CVE-2019-19659

A CSRF vulnerability exists in the Web File Manager's Edit Accounts functionality of Rumpus FTP Server 8.2.9.1. By exploiting it, an attacker can take over a user account by changing the password, update users' details, and escalate privileges via RAPR/DefineUsersSet.html...

Security Bulletin: Access Control Security Vulnerability Affects IBM Sterling File Gateway (CVE-2017-1550)

Summary IBM Sterling File Gateway could allow an authenticated user to change other user's passwords. Vulnerability Details CVEID: CVE-2017-1550 DESCRIPTION: IBM Sterling File Gateway could allow an authenticated user to change other user's passwords. CVSS Base Score: 6.5 CVSS Temporal Score: See...

CVE-2013-5116

Evernote prior to 5.5.1 has insecure password change...

CVE-2013-5116

CVE-2013-5116 affects the Android Evernote app prior to 5.5.1. The vulnerability allows password changes via aone‑click setup introduced by an ADB‑backups backdoor, enabling an attacker with physical access to extract a password reset URL from a backup and reset the user’s password without authen...

Information Disclosure

oak-core is vulnerable to information disclosure. The optional initial password change and password expiration features causes the new password to be disclosed due to the credentials object being retained and not removed upon a successful password change...

Cups Easy 1.0 Cross Site Request Forgery

Title: Cups Easy 1.0 - Cross Site Request Forgery Password Reset Date: 2020-01-28 Exploit Author: J3rryBl4nks Vendor Homepage: https://sourceforge.net/u/ajayshar76/profile/ Software Link: https://sourceforge.net/projects/cupseasy/files/cupseasylive-1.0/ Version: 1.0 Tested on Windows 10/Kali...

Cross site request forgery (csrf)

Cups Easy Purchase & Inventory 1.0 is vulnerable to CSRF that leads to admin account takeover via passwordmychange.php...

CVE-2020-8424

Cups Easy Purchase & Inventory 1.0 is vulnerable to CSRF that leads to admin account takeover via passwordmychange.php...

Information disclosure

The optional initial password change and password expiration features present in Apache Jackrabbit Oak 1.2.0 to 1.22.0 are prone to a sensitive information disclosure vulnerability. The code mandates the changed password to be passed as an additional attribute to the credentials object but does n...

CVE-2020-1940

The optional initial password change and password expiration features present in Apache Jackrabbit Oak 1.2.0 to 1.22.0 are prone to a sensitive information disclosure vulnerability. The code mandates the changed password to be passed as an additional attribute to the credentials object but does n...

Adive Framework 2.0.8 - Cross-Site Request Forgery (Change Admin Password) Vulnerability

Exploit for php platform in category web applications Exploit Title: Adive Framework 2.0.8 - Cross-Site Request Forgery Change Admin Password Exploit Author: Sarthak Saini Vendor Link : https://www.adive.es/ Software Link: https://github.com/ferdinandmartin/adive-php7 Version: 2.0.8...

Adive Framework 2.0.8 - Cross-Site Request Forgery (Change Admin Password)

Adive Framework 2.0.8 - Cross-Site Request Forgery Change Admin Password Exploit Title: Adive Framework 2.0.8 - Cross-Site Request Forgery Change Admin Password Exploit Author: Sarthak Saini Date: 2020-01-18 Vendor Link : https://www.adive.es/ Software Link:...

Cisco Hosted Collaboration Mediation Fulfillment Cross-Site Request Forgery Vulnerability (CNVD-2020-03756)

Cisco Hosted Collaboration Mediation Fulfillment HCM-F is part of the Cisco Hosted Collaboration Solution HCS and is a core management component. A cross-site request forgery vulnerability exists in the web-based interface of Cisco Hosted Collaboration Mediation Fulfillment versions prior to 12.5...

CVE-2019-19857

An issue was discovered in Serpico aka SimplE RePort wrIting and CollaboratiOn tool 1.3.0. An admin can change their password without providing the current password, by using interfaces outside the Change Password screen. Thus, requiring the admin to enter an Old Password value on the Change...

Design/Logic Flaw

An issue was discovered in Serpico aka SimplE RePort wrIting and CollaboratiOn tool 1.3.0. An admin can change their password without providing the current password, by using interfaces outside the Change Password screen. Thus, requiring the admin to enter an Old Password value on the Change...

CVE-2012-1562

CVE-2012-1562 affects Joomla! core prior to 2.5.3, allowing unauthorized password changes. This is corroborated by multiple sources (NVD, Red Hat, Nessus) in the provided documents. No concrete exploit details or remediation steps are present in the connected documents; remediation/version fixes ...

CVE-2012-1562

Joomla! core before 2.5.3 allows unauthorized password change...

CVE-2020-5841

An issue was discovered in OpServices OpMon 9.3.1-1. Using password change parameters, an attacker could perform SQL injection without authentication...

CVE-2020-5841

An issue was discovered in OpServices OpMon 9.3.1-1. Using password change parameters, an attacker could perform SQL injection without authentication...

Unspecified Vulnerability in Intelbras IWR 3000N

Intelbras IWR 3000N is a wireless router from Intelbras Poland. A security vulnerability exists in the Intelbras IWR 3000N version 1.8.7, which originates from the fact that when the administrator password is changed from a client's IP address, any client from that IP address can gain...