Zucchetti Axess CLOKI Access Control 1.64 Cross Site Request Forgery

!-- Zucchetti Axess CLOKI Access Control 1.64 CSRF Disable Access Control Vendor: Zucchetti Axess S.p.A. Product web page: https://www.axesstmc.com Affected version: 1.64 1.63 1.54 Summary: CLOKI is the pre-installed application on our terminals that provides simple to use access control manageme...

PT-2021-22288

Name of the Vulnerable Software and Affected Versions Raspberry Pi OS versions through 5.10 Description The issue concerns a hard-coded password in Raspberry Pi OS. If the default password for the pi account is not changed, attackers can gain administrator privileges. Recommendations For Raspberr...

CVE-2021-42955

Zoho Remote Access Plus Server Windows Desktop binary fixed in version 10.1.2132 is affected by an unauthorized password reset vulnerability. Because of the designed password reset mechanism, any non-admin Windows user can reset the password of the Remote Access Plus Server Admin account...

Indexhibit Cross-Site Request Forgery Vulnerability

Indexhibit is a web-based content management system. indexhibit version 2.1.5 is vulnerable to cross-site request forgery. An attacker can use this vulnerability to arbitrarily reset the account password...

CVE-2021-32648: Improper Authentication

octobercms in a CMS platform based on the Laravel PHP Framework. In affected versions of the october/system package an attacker can request an account password reset and then gain access to the account using a specially crafted request. The issue has been patched in Build 472 and v1.1.5...

MCS-provisioned VDA dropped out of the domain after OS upgrade

Following an OS upgrade, MCS-provisioned VDAs leave their domain on reboot. You may also observe computer account password resets at that time...

CVE-2017-16631

In SapphireIMS 40971, a guest user is able to change the password of an administrative user by utilizing an Insecure Direct Object Reference IDOR in the "Account Password Reset" functionality...

CVE-2017-16631

In SapphireIMS 40971, a guest user is able to change the password of an administrative user by utilizing an Insecure Direct Object Reference IDOR in the "Account Password Reset" functionality...

Default credentials

In SapphireIMS 40971, a guest user is able to change the password of an administrative user by utilizing an Insecure Direct Object Reference IDOR in the "Account Password Reset" functionality...

CVE-2017-16631

In SapphireIMS 40971, a guest user is able to change the password of an administrative user by utilizing an Insecure Direct Object Reference IDOR in the "Account Password Reset" functionality...

CVE-2017-16631

In SapphireIMS 40971, a guest user is able to change the password of an administrative user by utilizing an Insecure Direct Object Reference IDOR in the "Account Password Reset" functionality...

CVE-2017-16631

In SapphireIMS 4097_1, an Insecure Direct Object Reference (IDOR) in the Account Password Reset feature allows a guest user to change an administrative user’s password. Root cause: IDOR exposure enabling unauthorized password reset. Impact: unauthorized admin credential modification. Exploitation...

PT-2021-8565

Name of the Vulnerable Software and Affected Versions SapphireIMS version 4097 1 Description The issue allows a guest user to change the password of an administrative user by exploiting an Insecure Direct Object Reference IDOR in the "Account Password Reset" functionality. Recommendations For...

CVE-2017-16631: Incorrect Permission Assignment for Critical Resource

In SapphireIMS 40971, a guest user is able to change the password of an administrative user by utilizing an Insecure Direct Object Reference IDOR in the "Account Password Reset" functionality...

Information Leakage Vulnerability in Jinpan Software's Refined Management Platform

Beijing Jinpan Pengtu Software Technology Co., Ltd. was founded in 1995, is specializing in library information automation product development, promotion and application and system maintenance of high-tech enterprises. There is an information leakage vulnerability in Jinpan Software Refinement...

Logic flaw vulnerability in the management center of the Jiafa inspection command system

Chengdu Jiafa Antai Education Technology Co., Ltd. is a company whose business scope includes: sales of commercial cryptographic products that have been approved by the State Cryptography Administration and have passed the product quality testing of designated testing organizations valid for...

Flying FishStar Enterprise Intelligent Internet Behavior Management System Has Logic Flaw Vulnerability

Chengdu Flying Fish Star Technology Co., Ltd. is a company dedicated to providing intelligent and easy-to-use network communication products and services, continuously improving the quality of network usage through innovative technologies, and cooperating with users to create an intelligent and...

Information Leakage Vulnerability in D-Link DCS-4622

The DCS-4622 is a three megapixel 360-degree fisheye webcam. The D-Link DCS-4622 suffers from an information leakage vulnerability that can be exploited by an attacker to obtain an account password...

Logic Flaw Vulnerability in Hsing Yun Butler

Line Cloud Manager is a cloud computing management platform launched by Shenzhen AoGuan Software Co. There is a logic flaw vulnerability in Hsing Yun Butler. Attackers can use it to bypass server authentication, reset account passwords, and obtain sensitive information...

PT-2021-14473

Name of the Vulnerable Software and Affected Versions Synapse versions prior to 1.28.0 Description The issue is caused by missing input validation of some parameters on the endpoints used to confirm third-party identifiers, which could lead to excessive use of disk space and memory, resulting in...