Unspecified Vulnerability in HCL Technologies AppScan Standard Edition

HCL Technologies AppScan Standard Edition is a suite of dynamic analysis testing tools from HCL Technologies, India, which is primarily used for web security testing. HCL Technologies AppScan Standard Edition suffers from an unspecified vulnerability that stems from an incorrect account lockout...

MSOLSpray - A Password Spraying Tool For Microsoft Online Accounts (Azure/O365)

A password spraying tool for Microsoft Online accounts Azure/O365. The script logs if a user cred is valid, if MFA is enabled on the account, if a tenant doesn't exist, if a user doesn't exist, if the account is locked, or if the account is disabled. BE VERY CAREFUL NOT TO LOCKOUT ACCOUNTS! Why...

Multiple HP Products Licensing Issues Vulnerabilities

The HP ENVY 5000 All-in-One Printer M2U85A, among others, is a printer from Hewlett-Packard HP in the United States. An authorization issue vulnerability exists in multiple HP products, which can be exploited by attackers to bypass account lockout...

CVE-2019-18917

A potential security vulnerability has been identified for certain HP Printers and All-in-Ones that would allow bypassing account lockout...

CVE-2019-18917

A potential security vulnerability has been identified for certain HP Printers and All-in-Ones that would allow bypassing account lockout...

Design/Logic Flaw

A potential security vulnerability has been identified for certain HP Printers and All-in-Ones that would allow bypassing account lockout...

CVE-2019-18917

CVE-2019-18917 affects certain HP Printers and All-in-One devices, where the underlying issue allows bypassing account lockout. The vulnerability is documented across multiple feeds, with HP’s own advisory (HP C06594863) confirming a potential account lockout bypass and noting that software updat...

CVE-2019-18917

A potential security vulnerability has been identified for certain HP Printers and All-in-Ones that would allow bypassing account lockout...

HPSBPI03660 rev. 1 - HP Inkjet Printers Account Lockout Issue

Potential Security Impact Account lockout bypass Source: HP, HP Product Security Response Team PSRT Reported by: Alexander Drabek, Logically Secure Limited VULNERABILITY SUMMARY A potential security vulnerability has been identified for certain HP Printers and All-in-Ones that would allow bypassi...

CVE-2019-14299

Ricoh SP C250DN 1.05 devices have an Authentication Method Vulnerable to Brute Force Attacks. Some Ricoh printers did not implement account lockout. Therefore, it was possible to obtain the local account credentials by brute force...

CVE-2019-13166

Some Xerox printers such as the Phaser 3320 V53.006.16.000 did not implement account lockout. Local account credentials may be extracted from the device via brute force guessing attacks...

CVE-2019-13166

Some Xerox printers such as the Phaser 3320 V53.006.16.000 did not implement account lockout. Local account credentials may be extracted from the device via brute force guessing attacks...

CVE-2019-13166

Some Xerox printers such as the Phaser 3320 V53.006.16.000 did not implement account lockout. Local account credentials may be extracted from the device via brute force guessing attacks...

Design/Logic Flaw

Some Xerox printers such as the Phaser 3320 V53.006.16.000 did not implement account lockout. Local account credentials may be extracted from the device via brute force guessing attacks...

CVE-2019-13166

CVE-2019-13166 affects Xerox printers (example: Phaser 3320 with V53.006.16.000). The root issue is lack of account lockout, enabling brute-force attempts to extract local credentials from the device. Public sources in connected documents confirm this vulnerability scenario and affected class, bu...

CVE-2019-13166

Some Xerox printers such as the Phaser 3320 V53.006.16.000 did not implement account lockout. Local account credentials may be extracted from the device via brute force guessing attacks...

Monero: Monero wallet password change is confirmed when not matching

Summary: If you change your wallet password in gui, the confirmation does not need to match the new password. Releases Affected: list each version and OS of the application affected list each version and OS of the application affected Steps To Reproduce: Open your wallet. Go to settings. Change...

Shopify: Able to Takeover Merchants Accounts Even They Have Already Setup SSO, After Bypassing the Email Confirmation

Able to Takeover Merchants Accounts Even They Have Already Setup SSO, After Bypassing the Email Confirmation Summary This report is based on the scenario that email confirmation has been bypassed already, like shown in 791775. What happened in 791775 was, I was too excited and didn't take a step...

Linux: Lockout time for locked accounts

The lockout time for locked accounts can be set in two modules: - pamtally2: The login counter tallying module - pamfaillock: Module counting authentication failures during a specified interval Use the unlocktime=n option to re-enable login after n seconds after the lock out. Copyright C 2020...

Insecure Authentication Controls

dolibarr/dolibarr is vulnerable to brute-force attacks. Lack of account lockout mechanism allows a remote attacker to attempt a brute-force attack on the log-in module to discover user credentials...