Pligg CMS 9.5 - Reset Forgotten Password Security Bypass

Pligg CMS 9.5 - Reset Forgotten Password Security Bypass source: https://www.securityfocus.com/bid/24158/info Pligg is prone to a security-bypass vulnerability due to a design error when resetting forgotten passwords. An attacker may exploit this issue to reset account passwords for arbitrary use...

Roxio Toast 7 - DejaVu Component PATH Variable Privilege Escalation

Roxio Toast 7 - DejaVu Component PATH Variable Privilege Escalation source: https://www.securityfocus.com/bid/19596/info Roxio Toast is prone to a local privilege-escalation vulnerability because it fails to properly sanitize user-supplied input. As a result, local users may set their own search...

PSWD.JS - Insecure Password Hash

PSWD.JS - Insecure Password Hash / source: https://www.securityfocus.com/bid/19333/info Applications running pswd.js are prone to an insecure password-hash weakness. This issue is due to a design flaw that results in password hashes being created in an insecure manner. This issue allows attackers...

PSWD.JS - Insecure Password Hash

/ source: https://www.securityfocus.com/bid/19333/info Applications running pswd.js are prone to an insecure password-hash weakness. This issue is due to a design flaw that results in password hashes being created in an insecure manner. This issue allows attackers to use precomputed password hash...

Claroline E-Learning 1.6 - Remote Hash SQL Injection (1)

Claroline E-Learning 1.6 - Remote Hash SQL Injection 1 Alphaprogrammer , Oilkarchack , DrCephaleX , Str0ke And Iranian Hacking & Security Teams : IHS TeaM , alphaST , Shabgard Security Team , Emperor Hacking Team , Crouz Security Team & Simorgh-ev Security Team Config : please replace your addres...

DeluxeFtp 6.x - Local Password Disclosure

/ DeluxeFtp 6.x Local Password Disclosure Exploit by Kozan Application: DeluxeFtp 6.x and probably prior versions Vendor: www.deluxeftp.com Vulnerable Description: DeluxeFtp 6.x discloses passwords to local users. Bug Discovered by: Lostmon Exploit Coded by: Kozan Credits to ATmaCA Web:...

SCT Campus Pipeline 1.0/2.x/3.x - 'Render.UserLayoutRootNode.uP' Cross-Site Scripting

source: https://www.securityfocus.com/bid/11392/info Campus Pipeline is affected by a cross-site scripting vulnerability. This issue is due to a failure of the application to properly sanitize user-supplied URI input. This issue could permit a remote attacker to create a malicious URI link that...

RhinoSoft Serv-U FTP Server 3.x4.x5.0 - LIST Buffer Overflow

RhinoSoft Serv-U FTP Server 3.x4.x5.0 - LIST Buffer Overflow source: https://www.securityfocus.com/bid/10181/info Reportedly Serv-U is affected by a remote buffer overflow vulnerability in the list parameter. This issue is due to a failure of the application to properly validate buffer boundaries...

Dell TrueMobile 1300 WLAN System 3.10.39.0 Tray Applet - Local Privilege Escalation

source: https://www.securityfocus.com/bid/9714/info It has been reported that a privilege escalation vulnerability exists in the Dell TrueMobile 1300 Wireless System Tray Applet. The issue is due to the software starting with SYSTEM privileges, to enable access to the wireless hardware, and...

netbeans.java.txt

Reply-To: Halcyon Skinner Vulnerable Application: Sun Microsystems NetBeans recently renamed to Forte' Java IDE Versions tested: Netbeans Developer 3.0 Beta Forte Community Edition 1.0 Beta unknown if earlier versions have vulnerability Platform tested: Windows NT 4.0 unknown if other platforms...