PT-2025-21871 · D Link · D-Link Di-7003Gv2

Name of the Vulnerable Software and Affected Versions: D-Link DI-7003GV2 version 24.04.18D1 R68125 Description: A critical issue was found, affecting the function sub 41F4F0 of the file "/H5/webgl.asp?tggl port=0&remote management=0&http passwd=game&exec service=admin-restart". This leads to an...

CVE-2025-46748

An authenticated user attempting to change their password could do so without using the current password...

CVE-2025-4558

The GPM from WormHole Tech has an Unverified Password Change vulnerability, allowing unauthenticated remote attackers to change any user's password and use the modified password to log into the system...

CVE-2025-4552

A vulnerability has been found in ContiNew Admin up to 3.6.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /dev-api/system/user/1/password. The manipulation leads to unverified password change. The attack can be launched remotely. The exploi...

PT-2025-23242 · Freescout · Freescout

Name of the Vulnerable Software and Affected Versions: FreeScout versions prior to 1.8.180 Description: FreeScout is a free self-hosted help desk and shared mailbox. The issue arises from the lack of verification for the absence of the password field in user data when adding and editing user...

CVE-2025-46748

An authenticated user attempting to change their password could do so without using the current password...

CVE-2025-46742

Users who were required to change their password could still access system information before changing their password...

CVE-2025-46748 Unverified Password Change

An authenticated user attempting to change their password could do so without using the current password...

CVE-2025-46748

CVE-2025-46748 describes an authenticated user being able to change their password without providing the current password. Multiple connected sources confirm the issue and reference affected Schweitzer Engineering Laboratories products (e.g., SEL-5033 acSELerator RTAC software, SEL-5702, SEL-5035...

CVE-2025-46748 Unverified Password Change

An authenticated user attempting to change their password could do so without using the current password...

CVE-2025-46742

CVE-2025-46742 affects Schweitzer Engineering Laboratories products (e.g., SEL Blueframe OS and related SEL RTAC software). The root cause is an unchanged password that allows users who are required to change their password to still access system information before completing the change. Document...

CVE-2025-46742 Improper Access Control

Users who were required to change their password could still access system information before changing their password...

CVE-2025-46742 Improper Access Control

Users who were required to change their password could still access system information before changing their password...

CVE-2025-4558

The GPM from WormHole Tech has an Unverified Password Change vulnerability, allowing unauthenticated remote attackers to change any user's password and use the modified password to log into the system...

CVE-2025-4558 WormHole Tech GPM - Unverified Password Change

The GPM from WormHole Tech has an Unverified Password Change vulnerability, allowing unauthenticated remote attackers to change any user's password and use the modified password to log into the system...

CVE-2025-4558

CVE-2025-4558 affects WormHole Tech GPM (GPM from WormHole Tech). The vulnerability is an Unverified Password Change that allows unauthenticated remote attackers to change any user’s password and then use the modified password to log in. Publicly documented details in connected sources indicate a...

CVE-2025-4558

The GPM from WormHole Tech has an Unverified Password Change vulnerability, allowing unauthenticated remote attackers to change any user's password and use the modified password to log into the system...

CVE-2025-4558 WormHole Tech GPM - Unverified Password Change

The GPM from WormHole Tech has an Unverified Password Change vulnerability, allowing unauthenticated remote attackers to change any user's password and use the modified password to log into the system...

CVE-2025-4552

A vulnerability has been found in ContiNew Admin up to 3.6.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /dev-api/system/user/1/password. The manipulation leads to unverified password change. The attack can be launched remotely. The exploi...

PT-2025-20720 · Schweitzer Engineering Laboratories · Sel Blueframe Os

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: An issue exists where an authenticated user can change their password without needing to provide the current password. Recommendations: At the moment, there is no information about a newer...