b2evolution Arbitrary User Password Reset Vulnerability

b2evolution is a PHP and MySQL based blogging software developed by software developer Francois Planque. A security vulnerability exists in the 'lost password' feature in b2evolution versions prior to 6.7.9. The vulnerability can be exploited by a remote attacker to reset the password of any user...

CA UniCenter Management Portal Username Enumeration Vulnerability

CA UniCenter Management Portal Username Enumeration Vulnerability Package: CA UniCenter Management Portal Vendor Web Site: http://www.ca.com Versions: UniCenter Management Portal 2.0 and 3.1 Platform: Windows Local: No Remote: Yes Fix Available: Yes Advisory Author: Thomas Adams...

Geeklog 1.3.8 - Forgot Password SQL Injection

Geeklog 1.3.8 - Forgot Password SQL Injection source: https://www.securityfocus.com/bid/8849/info An SQL injection vulnerability has been reported in the Geeklog "forgot password" feature introduced in Geeklog 1.3.8. Due to insufficient sanitization of user-supplied input, it is possible for remo...

Power On Software On Guard for MacOS 3.2 - Emergency Password

source: https://www.securityfocus.com/bid/553/info On Guard, a security program for MacOS, includes an emergency password feature in the event that the administrative password is lost or forgotten. If the user name 'emergency' is entered, On Guard will generate an Emergency Code. The user must th...