Logic flaw vulnerability in ourphp website builder system

OURPHP OURPHP Building System is a web content management system developed using the PHP language. A logic flaw vulnerability exists in ourphp website builder system. An attacker can exploit the vulnerability to register any user...

Arbitrary user login vulnerability in DeDecms cookie.helper.php file

Weaving dream content management system DedeCms is a PHP open source website management system. There is an arbitrary user login vulnerability in the DeDecms cookie.helper.php file. Attackers can use the vulnerability to bypass the security checks , login any user...

BuddyBoss Media <= 3.2.3 - Stored XSS

The album description does not perform input / output validation. According to the researcher: No reply from vendor. Issue not patched. Vulnerability can be exploited by any user. Form not vulnerable to CSRF. PoC '"...

UBUNTU-CVE-2017-1000433

pysaml2 version 4.4.0 and older accept any password when run with python optimizations enabled. This allows attackers to log in as any user without knowing their password...

Arbitrary User Password Reset Vulnerability in MyoHealth Android App

MyoHealth Android app is a mobile health management platform client that provides good health behavior management services for corporate users. MyoHealth Android app has an arbitrary user password reset vulnerability that allows an attacker to reset another person's password via their cell phone...

S-CMS v3.0 build20170522 exists foreground arbitrary user password reset vulnerability

S-CMS is a corporate website building system developed by Zibo Shining Network Technology Co. S-CMS v3.0 build20170522 /member/membersetpwd.asp page exists in the foreground any user password reset vulnerability, allowing an attacker to use the vulnerability to reset the foreground any user...

DEBIAN-CVE-2017-5604

An incorrect implementation of "XEP-0280: Message Carbons" in multiple XMPP clients allows a remote attacker to impersonate any user, including contacts, in the vulnerable application's display. This allows for various kinds of social engineering attacks. This CVE is for mcabber 1.0.0 - 1.0.4...

InvoicePlane Password Reset Vulnerability

InvoicePlane is a free and open source goods billing and customer management software. A password reset vulnerability exists in the index.php/sessions/passwordreset page of InvoicePlane version 1.4.8, which can be exploited by an attacker to reset the password of any user...

Resource Data Management Elevation of Privilege Vulnerability

Resource Data Management is a Web-based SCADA monitoring system. An elevation of privilege vulnerability exists in the implementation of Resource Data Management. An attacker can exploit this vulnerability to elevate privileges and change the password of any user...

IBM Rational Jazz Team Server Arbitrary User Dashboard Deletion Vulnerability

IBM Rational Jazz Team Server JTS is a set of U.S. IBM's Java collaboration platform based on the new generation of IBM Rational products. The platform is encapsulated as a Web archive file WAR file, along with Rational Team Concert 1.0 RTC1.0 with the release , can be deployed on the application...