Cisco Secure ACS Unauthorized Password Change

This module exploits an authentication bypass issue which allows arbitrary password change requests to be issued for any user in the local store. Instances of Secure ACS running version 5.1 with patches 3, 4, or 5 as well as version 5.2 with either no patches or patches 1 and 2 are vulnerable. Th...

CVE-2016-11069

An issue was discovered in Mattermost Server before 3.2.0. It mishandles brute-force attempts at password change...

CVE-2016-11069

An issue was discovered in Mattermost Server before 3.2.0. It mishandles brute-force attempts at password change...

Default credentials

An issue was discovered in Mattermost Server before 3.2.0. It mishandles brute-force attempts at password change...

CVE-2016-11069

An issue was discovered in Mattermost Server before 3.2.0. It mishandles brute-force attempts at password change...

CVE-2016-11069

Mattermost Server (before 3.2.0) contains a vulnerability in the password-change flow where brute-force attempts are mishandled, potentially enabling repeated password-change attempts. Affected product: Mattermost Server; initial description specifies 3.2.0 as the fixed version. Root cause: impro...

GaussDB: Changing the Password of the Initial User

The initial user SYS is a system administrator and has all system permissions. For database security, change the password of SYS as soon as possible after the database is installed. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and...

CVE-2020-5363

Select Dell Client Consumer and Commercial platforms include an issue that allows the BIOS Admin password to be changed through Dell's manageability interface without knowledge of the current BIOS Admin password. This could potentially allow an unauthorized actor, with physical access and/or OS...

74cms has a logic flaw vulnerability

74cms is a free and open source professional recruitment system based on PHP+MYSQL as the core development. 74cms has a logic flaw vulnerability that can be exploited by attackers to change user passwords...

CVE-2020-12017

GE Grid Solutions Reason RT Clocks, RT430, RT431, and RT434, all firmware versions prior to 08A05. The device’s vulnerability in the web application could allow multiple unauthenticated attacks that could cause serious impact. The vulnerability may allow an unauthenticated attacker to execute...

CVE-2020-12017

GE Grid Solutions Reason RT Clocks, RT430, RT431, and RT434, all firmware versions prior to 08A05. The device’s vulnerability in the web application could allow multiple unauthenticated attacks that could cause serious impact. The vulnerability may allow an unauthenticated attacker to execute...

CVE-2020-12017

CVE-2020-12017 affects GE Grid Solutions Reason RT Clocks RT430, RT431, and RT434 (firmware

The vulnerability of the distributed application server SPPA-T3000 lies in its ability to access the administration services for the application server and obtain user passwords as hash codes. This allows attackers to modify the passwords of application server users.

The vulnerability of the distributed application server SPPA-T3000 relates to the ability to access the administration services for the application server and obtain user passwords as hash codes. Exploiting this vulnerability could allow a malicious actor to remotely change the passwords of the...

NukeViet VMS 4.4.00 - Cross-Site Request Forgery (Change Admin Password) Vulnerability

Exploit for php platform in category web applications Exploit Title: NukeViet VMS 4.4.00 - Cross-Site Request Forgery Change Admin Password Exploit Author: JEBARAJ Vendor Homepage: https://nukeviet.vn/ Software Link:...

Remote Password Change Vulnerability in Haiwell's Cloud Configuration Software Cloud SCADA

Haiwell Haiwell Cloud SCADA is an industrial automation monitoring and management platform software developed by Xiamen Haiwell Technology Co. A remote password change vulnerability exists in Haiwell Cloud SCADA, which can be exploited by an attacker to change the password of the running system...

Logic flaws exist in the standard version of the mall system of Zhi Chang

Ltd. products are B2B2C multi-user mall system, O2O mall system, micro-distributor city system, cross-border e-commerce system, popular version of the mall system, WeChat multi-user small program system, WeChat small program mall system, WeChat small program group system, WeChat small program...

Longbrothers Digital OKLOK Code Issue Vulnerability

Longbrothers Digital Fingerprint Bluetooth Padlock FB50 and OKLOK are both products of Longbrothers Digital China.Fingerprint Bluetooth Padlock FB50 is a fingerprint round The Fingerprint Bluetooth Padlock FB50 is a fingerprint round padlock that supports fingerprint unlocking, remote unlocking...

Code injection

The OKLOK 3.1.1 mobile companion app for Fingerprint Bluetooth Padlock FB50 2.3 does not correctly implement its timeout on the four-digit verification code that is required for resetting passwords, nor does it properly restrict excessive verification attempts. This allows an attacker to brute...

Fortinet FortiMail and FortiVoice Entreprise Authorization Issues Vulnerability

Fortinet FortiMail and FortiVoice Entreprise are both products of the U.S. Fiat Fortinet, Inc. FortiMail is a suite of e-mail security gateway products. FortiMail is an email security gateway product that provides email security and data protection, etc. FortiVoice Entreprise is an enterprise...

CVE-2020-9294

An improper authentication vulnerability in FortiMail 5.4.10, 6.0.7, 6.2.2 and earlier and FortiVoiceEntreprise 6.0.0 and 6.0.1 may allow a remote unauthenticated attacker to access the system as a legitimate user by requesting a password change via the user interface...