UBUNTU-CVE-2023-32784

In KeePass 2.x before 2.54, it is possible to recover the cleartext master password from a memory dump, even when a workspace is locked or no longer running. The memory dump can be a KeePass process dump, swap file pagefile.sys, hibernation file hiberfil.sys, or RAM dump of the entire system. The...

CVE-2023-32784

KeePass 2.x before 2.54 is vulnerable to master password exposure from memory dumps (KeePass process dumps, pagefile.sys, hibernation files, or RAM). The first character cannot be recovered, but subsequent characters may be revealed due to memory handling in KeePass. KeePass 2.54 introduces mitig...

CVE-2023-32784

In KeePass 2.x before 2.54, it is possible to recover the cleartext master password from a memory dump, even when a workspace is locked or no longer running. The memory dump can be a KeePass process dump, swap file pagefile.sys, hibernation file hiberfil.sys, or RAM dump of the entire system. The...

CVE-2023-28972 Junos OS: NFX Series: 'set system ports console insecure' allows root password recovery

An Improper Link Resolution Before File Access vulnerability in console port access of Juniper Networks Junos OS on NFX Series allows an attacker to bypass console access controls. When "set system ports console insecure" is enabled, root login is disallowed for Junos OS as expected. However, the...

CVE-2023-1950

A vulnerability has been found in PHPGurukul BP Monitoring Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file password-recovery.php of the component Password Recovery. The manipulation of the argument emailid/contactno leads to...

CVE-2023-1950

A vulnerability has been found in PHPGurukul BP Monitoring Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file password-recovery.php of the component Password Recovery. The manipulation of the argument emailid/contactno leads to...

Sql injection

A vulnerability has been found in PHPGurukul BP Monitoring Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file password-recovery.php of the component Password Recovery. The manipulation of the argument emailid/contactno leads to...

CVE-2023-1950

CVE-2023-1950 concerns a SQL injection in the Password Recovery component of PHPGurukul BP Monitoring Management System 1.0, specifically via the file password-recovery.php where manipulating the parameters emailid or contactno enables remote exploitation. Multiple connected sources corroborate t...

CVE-2023-1950 PHPGurukul BP Monitoring Management System Password Recovery password-recovery.php sql injection

A vulnerability has been found in PHPGurukul BP Monitoring Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file password-recovery.php of the component Password Recovery. The manipulation of the argument emailid/contactno leads to...

PT-2023-17363 · Unknown · Phpgurukul Bp Monitoring Management System

Name of the Vulnerable Software and Affected Versions: PHPGurukul BP Monitoring Management System version 1.0 Description: A critical issue has been found in the Password Recovery component, specifically in the file password-recovery.php. The manipulation of the emailid or contactno argument lead...

BP Monitoring Management System SQL注入漏洞

BP Monitoring Management System is a web-based application by the individual developer of phpgurukul. A SQL injection vulnerability exists in version 1.0 of the PHPGurukul BP Monitoring Management System, which stems from a problem in the file password-recovery.php, where manipulation of the...

PT-2023-3422 · Tp Link · Tp-Link Tapo C210

Name of the Vulnerable Software and Affected Versions: TP-Link Tapo C210 affected versions not specified Description: This issue allows network-adjacent attackers to bypass authentication on affected installations of TP-Link Tapo C210 IP cameras. The specific flaw exists within the password...

CVE-2023-0352

The Akuvox E11 password recovery webpage can be accessed without authentication, and an attacker could download the device key file. An attacker could then use this page to reset the password back to the default...

Default credentials

The Akuvox E11 password recovery webpage can be accessed without authentication, and an attacker could download the device key file. An attacker could then use this page to reset the password back to the default...

CVE-2023-0352 CVE-2023-0352

The Akuvox E11 password recovery webpage can be accessed without authentication, and an attacker could download the device key file. An attacker could then use this page to reset the password back to the default...

CVE-2023-0352 CVE-2023-0352

The Akuvox E11 password recovery webpage can be accessed without authentication, and an attacker could download the device key file. An attacker could then use this page to reset the password back to the default...

CVE-2023-0352

CVE-2023-0352 (Akuvox E11) : The password recovery webpage can be accessed without authentication, allowing an attacker to download the device key file and reset the password to the default. This is a high‑impact issue (CVSSv3 base score 9.1) with network attack potential and no user interaction ...

PT-2023-16204 · Akuvox · Akuvox E11

Name of the Vulnerable Software and Affected Versions: Akuvox E11 affected versions not specified Description: The issue concerns the Akuvox E11 password recovery webpage, which can be accessed without proper authentication. This allows an attacker to download the device key file and subsequently...

Akuvox E11 授权问题漏洞

Akuvox E11 is a SIP visual doorbell from Akuvox designed for villas, houses and apartments. The Akuvox E11 suffers from an authorization issue vulnerability that stems from accessing the Akuvox E11 password recovery web page without authentication, which allows an attacker to download the device...

Fortinet FortiNAC Access Control Error Vulnerability (CNVD-2024-26506)

Fortinet FortiNAC is a set of network access control solutions from the U.S. company Fita Fortinet. The product is mainly used for network access control and IoT security. Fortinet FortiNAC has an access control error vulnerability that stems from insufficient credential protection. An attacker...