CVE-2016-5838

WordPress before 4.5.3 allows remote attackers to bypass intended password-change restrictions by leveraging knowledge of a cookie...

DEBIAN-CVE-2016-5838

WordPress before 4.5.3 allows remote attackers to bypass intended password-change restrictions by leveraging knowledge of a cookie...

UBUNTU-CVE-2016-5838

WordPress before 4.5.3 allows remote attackers to bypass intended password-change restrictions by leveraging knowledge of a cookie...

CVE-2016-5838

WordPress vulnerability CVE-2016-5838: The product (WordPress) before version 4.5.3 can bypass password-change restrictions by using knowledge of a cookie. Root cause is improper validation of cookie-derived state during password changes. Impact: enables remote attackers to bypass password-change...

FreeBSD : wordpress -- multiple vulnerabilities (bfcc23b6-3b27-11e6-8e82-002590263bf5)

Adam Silverstein reports : WordPress 4.5.3 is now available. This is a security release for all previous versions and we strongly encourage you to update your sites immediately. WordPress versions 4.5.2 and earlier are affected by several security issues: redirect bypass in the customizer, report...

FantasyTote: Insecure password change mechanism may lead to full account takeover

Description: The password change mechanism which is located at https://www.fantasytote.com/users/edit is insecure as there is no old password field deployed in it. Any unauthorized user can access the account and can change the password directly without knowing the old password. The current...

WordPress Password Change Vulnerability

WordPress is a blogging platform developed using the PHP language by the WordPress Software Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. A password change vulnerability exists in WordPress 4.5.2 and earlier versions. An attacker can exploit this...

WordPress <= 4.5.2 - BYPASS #2

This vulnerability allows an attacker to bypass intended password-change restrictions by leveraging knowledge of a cookie. Related records: http://db.threatpress.com/vulnerability/wordpress/wordpress-4-5-2-bypass http://db.threatpress.com/vulnerability/wordpress/wordpress-4-5-2-bypass-2...

CVE-2016-0912

EMC Data Domain OS 5.4 through 5.7 before 5.7.2.0 allows remote authenticated users to bypass intended password-change restrictions by leveraging access to 1 a different account with the same role as a target account or 2 an account's session at an unattended workstation...

CVE-2016-0912

EMC Data Domain OS 5.4 through 5.7 before 5.7.2.0 allows remote authenticated users to bypass intended password-change restrictions by leveraging access to 1 a different account with the same role as a target account or 2 an account's session at an unattended workstation...

Design/Logic Flaw

EMC Data Domain OS 5.4 through 5.7 before 5.7.2.0 allows remote authenticated users to bypass intended password-change restrictions by leveraging access to 1 a different account with the same role as a target account or 2 an account's session at an unattended workstation...

CVE-2016-0912

The CVE affects EMC Data Domain OS 5.4–5.7 prior to 5.7.2.0. A remote authenticated attacker can bypass password-change restrictions by: (1) accessing another account with the same role as the target, or (2) using an active session on an unattended workstation. Root cause is improper enforcement ...

Slim CMS 0.1 Cross Site Request Forgery

input type="hidden" name="url" value="http://localhost/SlimCMS"...

SlimCMS 0.1 - Cross-Site Request Forgery (Change Admin Password)

Exploit for php platform in category web applications input ty...

CVE-2016-4516

ABB PCM600 before 2.7 improperly stores the main application password after a password change, which allows local users to obtain sensitive information via unspecified vectors...

ArticleSetup 1.00 - Cross-Site Request Forgery (Change Admin Password)

Exploit for php platform in category web applications 0day.today 2018-03-05...

ArticleSetup 1.00 - Cross-Site Request Forgery (Change Admin Password)

ArticleSetup 1.00 - Cross-Site Request Forgery Change Admin Password...

CVE-2016-4505

Resource Data Management RDM Intuitive 650 TDB Controller devices before 2.1.24 allow remote authenticated users to modify arbitrary passwords via unspecified vectors...

Resource Data Management Intuitive 650 TDB Controller Elevation of Privilege Vulnerability

The Resource Data Management Intuitive 650 TDB Controller is a network communications connectivity device. A security vulnerability exists in the Resource Data Management Intuitive 650 TDB Controller that could be exploited by a remote attacker to change another user's password and elevate...

Ubiquiti Networks UniFi Cross-Site Request Forgery Vulnerability

Ubiquiti Networks UniFi Video also known as AirVision or AirVision Controller is a video surveillance system from Ubiquiti Networks in the United States. A cross-site request forgery vulnerability exists in UniFi v3.2.10 and earlier versions due to a failure to validate the referer header...