PT-2019-14515

Name of the Vulnerable Software and Affected Versions Plataformatec Devise versions prior to 4.7.1 Description An issue was discovered that confirms accounts upon receiving a request with a blank confirmation token, if a database record has a blank value in the confirmation token column. However,...

CVE-2018-20301: Improper Input Validation

An issue was discovered in Steve Pallen Coherence before 0.5.2 that is similar to a Mass Assignment vulnerability. In particular, "registration" endpoints e.g., creating, editing, updating allow users to update any coherencefields data. For example, users can automatically confirm their accounts ...

Aspen: No Rate Limit (Leads to huge email flooding/email bombing)

Dear sir, At first,i want to say that this sensitive action definitely should be set with rate limit. Note:-This is about huge bombing/brute force on any endpoints. Vulnerability:- -No rate limit has been set for generating account confirmation emails for accounts on above selected domain which i...

Khan Academy: Rate Limitation Vulnerability (DDos)

Rate limiting on account confirmation emails and forgot password...

Moodle 2.6.x < 2.6.11 / 2.7.x < 2.7.8 Multiple Vulnerabilities

Binary data 9426.prm...

CVE-2015-3176

The account-confirmation feature in login/confirm.php in Moodle through 2.5.9, 2.6.x before 2.6.11, 2.7.x before 2.7.8, and 2.8.x before 2.8.6 allows remote attackers to obtain sensitive full-name information by attempting to self-register...

CVE-2015-3176

The account-confirmation feature in login/confirm.php in Moodle through 2.5.9, 2.6.x before 2.6.11, 2.7.x before 2.7.8, and 2.8.x before 2.8.6 allows remote attackers to obtain sensitive full-name information by attempting to self-register...

UBUNTU-CVE-2015-3176

The account-confirmation feature in login/confirm.php in Moodle through 2.5.9, 2.6.x before 2.6.11, 2.7.x before 2.7.8, and 2.8.x before 2.8.6 allows remote attackers to obtain sensitive full-name information by attempting to self-register...

Threat Outbreak Alert: Fake Bank Account Credit Deposit Confirmation Email Messages on May 19, 2014

Medium Alert ID: 34285 First Published: 2014 May 20 13:49 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a bank account funds transfer confirmation notice for the recipient. The text in the email message attempts to...

Threat Outbreak Alert: Fake Account Confirmation Notification Email Messages on March 25, 2014

Medium Alert ID: 33499 First Published: 2014 March 25 17:12 GMT Version: 1 Summary Cisco Security has detected significant activity related to French-language spam email messages that claim to contain an account confirmation notice for the recipient. The text in the email message attempts to...

osDate - uploadvideos.php Arbitrary File Upload

osDate - uploadvideos.php Arbitrary File Upload ==================================================== osDate Upload Shell Vulnerability uploadvideos.php ==================================================== Date : 05/08/2010 Author : Xa7m3d Tested ON : ubuntu 9.10 MY Team : Currently no Software Li...