sudanair.com & omyalphaserver.com . This Include more than 100's of Usernames, Emails, Passwords. Sudan Cyber Army in past hack lots of Sud...

Squiz Matrix User Enumeration Scanner

This module attempts to enumerate remote users that exist within the Squiz Matrix and MySource Matrix CMS by sending GET requests for asset IDs e.g. ?a=14 and searching for a valid username eg "root" or "test" which is prefixed by a "" in the response. It will also try to GET the users full name ...

krb5-enum-users NSE Script

Discovers valid usernames by brute force querying likely usernames against a Kerberos service. When an invalid username is requested the server will respond using the Kerberos error code KRB5KDCERRCPRINCIPALUNKNOWN, allowing us to determine that the user name was invalid. Valid user names will...

TimeLive Time and Expense Tracking Multiple Vulnerabilities

The host is running TimeLive Time and Expense Tracking and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: secpodtimelivetimeandexpensetrackingmultvuln.nasl 7029 2017-08-31 11:51:40Z teissa $ TimeLive Time and Expense Tracking Multiple Vulnerabilities Authors: Antu Sanadi...

TimeLive <= 4.2.1 Multiple Vulnerabilities - Active Check

TimeLive is prone to multiple vulnerabilities. Copyright C 2011 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Uronimo - Mobile platform website Hacked by Team Inj3ct0r

Uronimo - Mobile platform website Hacked by Team Inj3ct0r Uronimo - Mobile platform Hacked by Team Inj3ct0r today. They leak the database of site on Pastebin , including Username, Hash Password, emails and Phone Numbers of 1000 users...

NetSaro Enterprise Messenger Server Plaintext Password Storage Vulnerability

NetSaro Enterprise Messenger Server is prone to a security bypass vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Apache "mod_userdir" User Enumeration

Apache with the UserDir directive enabled generates different error codes when a username exists and there is no publichtml directory and when the username does not exist, which could allow remote attackers to determine valid usernames on the server. This module requires Metasploit:...