93 matches found
CVE-2024-30977
An issue in Secnet Security Network Intelligent AC Management System v.1.02.040 allows a local attacker to escalate privileges via the password component...
CVE-2024-24488
An issue in Shenzen Tenda Technology CP3V2.0 V11.10.00.2311090948 allows a local attacker to obtain sensitive information via the password component...
CVE-2025-45947
An issue in phpgurukul Online Banquet Booking System V1.2 allows an attacker to execute arbitrary code via the /obbs/change-password.php file of the My Account - Change Password component...
CVE-2025-45953
A vulnerability was found in PHPGurukul Hostel Management System 2.1 in the /hostel/change-password.php file of the user panel - Change Password component. Improper handling of session data allows a Session Hijacking attack, exploitable remotely...
PT-2025-18112
Name of the Vulnerable Software and Affected Versions PHPGurukul User Registration & Login and User Management System version 3.3 Description A critical issue was found in the /loginsystem/change-password.php file of the user panel's Change Password component. Improper handling of session data...
CVE-2025-45953
A vulnerability was found in PHPGurukul Hostel Management System 2.1 in the /hostel/change-password.php file of the user panel - Change Password component. Improper handling of session data allows a Session Hijacking attack, exploitable remotely...
CVE-2025-29529
ITC Systems Multiplan/Matrix OneCard platform v3.7.4.1002 was discovered to contain a SQL injection vulnerability via the component Forgotpassword.aspx...
CVE-2025-29529
ITC Systems Multiplan/Matrix OneCard platform v3.7.4.1002 was discovered to contain a SQL injection vulnerability via the component Forgotpassword.aspx...
The vulnerability of the Password component in browsers Google Chrome and Microsoft Edge allows a hacker to execute arbitrary code.
The vulnerability of the Password component in Google Chrome and Microsoft Edge browsers is related to the possibility of using memory after it is freed. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code using a specially crafted HTML page...
CVE-2024-41631
Buffer Overflow vulnerability in host-host NEUQboard v.1.0 allows a remote attacker to cause a denial of service via the password.h component...
PT-2024-29474 · Unknown · Neuq Board
Name of the Vulnerable Software and Affected Versions: NEUQ board version 1.0 Description: A Buffer Overflow issue in the password.h component allows a remote attacker to cause a denial of service. Recommendations: For NEUQ board version 1.0, consider restricting access to the password.h componen...
CVE-2024-30977
An issue in Secnet Security Network Intelligent AC Management System v.1.02.040 allows a local attacker to escalate privileges via the password component...
PT-2024-23699 · Secnet · Secnet Security Network Intelligent Ac Management System
Name of the Vulnerable Software and Affected Versions: Secnet Security Network Intelligent AC Management System version 1.02.040 Description: The issue allows a local attacker to escalate privileges via the password component. Recommendations: For Secnet Security Network Intelligent AC Management...
CVE-2024-30977
An issue in Secnet Security Network Intelligent AC Management System v.1.02.040 allows a local attacker to escalate privileges via the password component...
CVE-2024-30977
The Secnet Security Network Intelligent AC Management System (also referred to as the Secnet AC Centralized Management Platform ) version v.1.02.040 is vulnerable to a privilege escalation flaw. A local attacker can exploit the password component to gain elevated privileges. As of the current rep...
CVE-2024-30977
An issue in Secnet Security Network Intelligent AC Management System v.1.02.040 allows a local attacker to escalate privileges via the password component...
CVE-2024-30977: Incorrect Default Permissions
An issue in Secnet Security Network Intelligent AC Management System v.1.02.040 allows a local attacker to escalate privileges via the password component...
The vulnerability of the login_password component in the FreeIpa server allows a attacker to perform a CSRF attack.
The vulnerability of the loginpassword component in the FreeIpa server relates to the sending of user requests that can perform actions on behalf of the user. Exploiting this vulnerability could allow a malicious actor to carry out a CSRF attack remotely...