The vulnerability of the /etc/passwd component in D-Link DIR-605L router microprogramming software allows a hacker to gain access to the system with root privileges.

The vulnerability of the /etc/passwd component in D-Link DIR-605L router microprogramming systems is related to the use of fixed password encoding. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain access to the system with root privileges...

Exploit for Path Traversal in Solarwinds Serv-U

CVE-2024-28995 Nuclei Template Checks for directory traversal...

CVE-2024-37630

D-Link DIR-605L v2.13B01 was discovered to contain a hardcoded password vulnerability in /etc/passwd, which allows attackers to log in as root...

PT-2024-13698 · Precor · Precor Touchscreen Console

Name of the Vulnerable Software and Affected Versions: Precor touchscreen console versions P62, P80, and P82 Description: The issue allows a remote attacker to obtain sensitive information because the root password is stored in /etc/passwd. An attacker could exploit this to extract files and obta...

Precor Touchscreen Console Security Vulnerability

Precor touchscreen console P62 and Precor touchscreen console P82 are both a touchscreen console from Precor USA. A security vulnerability exists in the Precor Touchscreen Console that stems from the root password being stored in /etc/passwd, which could allow a remote attacker to obtain sensitiv...

PT-2024-36488 · Unknown · Itsourcecode Online Blood Bank Management System

Name of the Vulnerable Software and Affected Versions: itsourcecode Online Blood Bank Management System version 1.0 Description: A critical issue affects some unknown functionality of the file changepwd.php. The manipulation of the useremail argument leads to sql injection. The attack may be...

PT-2024-35780 · Unknown · Phpgurukul Zoo Management System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Zoo Management System version 2.1 Description: A critical issue has been found in the PHPGurukul Zoo Management System, affecting an unknown functionality of the file /admin/forgot-password.php. The manipulation of the email argume...

CVE-2024-4645

A vulnerability was found in SourceCodester Prison Management System 1.0 and classified as problematic. This issue affects some unknown processing of the file /Admin/changepassword.php. The manipulation of the argument txtoldpassword/txtnewpassword/txtconfirmpassword leads to cross site scripting...

INOTEC Sicherheitstechnik WebServer CPS220/64 安全漏洞

INOTEC Sicherheitstechnik WebServer CPS220/64 is a centralized battery system from INOTEC Sicherheitstechnik, Germany. A security vulnerability exists in INOTEC Sicherheitstechnik WebServer CPS220/64 version V.3.3.19, which originates from a vulnerability that allows remote attackers to execute...

PT-2024-21985 · Unknown · Campcodes Complete Online Beauty Parlor Management System

Name of the Vulnerable Software and Affected Versions: Campcodes Complete Online Beauty Parlor Management System version 1.0 Description: A critical issue affects the processing of the file "/admin/forgot-password.php". The manipulation of the email argument leads to SQL injection. The attack can...

PT-2024-21789 · Unknown · A-Blog Cms

Name of the Vulnerable Software and Affected Versions: a-blog cms versions 3.1.x through 3.1.9 and earlier a-blog cms versions 3.0.x through 3.0.30 and earlier a-blog cms versions 2.11.x through 2.11.59 and earlier a-blog cms versions 2.10.x through 2.10.51 and earlier a-blog cms version 2.9 and...

VulnCheck KEV: CVE-2019-11370

Stored XSS was discovered in Carel pCOWeb prior to B1.2.4, as demonstrated by the config/pwsnmp.html "System contact" field...

RRJ Nueva Ecija Engineer Online Portal Security Vulnerability

RRJ Nueva Ecija Engineer Online Portal is an online portal for engineers from RRJ Nueva Ecija. A security vulnerability exists in RRJ Nueva Ecija Engineer Online Portal version 1.0, which stems from the file changepasswordteacher.php can lead to weak password requirements...

PT-2024-15372 · Unknown · Rrj Nueva Ecija Engineer Online Portal

Name of the Vulnerable Software and Affected Versions: RRJ Nueva Ecija Engineer Online Portal version 1.0 Description: A vulnerability was found in the RRJ Nueva Ecija Engineer Online Portal, affecting an unknown part of the file change password teacher.php. This issue leads to weak password...

PT-2023-30514 · Relyum · Rely-Pcie

Name of the Vulnerable Software and Affected Versions: Relyum RELY-PCIe version 22.2.1 Description: The issue is related to a system group misconfiguration in Relyum RELY-PCIe devices, which allows read access to the central password hash file of the operating system. Recommendations: For Relyum...

fwupd: world readable password in /etc/fwupd/redfish.conf

A flaw was found in fwupd. When creating an OPERATOR user account on the BMC, the redfish plugin saved the auto-generated password to /etc/fwupd/redfish.conf without proper restriction, allowing any user on the system to read the same configuration file...

CVE-2022-4318

A vulnerability was found in cri-o. This issue allows the addition of arbitrary lines into /etc/passwd by use of a specially crafted environment variable...

AZL-39873 CVE-2022-4318 affecting package cri-o for versions less than 1.22.3-1

A vulnerability was found in cri-o. This issue allows the addition of arbitrary lines into /etc/passwd by use of a specially crafted environment variable...

Exploit for CVE-2023-40297

CVE-2023-40297 Stakater Forecastle = v1.0.144 allows directo...

CMSJerusalem Weather Forecast 1.3 Directory Traversal

==================================================================================================================================== | Title : CMSJerusalem Weather Forecast v1.3 Directory Traversal Vulnerability | | Author : indoushka | | Tested on : windows 10 Français V.Pro / browser : Mozilla...