«
Expand/Collapse
84 items tagged "plus"
Related tags:
disclosure [+],
cross [+],
code execution [+],
sql injection [+],
download [+],
accelerator [+],
hijacking [+],
divx [+],
buffer overflow [+],
web player [+],
sql [+],
scripts [+],
classified ads [+],
classified [+],
web [+],
usernames passwords [+],
scriptrr [+],
quick notes [+],
quick [+],
proof of concept [+],
phpbb2 [+],
phpbb [+],
notes [+],
movie [+],
light [+],
integrated asset management [+],
file [+],
eqdkp [+],
edit [+],
dap [+],
cross site scripting [+],
com [+],
calisto [+],
buffer overflow vulnerability [+],
arbitrary files [+],
arbitrary data [+],
administrative users [+],
vulnerabilities [+],
txt [+],
security [+],
protection [+],
player versions [+],
new security architecture [+],
exploits [+],
day [+],
admanager [+],
vulnerability [+],
wii [+],
stack buffer [+],
stabilization system [+],
server authentication [+],
server [+],
safer use [+],
quadcopter [+],
poc [+],
player [+],
php [+],
photo album [+],
motion [+],
management server [+],
hacks [+],
even keel [+],
arduino [+],
arbitrary code execution [+],
advanced [+],
register [+],
manageengine [+],
wordpress [+],
servicedesk [+],
redux [+],
phpmychat [+]
-
-
13:21
»
Packet Storm Security Exploits
Register Plus versions 3.5.1 and below for WordPress suffer from code execution, cross site scripting and path disclosure vulnerabilities.
-
-
15:34
»
Packet Storm Security Exploits
Register Plus Redux versions 3.7.3.1 and below suffer from cross site scripting, remote SQL injection and code execution vulnerabilities.
-
-
15:55
»
Packet Storm Security Exploits
ManageEngine ServiceDesk Plus is a complete web based and ITIL ready service desk software with integrated asset management developed by ManageEngine, the Enterprise IT Management Software division of Zoho Corporation. The authentication process of ServiceDesk Plus obfuscates user passwords using a trivial and symmetrical algorithm in Javascript code with no secret. Given that user passwords are locally stored in user cookies and having the Javascript code to encrypt and decrypt passwords in a .js file, the authentication process of ServiceDesk Plus can be bypassed allowing an attacker to get usernames+passwords of registered users. Additionally, a cross site scripting vulnerability related to search functions was found.
-
15:55
»
Packet Storm Security Recent Files
ManageEngine ServiceDesk Plus is a complete web based and ITIL ready service desk software with integrated asset management developed by ManageEngine, the Enterprise IT Management Software division of Zoho Corporation. The authentication process of ServiceDesk Plus obfuscates user passwords using a trivial and symmetrical algorithm in Javascript code with no secret. Given that user passwords are locally stored in user cookies and having the Javascript code to encrypt and decrypt passwords in a .js file, the authentication process of ServiceDesk Plus can be bypassed allowing an attacker to get usernames+passwords of registered users. Additionally, a cross site scripting vulnerability related to search functions was found.
-
15:55
»
Packet Storm Security Misc. Files
ManageEngine ServiceDesk Plus is a complete web based and ITIL ready service desk software with integrated asset management developed by ManageEngine, the Enterprise IT Management Software division of Zoho Corporation. The authentication process of ServiceDesk Plus obfuscates user passwords using a trivial and symmetrical algorithm in Javascript code with no secret. Given that user passwords are locally stored in user cookies and having the Javascript code to encrypt and decrypt passwords in a .js file, the authentication process of ServiceDesk Plus can be bypassed allowing an attacker to get usernames+passwords of registered users. Additionally, a cross site scripting vulnerability related to search functions was found.
-
9:01
»
Hack a Day
If you’re contemplating a quadcopter build here’s a way to add stabilization hardware without breaking the bank. The BaronPilot project uses an Arduino and a Wii Motion Plus module to ensure an even keel for your flying projects. The hardware inside of the Motion Plus includes two gyroscopes, which the BaronPilot monitors for changes in [...]
-
-
13:05
»
Packet Storm Security Exploits
ManageEngine ServiceDesk Plus version 8.0 allows a user with limited privileges access to certain functionality that should only be available to administrative users. Proof of concept included.
-
13:05
»
Packet Storm Security Recent Files
ManageEngine ServiceDesk Plus version 8.0 allows a user with limited privileges access to certain functionality that should only be available to administrative users. Proof of concept included.
-
13:05
»
Packet Storm Security Misc. Files
ManageEngine ServiceDesk Plus version 8.0 allows a user with limited privileges access to certain functionality that should only be available to administrative users. Proof of concept included.
-
-
20:29
»
SecuriTeam
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Postgres Plus Advanced Server DBA Management Server.
-
Make your website safer. Use external penetration testing service. First report ready in one hour!
-
-
9:30
»
Packet Storm Security Exploits
Register Plus Redux version 3.6.1 for WordPress suffers from cross site scripting, insufficient anti-automation and path disclosure vulnerabilities.
-
9:30
»
Packet Storm Security Recent Files
Register Plus Redux version 3.6.1 for WordPress suffers from cross site scripting, insufficient anti-automation and path disclosure vulnerabilities.
-
9:30
»
Packet Storm Security Misc. Files
Register Plus Redux version 3.6.1 for WordPress suffers from cross site scripting, insufficient anti-automation and path disclosure vulnerabilities.