Burk Technology ARC Solo 访问控制错误漏洞

Burk Technology ARC Solo is an IP-based remote monitoring and control system from Burk USA. An access control error vulnerability exists in Burk Technology ARC Solo that stems from a password change mechanism that does not properly validate authentication, potentially leading to device takeover...

PT-2025-32330 · Burk Technology · Arc Solo

Name of the Vulnerable Software and Affected Versions: Burk Technology ARC Solo affected versions not specified Description: The password change mechanism in Burk Technology ARC Solo does not require proper authentication, potentially allowing an attacker to take over the device. A password chang...

CVE-2025-46389

CWE-620: Unverified Password Change...

CVE-2025-46389

CWE-620: Unverified Password Change...

Emby MediaBrowser 安全漏洞

Emby MediaBrowser is a media server software from Emby. A security vulnerability exists in Emby MediaBrowser that can be exploited by an attacker to change passwords without verification...

PT-2025-32155 · Emby · Mediabrowser

Name of the Vulnerable Software and Affected Versions: affected versions not specified Description: The issue involves an unverified password change, potentially allowing unauthorized modification of user credentials. Recommendations: At the moment, there is no information about a newer version...

ZenML < 0.57.0 Account Takeover

According to its banner, the version of ZenML running on the remote host is 0.57.0. It is, therefore, affected by an Account Takeover due to the lack of rate-limiting in the password change function. Note that the scanner has not tested for these issues but has instead relied only on the...

Student Result Management System /elms/emp-changepassword.php Component Session Hijacking Vulnerability

Student Result Management System is a student result management system. Student Result Management System suffers from a session hijacking vulnerability that stems from an improperly disabled session in component /elms/emp-changepassword.php, no details of the vulnerability are available at this...

CVE-2025-50493

Improper session invalidation in the component /doctor/change-password.php of PHPGurukul Doctor Appointment Management System v1 allows attackers to execute a session hijacking attack...

CVE-2025-50484

Improper session invalidation in the component /crm/change-password.php of PHPGurukul Small CRM v3.0 allows attackers to execute a session hijacking attack...

CVE-2025-50493

Improper session invalidation in the component /doctor/change-password.php of PHPGurukul Doctor Appointment Management System v1 allows attackers to execute a session hijacking attack...

PHPGurukul e-Diary Management System 安全漏洞

The e-Diary Management System is an electronic diary management system. The e-Diary Management System suffers from a session hijacking vulnerability that stems from improper session invalidation of the component /edms/change-password.php. No details of the vulnerability are available at this time...

Malwarebytes: Replayable Password Change Request Across Sessions.

Vulnerability description not provided...

Security Bulletin: A Function Level Control vulnerability in IBM Operations Analytics - Log Analysis (CVE-2024-41751)

Summary A privilege escalation vulnerability exists in IBM Operations Analytics - Log Analysis. It allows low-privilege users to change the password of high-privilege accounts through intercepting the request. This has been addressed. Vulnerability Details CVEID:CVE-2024-41751 DESCRIPTION: IBM...

CVE-2025-7610

A vulnerability was found in code-projects Electricity Billing System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /user/changepassword.php. The manipulation of the argument newpassword leads to sql injection. The attack may be launched remotely...

CVE-2025-4606

The Sala - Startup & SaaS WordPress Theme theme for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 1.1.4. This is due to the theme not properly validating a user's identity prior to updating their details like password. This makes it...

CVE-2025-4606

The CVE-2025-4606 entry concerns the Sala - Startup & SaaS WordPress Theme and its vulnerability to unauthenticated privilege escalation. Affected versions are all up to 1.1.4, where the theme fails to properly validate a user’s identity before updating details such as passwords. This allows an u...

PT-2025-28838 · Unknown · Sala - Startup & Saas Wordpress Theme

Name of the Vulnerable Software and Affected Versions: Sala - Startup & SaaS WordPress Theme versions prior to 1.1.5 Description: The issue arises from the theme's failure to properly validate a user's identity before updating their details, such as the password. This allows unauthenticated...

The vulnerability of the implementation of the reqToChangePassword method in the SINEC NMS network data management system allows a hacker to gain unauthorized access to the system.

The vulnerability of the reqToChangePassword method implementation in the SINEC NMS network data management system is related to the absence of a authentication mechanism before granting access to the password change function. Exploiting this vulnerability could allow an attacker, operating...

UTT Progressive 750W Unauthenticated Password Change Vulnerability

The UTT Progress 750W is an enterprise-grade dual-band wireless router from Atech Technology UTT, which is aimed at SMB network environments. The UTT Progress 750W suffers from an unauthenticated password change vulnerability, which originates from an unauthenticated password change due to...