Free, Open-Source Remote Administration Tool for Windows: QuasarRAT

Quasar is a fast and light-weight remote administration tool coded in C. Providing high stability and an easy-to-use user interface, Quasar is the perfect remote administration solution for you. Features TCP network stream IPv4 & IPv6 support Fast network serialization NetSerializer Compressed...

Zhuhai Light Point Culture Communication Co., Ltd Light Point APP has information leakage vulnerability

Light Dot APP is a reading APP focusing on comics, which integrates comics, stories and knowledge to provide users with a light reading comics platform. There is an information leakage vulnerability when registering and retrieving password to get verification code in Light APP, attackers can...

Hashcat v4.0 - World's Fastest and Most Advanced Password Recovery Utility

hashcat is the world's fastest and most advanced password recovery utility, supporting five unique modes of attack for over 200 highly-optimized hashing algorithms. hashcat currently supports CPUs, GPUs, and other hardware accelerators on Linux, Windows, and OSX, and has facilities to help enable...

Google Login Security for High-Risk Users

Google has a new login service for high-risk users. It's good, but unforgiving. Logging in from a desktop will require a special USB key, while accessing your data from a mobile device will similarly require a Bluetooth dongle. All non-Google services and apps will be exiled from reaching into yo...

Fastest and Most Advanced Password Recovery Utility: Hashcat

hashcat is the world’s fastest and most advanced password recovery utility, supporting five unique modes of attack for over 200 highly-optimized hashing algorithms. hashcat currently supports CPUs, GPUs, and other hardware accelerators on Linux, Windows, and macOS, and has facilities to help enab...

CVE-2015-5173

CVE-2015-5173 corresponds to a Cloud Foundry security issue described in connected advisories as a weak password recovery/expired reset mechanism affecting cf-release <216, UAA <2.5.2, and PCF Elastic Runtime

CVE-2015-5173

Cloud Foundry Runtime cf-release before 216, UAA before 2.5.2, and Pivotal Cloud Foundry PCF Elastic Runtime before 1.7.0 allow attackers to have unspecified impact via vectors involving emails with password recovery links, aka "Cross Domain Referer Leakage."...

PT-2017-6821

Name of the Vulnerable Software and Affected Versions Cloud Foundry Runtime versions prior to 216 UAA versions prior to 2.5.2 Pivotal Cloud Foundry PCF Elastic Runtime versions prior to 1.7.0 Description The issue allows attackers to have an unspecified impact via vectors involving emails with...

CVE-2015-5172: Weak Password Recovery Mechanism for Forgotten Password

Cloud Foundry Runtime cf-release before 216, UAA before 2.5.2, and Pivotal Cloud Foundry PCF Elastic Runtime before 1.7.0 allow attackers to have unspecified impact by leveraging failure to expire password reset links...

CVE-2012-6707: Inadequate Encryption Strength

WordPress through 4.8.2 uses a weak MD5-based password hashing algorithm, which makes it easier for attackers to determine cleartext values by leveraging access to the hash values. NOTE: the approach to changing this may not be fully compatible with certain use cases, such as migration of a...

74cms frontend has a logical design flaw

74cms is a free + open source professional recruitment system based on PHP + MYSQL as the core development. 74cms front-end there is a logical design vulnerability. The vulnerability is due to the foreground of the password recovery function fails to correctly verify the identity of the visitor...

LaZagne v2.2 - Credentials Recovery Project

The LaZagne project is an open source application used to retrieve lots of passwords stored on a local computer. Each software stores its passwords using different techniques plaintext, APIs, custom algorithms, databases, etc.. This tool has been developed for the purpose of finding these passwor...

CVE-2015-4689: Weak Password Recovery Mechanism for Forgotten Password

Ellucian formerly SunGard Banner Student 8.5.1.2 through 8.7 allows remote attackers to reset arbitrary passwords via unspecified vectors, aka "Weak Password Reset."...

Hikvision iVMS-4200 Password Recovery Vulnerability

Hikvision iVMS-4200 is a suite of video surveillance software from Hikvision China. A security vulnerability exists in Hikvision iVMS-4200 that allows local attackers to exploit the vulnerability to generate password recovery code...

CVE-2017-13774

Hikvision iVMS-4200 devices before v2.6.2.7 allow local users to generate password-recovery codes via unspecified vectors...

Design/Logic Flaw

Hikvision iVMS-4200 devices before v2.6.2.7 allow local users to generate password-recovery codes via unspecified vectors...

CVE-2017-13774

Hikvision iVMS-4200 devices before v2.6.2.7 allow local users to generate password-recovery codes via unspecified vectors...

CVE-2017-13774

Hikvision iVMS-4200 devices before v2.6.2.7 allow local users to generate password-recovery codes via unspecified vectors...

CVE-2017-13774

The CVE affects Hikvision iVMS-4200 client software. Affected: versions before 2.6.2.7. Vulnerability allows local users to generate password-recovery codes via unspecified vectors, implying potential compromise of password recovery/authentication data. CVSS metrics indicate high impact (C/H/I/H/...

PT-2017-13092

Name of the Vulnerable Software and Affected Versions Hikvision iVMS-4200 versions prior to 2.6.2.7 Description The issue allows local users to generate password-recovery codes, potentially leading to unauthorized access. Recommendations For versions prior to 2.6.2.7, update to version 2.6.2.7 or...