376 matches found
CVE-2023-46661
CVE-2023-46661 affects Sielco PolyEco1000 family (PolyEco1000 CPU:2.0.6/1.9.4/1.9.3; PolyEco500/300 variants) with an improper access control flaw that lets an unauthenticated attacker escalate privileges by modifying passwords via POST requests, enabling administrative access and remote control ...
CVE-2023-46661: Improper Access Control
Sielco PolyEco1000 is vulnerable to an attacker escalating their privileges by modifying passwords in POST requests...
Exploit for Improper Access Control in Ruijie Rg-Ew1200G_Firmware
Ruijie-RG-EW1200G CVE-2023-4169CVE-2023-3306CVE-2023-4415 1...
Exploit for Improper Access Control in Ruijie Rg-Ew1200G_Firmware
Ruijie-RG-EW1200G CVE-2023-4169CVE-2023-3306CVE-2023-4415 1...
Exploit for Improper Authentication in Ruijienetworks Rg-Ew1200G_Firmware
Ruijie-RG-EW1200G CVE-2023-4169CVE-2023-3306CVE-2023-4415 1...
Exploit for Improper Authentication in Ruijienetworks Rg-Ew1200G_Firmware
Ruijie-RG-EW1200G CVE-2023-4169CVE-2023-3306CVE-2023-4415 1...
Exploit for Improper Initialization in Linux Linux_Kernel
Dirty Pipe Exploit: CVE-2022-0847 The Dirty Pipe vulnerability...
Pannres-Idence CMS 7.3 Cross Site Request Forgery
==================================================================================================================================== | Title : Pannres-idence CMS 7.3 CSRF Vulnerability | | Author : indoushka | | Tested on : windows 10 Français V.Pro / browser : Mozilla firefox 66.0.332-bit | |...
CVE-2023-25760
Incorrect Access Control in Tripleplay Platform releases prior to Caveman 3.4.0 allows authenticated user to modify other users passwords via a crafted request payload...
Cross site request forgery (csrf)
Incorrect Access Control in Tripleplay Platform releases prior to Caveman 3.4.0 allows authenticated user to modify other users passwords via a crafted request payload...
PT-2023-20284 · Unknown · Tripleplay Platform
Name of the Vulnerable Software and Affected Versions: Tripleplay Platform versions prior to 3.4.0 Description: The issue allows an authenticated user to modify other users' passwords via a crafted request payload. This is due to incorrect access control in the platform. Recommendations: For...
CVE-2023-25760
Incorrect Access Control in Tripleplay Platform releases prior to Caveman 3.4.0 allows authenticated user to modify other users passwords via a crafted request payload...
answer authorization issue vulnerability
answer is an open source knowledge-based community software. answer 1.0.6 prior versions of the authorization problem vulnerability , the vulnerability stems from the request to set a new password in /answer/admin/api/user/password there is improper permission management , a low-privilege attacke...
K21595932: Samba vulnerability CVE-2018-1057
Security Advisory Description On a Samba 4 AD DC the LDAP server in all versions of Samba from 4.0.0 onwards incorrectly validates permissions to modify passwords over LDAP allowing authenticated users to change any other users' passwords, including administrative users and privileged service...
Cross-Site Request Forgery (CSRF)
xxl-job is vulnerable to Cross-Site Request Forgery CSRF. The vulnerability exists due to a lack of validation in updatePwd which allows an attacker to modify any user passwords...
CVE-2022-43031
DedeCMS v6.1.9 was discovered to contain a Cross-Site Request Forgery CSRF which allows attackers to arbitrarily add Administrator accounts and modify Admin passwords...
CVE-2022-43031
DedeCMS v6.1.9 is affected by a Cross-Site Request Forgery (CSRF) vulnerability that allows an attacker to arbitrarily add Administrator accounts and modify Admin passwords. The NVD entry (CVE-2022-43031) rates this as CVSS v3.1: 8.8 (High) with Network attack vector, no privileges required, user...
GHSA-FJJW-82XW-VFC2 Apache ShenYu Admin has insecure permissions
Apache ShenYu Admin has insecure permissions, which may allow low-privilege administrators to modify high-privilege administrator's passwords. This issue affects Apache ShenYu 2.4.2 and 2.4.3. Version 2.5.0 contains a patch for this issue...
Design/Logic Flaw
Apache ShenYu Admin has insecure permissions, which may allow low-privilege administrators to modify high-privilege administrator's passwords. This issue affects Apache ShenYu 2.4.2 and 2.4.3...
