4997 matches found
Usermin 2.100 - Username Enumeration
Exploit Title: Usermin 2.100 - Username Enumeration Date: 10.02.2024 Exploit Author: Kjesper Vendor Homepage: https://www.webmin.com/usermin.html Software Link: https://github.com/webmin/usermin Version: = 2.100 Tested on: Kali Linux CVE: CVE-2024-44762...
CVE-2025-24859
A session management vulnerability exists in Apache Roller before version 6.1.5 where active user sessions are not properly invalidated after password changes. When a user's password is changed, either by the user themselves or by an administrator, existing sessions remain active and usable. This...
CVE-2025-24949
In JotUrl 2.0, is possible to bypass security requirements during the password change process...
CVE-2025-24949
In JotUrl 2.0, is possible to bypass security requirements during the password change process...
CVE-2025-24949
In JotUrl 2.0, is possible to bypass security requirements during the password change process...
CVE-2025-24949
In JotUrl 2.0, is possible to bypass security requirements during the password change process...
JotUrl 安全漏洞
JotUrl is a marketing integration suite from JotUrl, Inc. A security vulnerability exists in JotUrl version 2.0 that stems from a password change process that can bypass security requirements...
CVE-2025-24949
CVE-2025-24949 affects JotUrl 2.0. Described vulnerability: bypass of security requirements during the password change process. Per initial data, CVSSv3.1: AV:N, AC:H, PR:N, UI:N, S:U, C:H, I:L, A:N (base score 6.5, MEDIUM). Exploitation details are not provided in the connected records, and ther...
PT-2025-16358 · Joturl · Joturl
Name of the Vulnerable Software and Affected Versions: JotUrl version 2.0 Description: The issue allows bypassing security requirements during the password change process. Recommendations: For JotUrl version 2.0, at the moment, there is no information about a newer version that contains a fix for...
CVE-2025-24859
A session management vulnerability exists in Apache Roller before version 6.1.5 where active user sessions are not properly invalidated after password changes. When a user's password is changed, either by the user themselves or by an administrator, existing sessions remain active and usable. This...
CVE-2025-24859 Apache Roller: Insufficient Session Expiration on Password Change
A session management vulnerability exists in Apache Roller before version 6.1.5 where active user sessions are not properly invalidated after password changes. When a user's password is changed, either by the user themselves or by an administrator, existing sessions remain active and usable. This...
CVE-2025-24859
CVE-2025-24859 affects Apache Roller
CVE-2025-24859 Apache Roller: Insufficient Session Expiration on Password Change
A session management vulnerability exists in Apache Roller before version 6.1.5 where active user sessions are not properly invalidated after password changes. When a user's password is changed, either by the user themselves or by an administrator, existing sessions remain active and usable. This...
CVE-2025-24859 Apache Roller: Insufficient Session Expiration on Password Change
A session management vulnerability exists in Apache Roller before version 6.1.5 where active user sessions are not properly invalidated after password changes. When a user's password is changed, either by the user themselves or by an administrator, existing sessions remain active and usable. This...
Apache Roller 代码问题漏洞
Apache Roller is the United States Apache Apache Foundation of a Java-based multi-user open source blogging system. A code issue vulnerability exists in Apache Roller 6.1.4 and earlier versions, which stems from a password change that does not properly invalidate the session and can be exploited ...
CVE-2025-23391
A Incorrect Privilege Assignment vulnerability in SUSE rancher allows a Restricted Administrator to change the password of Administrators and take over their accounts. This issue affects rancher: from 2.8.0 before 2.8.14, from 2.9.0 before 2.9.8, from 2.10.0 before 2.10.4...
The vulnerability of the Data Manager component of Siemens SENTRON 7KT PAC1260 multi-functional measurement instruments for electrical networks allows a hacker to alter the system password.
The vulnerability of the Data Manager component of the microprogramming software for multifunctional measurement instruments for Siemens SENTRON 7KT PAC1260 lies in the lack of necessary checks during password changes. Exploiting this vulnerability could allow an attacker to remotely change the...
CVE-2025-23391
A Incorrect Privilege Assignment vulnerability in SUSE rancher allows a Restricted Administrator to change the password of Administrators and take over their accounts. This issue affects rancher: from 2.8.0 before 2.8.14, from 2.9.0 before 2.9.8, from 2.10.0 before 2.10.4...
CVE-2025-23391 Rancher: Restricted Administrator can change Administrator's passwords
A Incorrect Privilege Assignment vulnerability in SUSE rancher allows a Restricted Administrator to change the password of Administrators and take over their accounts. This issue affects rancher: from 2.8.0 before 2.8.14, from 2.9.0 before 2.9.8, from 2.10.0 before 2.10.4...