CVE-2019-10229: Insufficient Session Expiration

An issue was discovered in MailStore Server and Service Provider Edition 9.x through 11.x before 11.2.2. When the directory service for synchronizing and authenticating users is set to Generic LDAP, an attacker is able to login as an existing user with an arbitrary password on the second login...

Mata message board backend has a universal password login vulnerability

Marta Message Board is a no-refresh message board program. A universal password login vulnerability exists in the background of Marta Message Board, which can be exploited by an attacker to log in directly to the background...

Tianjin Qipeng Technology Development Co., Ltd. website building system backstage existence of universal password login vulnerability

Tianjin Qipeng Technology Development Co., Ltd. is a main website construction web port company. A universal password login vulnerability exists in the website building system of Tianjin Qipeng Technology Development Co. Attackers can use this vulnerability to log in the background, obtain...

CVE-2019-9124

An issue was discovered on D-Link DIR-878 1.12B01 devices. At the /HNAP1 URI, an attacker can log in with a blank password...

PT-2019-18677

Name of the Vulnerable Software and Affected Versions gsi-openssh-server version 7.9p1 Description An issue allows logins to succeed with a valid username and an incorrect password when PermitPAMUserChange is set to yes in the /etc/gsissh/sshd config file, despite recording a failure entry in the...

Vulnerability of Universal Password Login in Changmeng Network Website Building System

Changmeng Network is a professional team specializing in providing website construction, website promotion and network marketing solutions under the banner of Guangzhou Xingmeng Animation Design Company Limited a total of three departments: Animation Department, Product Design Department the...

IM-Learning Intelligent Learning Management System Vulnerability in Backend

IM-Learning Intelligent Learning Management System is a web-based academy with key technologies that can be customized and extended. An arbitrary password login vulnerability exists in the backend of Guangyi East IM-Learning Intelligent Learning Management System, which can be exploited by...

UBUNTU-CVE-2018-11407

An issue was discovered in the Ldap component in Symfony 2.8.x before 2.8.37, 3.3.x before 3.3.17, 3.4.x before 3.4.7, and 4.0.x before 4.0.7. It allows remote attackers to bypass authentication by logging in with a "null" password and valid username, which triggers an unauthenticated bind. NOTE:...

CVE-2017-18264: Undefined Security Weakness

An issue was discovered in libraries/common.inc.php in phpMyAdmin 4.0 before 4.0.10.20, 4.4.x, 4.6.x, and 4.7.0 prereleases. The restrictions caused by $cfg'Servers'$i'AllowNoPassword' = false are bypassed under certain PHP versions e.g., version 5. This can allow the login of users who have no...

AZL-40850 CVE-2017-14623 affecting package vitess for versions less than 19.0.4-2

In the ldap.v2 aka go-ldap package through 2.5.0 for Go, an attacker may be able to login with an empty password. This issue affects an application using this package if these conditions are met: 1 it relies only on the return error of the Bind function call to determine whether a user is...

CVE-2017-14623

In the ldap.v2 aka go-ldap package through 2.5.0 for Go, an attacker may be able to login with an empty password. This issue affects an application using this package if these conditions are met: 1 it relies only on the return error of the Bind function call to determine whether a user is...

Universal Password Login Vulnerability in Longcai MX of Longcai Technology Inc.

Longcai MX is a marketing website that caters to consumer needs and buying desires. A universal password login vulnerability exists in the '/manage' page of Longcai MX under Longcai Technology. An attacker can exploit the vulnerability to log into the system backend, view sensitive information or...

CIIC Xi'an Recruitment System Exploits Universal Password Login Vulnerability

CIIC Xi'an Recruitment System is a resume information saving and entry system. CIIC Xi'an Recruitment System suffers from a universal password login vulnerability. An attacker who enters the universal password 'or '1'='1 or 'or'='or' can log in and view sensitive user information...

CVE-2017-5619: Improper Authentication

An issue was discovered in Zammad before 1.0.4, 1.1.x before 1.1.3, and 1.2.x before 1.2.1. Attackers can login with the hashed password itself e.g., from the DB instead of the valid password string...

PT-2016-3033

Name of the Vulnerable Software and Affected Versions ОВЕН ПЛК110 affected versions not specified Description The issue is related to the reset of the set password level when power is turned off. An attacker, acting locally, can exploit this to log in without a password due to the password level...

CVE-2014-3612

The LDAPLoginModule implementation in the Java Authentication and Authorization Service JAAS in Apache ActiveMQ 5.x before 5.10.1 allows remote attackers to bypass authentication by logging in with an empty password and valid username, which triggers an unauthenticated bind. NOTE: this identifier...

Bug in OpenSSH Opens Linux Machines to Password Cracking Attack

A simple but highly critical vulnerability recently disclosed in the most widely used OpenSSH software allows attackers to try thousands of password login attempts per connection in a short period. OpenSSH is the most popular software widely used for secure remote access to Linux-based systems...

PT-2018-6789

Name of the Vulnerable Software and Affected Versions: phpMyAdmin versions 4.0 through 4.0.10.19 phpMyAdmin version 4.4.x phpMyAdmin version 4.6.x phpMyAdmin version 4.7.0 prereleases Description: An issue allows the bypassing of restrictions caused by $cfg'Servers'$i'AllowNoPassword' = false und...

Wing FTP Server SSH Public Key Authentication Bypass

The remote FTP server is running a version of Wing FTP Server earlier than 3.8.8. As such, it is reportedly affected by an authentication bypass vulnerability when SSH public key authentication is used. An attacker can exploit this issue by logging into the FTP server with a password even though...

Prozilla Topsites 1.0 - Arbitrary EditAdd Users

Prozilla Topsites 1.0 - Arbitrary EditAdd Users --==+================================================================================+==-- --==+ Prozilla Topsites 1.0 Arbitrary Edit/Add Users Vulnerability +==--...