PT-2021-22288

Name of the Vulnerable Software and Affected Versions Raspberry Pi OS versions through 5.10 Description The issue concerns a hard-coded password in Raspberry Pi OS. If the default password for the pi account is not changed, attackers can gain administrator privileges. Recommendations For Raspberr...

CVE-2021-42955

Zoho Remote Access Plus Server Windows Desktop binary fixed in version 10.1.2132 is affected by an unauthorized password reset vulnerability. Because of the designed password reset mechanism, any non-admin Windows user can reset the password of the Remote Access Plus Server Admin account...

Indexhibit Cross-Site Request Forgery Vulnerability

Indexhibit is a web-based content management system. indexhibit version 2.1.5 is vulnerable to cross-site request forgery. An attacker can use this vulnerability to arbitrarily reset the account password...

MCS-provisioned VDA dropped out of the domain after OS upgrade

Following an OS upgrade, MCS-provisioned VDAs leave their domain on reboot. You may also observe computer account password resets at that time...

CVE-2017-16631

In SapphireIMS 40971, a guest user is able to change the password of an administrative user by utilizing an Insecure Direct Object Reference IDOR in the "Account Password Reset" functionality...

CVE-2017-16631

In SapphireIMS 40971, a guest user is able to change the password of an administrative user by utilizing an Insecure Direct Object Reference IDOR in the "Account Password Reset" functionality...

Default credentials

In SapphireIMS 40971, a guest user is able to change the password of an administrative user by utilizing an Insecure Direct Object Reference IDOR in the "Account Password Reset" functionality...

CVE-2017-16631

In SapphireIMS 40971, a guest user is able to change the password of an administrative user by utilizing an Insecure Direct Object Reference IDOR in the "Account Password Reset" functionality...

CVE-2017-16631

In SapphireIMS 40971, a guest user is able to change the password of an administrative user by utilizing an Insecure Direct Object Reference IDOR in the "Account Password Reset" functionality...

CVE-2017-16631

In SapphireIMS 4097_1, an Insecure Direct Object Reference (IDOR) in the Account Password Reset feature allows a guest user to change an administrative user’s password. Root cause: IDOR exposure enabling unauthorized password reset. Impact: unauthorized admin credential modification. Exploitation...

Information Leakage Vulnerability in Jinpan Software's Refined Management Platform

Beijing Jinpan Pengtu Software Technology Co., Ltd. was founded in 1995, is specializing in library information automation product development, promotion and application and system maintenance of high-tech enterprises. There is an information leakage vulnerability in Jinpan Software Refinement...

Logic flaw vulnerability in the management center of the Jiafa inspection command system

Chengdu Jiafa Antai Education Technology Co., Ltd. is a company whose business scope includes: sales of commercial cryptographic products that have been approved by the State Cryptography Administration and have passed the product quality testing of designated testing organizations valid for...

Flying FishStar Enterprise Intelligent Internet Behavior Management System Has Logic Flaw Vulnerability

Chengdu Flying Fish Star Technology Co., Ltd. is a company dedicated to providing intelligent and easy-to-use network communication products and services, continuously improving the quality of network usage through innovative technologies, and cooperating with users to create an intelligent and...

Information Leakage Vulnerability in D-Link DCS-4622

The DCS-4622 is a three megapixel 360-degree fisheye webcam. The D-Link DCS-4622 suffers from an information leakage vulnerability that can be exploited by an attacker to obtain an account password...

Logic Flaw Vulnerability in Hsing Yun Butler

Line Cloud Manager is a cloud computing management platform launched by Shenzhen AoGuan Software Co. There is a logic flaw vulnerability in Hsing Yun Butler. Attackers can use it to bypass server authentication, reset account passwords, and obtain sensitive information...

Exploit for CVE-2020-1472

CVE-2020-1472 - Zero-Logon POC !alt texthttps://github.com...

OSIsoft PI Vision Information Disclosure Vulnerability

OSIsoft PI Vision is a set of commercialized software application platform based on Ckient/Server structure from OSIsoft, supporting data acquisition, analysis and visualization. An information disclosure vulnerability exists in OSIsoft PI Vision, which can be exploited by an attacker to obtain a...

CentOS Web Panel Input Validation Error Vulnerability (CNVD-2019-32252)

CentOS Web Panel CWP is a free web hosting control panel. An input validation error vulnerability exists in CentOS Web Panel version 0.9.8.851, which can be exploited by an attacker to change the email password in an affected user account...

CVE-2019-10661

On Grandstream GXV3611IRHD before 1.0.3.23 devices, the root account lacks a password...

Cobham Satcom Sailor 250 and 500 Trust Management Vulnerabilities

The Cobham Satcom Sailor 250 and Cobham Satcom Sailor 500 are both shipboard maritime satellite broadband terminals from Cobham UK. A security vulnerability exists in the Cobham Satcom Sailor 250 and 500 using firmware versions prior to 1.25. A remote attacker could use this vulnerability to chan...