PT-2025-18112

Name of the Vulnerable Software and Affected Versions PHPGurukul User Registration & Login and User Management System version 3.3 Description A critical issue was found in the /loginsystem/change-password.php file of the user panel's Change Password component. Improper handling of session data...

CVE-2025-45953

A vulnerability was found in PHPGurukul Hostel Management System 2.1 in the /hostel/change-password.php file of the user panel - Change Password component. Improper handling of session data allows a Session Hijacking attack, exploitable remotely...

CVE-2025-29529

ITC Systems Multiplan/Matrix OneCard platform v3.7.4.1002 was discovered to contain a SQL injection vulnerability via the component Forgotpassword.aspx...

CVE-2025-29529

ITC Systems Multiplan/Matrix OneCard platform v3.7.4.1002 was discovered to contain a SQL injection vulnerability via the component Forgotpassword.aspx...

The vulnerability of the Password component in browsers Google Chrome and Microsoft Edge allows a hacker to execute arbitrary code.

The vulnerability of the Password component in Google Chrome and Microsoft Edge browsers is related to the possibility of using memory after it is freed. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code using a specially crafted HTML page...

CVE-2024-41631

Buffer Overflow vulnerability in host-host NEUQboard v.1.0 allows a remote attacker to cause a denial of service via the password.h component...

PT-2024-29474 · Unknown · Neuq Board

Name of the Vulnerable Software and Affected Versions: NEUQ board version 1.0 Description: A Buffer Overflow issue in the password.h component allows a remote attacker to cause a denial of service. Recommendations: For NEUQ board version 1.0, consider restricting access to the password.h componen...

CVE-2024-30977

An issue in Secnet Security Network Intelligent AC Management System v.1.02.040 allows a local attacker to escalate privileges via the password component...

PT-2024-23699 · Secnet · Secnet Security Network Intelligent Ac Management System

Name of the Vulnerable Software and Affected Versions: Secnet Security Network Intelligent AC Management System version 1.02.040 Description: The issue allows a local attacker to escalate privileges via the password component. Recommendations: For Secnet Security Network Intelligent AC Management...

CVE-2024-30977

An issue in Secnet Security Network Intelligent AC Management System v.1.02.040 allows a local attacker to escalate privileges via the password component...

CVE-2024-30977

Secnet Security Network Intelligent AC Management System v1.02.040 contains a local privilege escalation via the password component. The issue is documented across multiple sources (NVD/Red Hat/CVE listings) with CVSS v3.1: AV:L/AC:L/PR:L/UI:N/S:U, C:H/I:H/A:H, score 7.8. No patch/version with fi...

CVE-2024-30977

An issue in Secnet Security Network Intelligent AC Management System v.1.02.040 allows a local attacker to escalate privileges via the password component...

The vulnerability of the login_password component in the FreeIpa server allows a attacker to perform a CSRF attack.

The vulnerability of the loginpassword component in the FreeIpa server relates to the sending of user requests that can perform actions on behalf of the user. Exploiting this vulnerability could allow a malicious actor to carry out a CSRF attack remotely...

CVE-2024-24488

An issue in Shenzen Tenda Technology CP3V2.0 V11.10.00.2311090948 allows a local attacker to obtain sensitive information via the password component...

CVE-2024-24488

An issue in Shenzen Tenda Technology CP3V2.0 V11.10.00.2311090948 allows a local attacker to obtain sensitive information via the password component...

Information disclosure

An issue in Shenzen Tenda Technology CP3V2.0 V11.10.00.2311090948 allows a local attacker to obtain sensitive information via the password component...

Tenda CP3 Security Vulnerability

Tenda CP3 is a smart camera from Tenda China. A security vulnerability exists in Tenda CP3 version V2.0 V11.10.00.2311090948, which originates from a vulnerability that allows a local attacker to obtain sensitive information via the password component...

CVE-2024-24488

An issue in Shenzen Tenda Technology CP3V2.0 V11.10.00.2311090948 allows a local attacker to obtain sensitive information via the password component...

CVE-2024-24488

An issue in Shenzen Tenda Technology CP3V2.0 V11.10.00.2311090948 allows a local attacker to obtain sensitive information via the password component...

CVE-2024-22894

An issue fixed in AIT-Deutschland Alpha Innotec Heatpumps V2.88.3 or later, V3.89.0 or later, V4.81.3 or later and Novelan Heatpumps V2.88.3 or later, V3.89.0 or later, V4.81.3 or later, allows remote attackers to execute arbitrary code via the password component in the shadow file...