4969 matches found
CVE-2018-2408
SAP Business Objects (BI Launch Pad/CMC) versions 4.0–4.30 are affected by an improper session management vulnerability where, after a user changes their password, other active sessions created with the old password remain active. This can allow an attacker to reuse pre-existing sessions to acces...
MiniCMS 1.10 Cross Site Request Forgery
test document.forms0.submit;...
MiniCMS 1.10 - Cross-Site Request Forgery
test document.forms0.submit;...
Cross site request forgery (csrf)
There is a CSRF vulnerability in mc-admin/conf.php in MiniCMS 1.10 that can change the administrator account password...
CVE-2018-9092
There is a CSRF vulnerability in mc-admin/conf.php in MiniCMS 1.10 that can change the administrator account password...
Scilico I, Librarian Cross-Site Request Forgery Vulnerability
Scilico I, Librarian is the United States Scilico company a set of online PDF document management system. A cross-site request forgery vulnerability exists in the users.php file in Scilico I, Librarian 4.8 and earlier versions. A remote attacker could exploit this vulnerability to change the...
Cross site request forgery (csrf)
I, Librarian version 4.8 and earlier contains a Cross site Request Forgery CSRF vulnerability in users.php that can result in the password of the admin being forced to be changed without the administrator's knowledge...
CVE-2018-1000137
I, Librarian version 4.8 and earlier contains a Cross site Request Forgery CSRF vulnerability in users.php that can result in the password of the admin being forced to be changed without the administrator's knowledge...
CVE-2018-1000137
The provided connected sources confirm CVE-2018-1000137 affects I, Librarian
TL-WR720N 150Mbps Wireless N Router - Cross-Site Request Forgery
/ Exploit Title: TL-WR720N 150Mbps Wireless N Router - CSRF Date: 21-3-2018 Exploit Author: Mans van Someren Vendor Homepage: https://www.tp-link.com/ Software Link: https://static.tp-link.com/resources/software/TL-WR720NV1130719.zip Version: All versions because its a 0day Testen on: Google Chro...
Hikvision IP Camera versions 5.2.0 - 5.3.9 (Builds 140721 < 170109) - Access Control Bypass Explo
Exploit for hardware platform in category web applications Exploit Title: Hikvision IP Camera versions 5.2.0 - 5.3.9 Builds: 140721 - 170109 Backdoor Date: 15-03-2018 Vendor Homepage: http://www.hikvision.com/en/ Exploit Author: Matamorphosis Category: Web Apps Description: Exploits a backdoor in...
The vulnerability of the javax.naming.directory.AttributeInUseException class in the Virtual Member Manager component of the WebSphere Application Server server allows a attacker to gain access to the application.
The vulnerability of the javax.naming.directory.AttributeInUseException class in the Virtual Member Manager component of the WebSphere Application Server server is related to errors that occur during password updates using the IBM Tivoli Directory Server. Exploiting this vulnerability can allow a...
The vulnerability of the LDAP server in the Samba networking software package allows a hacker to alter the passwords of other users.
The vulnerability of the LDAP server of the Samba networking software, which is configured as an Active Directory domain controller, is related to deficiencies in the authentication mechanism. Exploiting this vulnerability allows a malicious actor to remotely change the passwords of other users...
Samba 4.x Password Change Vulnerability
On a Samba 4 AD DC any authenticated user can change other users' passwords over LDAP, including the passwords of administrative users and service accounts. ==================================================================== == Subject: Authenticated users can change other users' password == ==...
Hanwha Techwin Smartcam Remote Password Change Vulnerability
Hanwha Techwin Smartcam is a series of security surveillance cameras based on cloud-based services. A remote password change vulnerability exists in Hanwha Techwin Smartcam. An attacker can exploit this vulnerability to remotely change a password...
Samba Security Bypass Vulnerability (CNVD-2018-07048)
Samba is a freeware implementation of the SMB protocol on Linux and UNIX systems, consisting of a server and a client program. A security bypass vulnerability exists in Samba due to an LDAP server on a Samba Active Directory AD Domain Controller DC that does not properly validate privileges when...
Default credentials
Remote password change in Hanwha Techwin Smartcams...
CVE-2018-6300
Remote password change in Hanwha Techwin Smartcams...
CVE-2018-6300
CVE-2018-6300 affects Hanwha Techwin SmartCam family (e.g., SNH-V6410PN/PNW) where a remote password-change vulnerability exists. The connected materials describe that an attacker could remotely change the administrator password and, in some analyses, trigger remote command execution with root pr...
