139 matches found
Loadbalancer.org Enterprise VA 7.5.2 - Static SSH Key
----------- Author: ----------- xistence ------------------------- Affected products: ------------------------- Loadbalancer.org Enterprise VA 7.5.2 and below ------------------------- Affected vendors: ------------------------- Loadbalancer.org http://www.loadbalancer.org/...
VMware Player 4.x < 4.0.5 Multiple Vulnerabilities (VMSA-2012-0015)
The VMware Player 4.x install detected on the remote host is earlier than 4.0.5 and is, therefore, potentially affected by the following vulnerabilities : - Certain processes, when created, have weak security permissions assigned. It is possible to commandeer these process threads, which could...
VMware Workstation 8.x < 8.0.5 Multiple Vulnerabilities (VMSA-2012-0015)
The VMware Workstation 8.x install detected on the remote host is earlier than 8.0.5 and is, therefore, potentially affected by the following vulnerabilities : - Certain processes, when created, have weak security permissions assigned. It is possible to commandeer these process threads, which cou...
Update: Hacking Group TeaMp0isoN Claims Breach of T-Mobile
The hacking group TeaMp0isoN claims to have compromised Web servers used by T-Mobile, and absconded with account information for company employees, including members of T-Mobile’s media team. The group used a post on its official Twitter account taking responsibility for the attack, which targete...
ZOHO ManageEngine ADSelfService multiple vulnerabilities
Core Security Technologies - Corelabs Advisory ZOHO ManageEngine ADSelfService multiple vulnerabilities 1. Advisory Information Title: ZOHO ManageEngine ADSelfService multiple vulnerabilities Advisory ID: CORE-2011-0103 Advisory URL:...
Panda Global Protection / Panda Internet Security weak security permissions
Weak permissions for executable files...
Kaspersky Lab Multiple products privilege escalation
BASES directory contains executable files and has weak security permissions...
Rising Antivirus / Firewall weak security permissions
Weak permissions for program executables and services...
TrustPort Antivirus / TrustPort PC Security weak security permissions
Weak permissions for program files...
FreeBSD : typo3 -- multiple vulnerabilities (653606e9-f6ac-11dd-94d9-0030843d3802)
Secunia reports : Some vulnerabilities have been reported in Typo3, which can be exploited by malicious people to bypass certain security restrictions, conduct cross-site scripting and session fixation attacks, and compromise a vulnerable system. The 'Install tool' system extension uses...
CVE-2008-2019
Simple Machines Forum SMF, probably 1.1.4, relies on "randomly generated static" to hinder brute-force attacks on the WAV file aka audio CAPTCHA, which allows remote attackers to pass the CAPTCHA test via an automated attack that considers Hamming distances. NOTE: this issue reportedly exists...
Adobe air weak security model design
Application restrictions are not enforced...
Microsoft Windows Vista weak security permissions
Weak permissions for files and registry entries...
Cisco Router Web Setup weak default security settings
By default it's possible to access IOS Web interface without authentication with highest access security level...
Knox Arkeia Network Backup multiple vulnerabilities
Database files and password file have weak security premossions by default. Default root password is empty. Buffer overflow...
DUWare Multiple Products - Multiple Vulnerabilities
DUWare Multiple Vulnerabilities Vendor: DUWare Product: DUWare Version: Multiple Products Website: http://www.duware.com/ BID: 9246 Description: DUportal Pro is a professional Web portal and online community. DUportal Pro contains numerous advanced features such as Web-based administration,...
MySQL 3.x4.0.x - Weak Password Encryption
MySQL 3.x4.0.x - Weak Password Encryption // source: https://www.securityfocus.com/bid/7500/info MySQL has been reported to implement a weak password encryption algorithm. It has been reported that the MySQL function used to encrypt MySQL passwords makes just one pass over the password and employ...
Дырка в mkpasswd из expect (weak password generation)
Алгоритм генерации случайного пароля позволяет всего 32193 комбинаций...
[SECURITY] [DSA 042-1] New XEmacs and gnuserv packages available
---------------------------------------------------------------------------- Debian Security Advisory DSA-042-1 [email protected] http://www.debian.org/security/ Martin Schulze March 8, 2001 - ---------------------------------------------------------------------------- Packages : gnuserv,...