CVE-2025-29520

CVE-2025-29520 affects D-Link DSL-7740C (firmware DSL7740C.V6.TR069.20211230). The root cause is an incorrect access-control in the Maintenance module, allowing authenticated attackers with low-level privileges to arbitrarily change high-privileged account passwords, enabling privilege escalation...

Linux Distros Unpatched Vulnerability : CVE-2016-5838

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - WordPress before 4.5.3 allows remote attackers to bypass intended password-change restrictions by leveraging knowledge of a cookie. CVE-2016-5838 Note that Ness...

Linux Distros Unpatched Vulnerability : CVE-2017-0921

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GitLab Community and Enterprise Editions before 10.1.6, 10.2.6, and 10.3.4 are vulnerable to an unverified password change issue in the PasswordsController...

CVE-2025-55629

Insecure permissions in Reolink Smart 2K+ Plug-in Wi-Fi Video Doorbell with Chime - firmware v3.0.0.46622503122283 allow attackers to arbitrarily change other users' passwords via manipulation of the userName value...

Linux Distros Unpatched Vulnerability : CVE-2009-3580

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Cross-site request forgery CSRF vulnerability in am.pl in SQL-Ledger 2.8.24 allows remote attackers to hijack the authentication of arbitrary users for requests...

CVE-2022-43110

Voltronic Power ViewPower through 1.04-21353 and PowerShield Netguard before 1.04-23292 allows a remote attacker to configure the system via an unspecified web interface. An unauthenticated remote attacker can make changes to the system including: changing the web interface admin password,...

PT-2025-34489 · Voltronic Power +1 · Viewpower +1

Name of the Vulnerable Software and Affected Versions: Voltronic Power ViewPower versions 1.04-21353 and earlier PowerShield Netguard versions prior to 1.04-23292 Description: A remote attacker can configure the system via a web interface without authentication. This includes changing the web...

CVE-2025-55629

Insecure permissions in Reolink Smart 2K+ Plug-in Wi-Fi Video Doorbell with Chime - firmware v3.0.0.46622503122283 allow attackers to arbitrarily change other users' passwords via manipulation of the userName value...

CVE-2025-55629

CVE-2025-55629 affects Reolink Smart 2K+ Plug-in Wi‑Fi Video Doorbell with Chime, firmware v3.0.0.4662_2503122283. The vulnerability stems from insecure permissions that let an attacker manipulate the userName value to arbitrarily change other users’ passwords. Product-specific details in multipl...

Medical Store Management System ChangePassword.java SQL Injection Vulnerability

Medical Store Management System is a pharmacy management system. The Medical Store Management System suffers from a SQL injection vulnerability that stems from the lack of validation of externally entered SQL statements in the parameter newPassTxt in the file ChangePassword.java. An attacker can...

Unspecified Vulnerability in Emby MediaBrowser (CNVD-2025-19597)

Emby MediaBrowser is a media server software from Emby. A security vulnerability exists in Emby MediaBrowser that can be exploited by an attacker to change passwords without verification...

Security Bulletin: A Security Vulnerability was found in the IBM Security Verify Access product.

Summary IBM Security Verify Access could allow could an unverified user to change the password of an expired user without prior knowledge of that password Vulnerability Details CVEID:CVE-2024-45647 DESCRIPTION: IBM Security Verify Access could allow could an unverified user to change the password...

CVE-2025-55170

WeGIA is an open source web manager with a focus on the Portuguese language and charitable institutions. Prior to version 3.4.8, a reflected cross-site scripting XSS vulnerability was identified in the /html/alterarsenha.php endpoint of the WeGIA application. This vulnerability allows attackers t...

CVE-2025-5095

Burk Technology ARC Solo's password change mechanism can be utilized without proper authentication procedures, allowing an attacker to take over the device. A password change request can be sent directly to the device's HTTP endpoint without providing valid credentials. The system does not enforc...

CVE-2025-5095

Burk Technology ARC Solo's password change mechanism can be utilized without proper authentication procedures, allowing an attacker to take over the device. A password change request can be sent directly to the device's HTTP endpoint without providing valid credentials. The system does not enforc...

CVE-2025-5095 Burk Technology ARC Solo Missing Authentication for Critical Function

Burk Technology ARC Solo's password change mechanism can be utilized without proper authentication procedures, allowing an attacker to take over the device. A password change request can be sent directly to the device's HTTP endpoint without providing valid credentials. The system does not enforc...

CVE-2025-5095

Burk Technology ARC Solo is affected by CVE-2025-5095: the device’s password-change endpoint accepts requests without valid credentials due to missing authentication/session validation, enabling an attacker to take control of the device. Reports note high-impact outcomes (full compromise risk) wi...

CVE-2025-5095 Burk Technology ARC Solo Missing Authentication for Critical Function

Burk Technology ARC Solo's password change mechanism can be utilized without proper authentication procedures, allowing an attacker to take over the device. A password change request can be sent directly to the device's HTTP endpoint without providing valid credentials. The system does not enforc...

CVE-2025-46389

CWE-620: Unverified Password Change...

Burk Technology ARC Solo 访问控制错误漏洞

Burk Technology ARC Solo is an IP-based remote monitoring and control system from Burk USA. An access control error vulnerability exists in Burk Technology ARC Solo that stems from a password change mechanism that does not properly validate authentication, potentially leading to device takeover...