PT-2021-10494

Name of the Vulnerable Software and Affected Versions: White Shark System WSS version 1.3.2 Description: The issue allows attackers to perform Cross-Site Request Forgery CSRF attacks. Specifically, attackers can exploit the user edit password.php file to modify user passwords. Recommendations: Fo...

CVE-2021-31659: Cross-Site Request Forgery (CSRF)

TP-Link TL-SG2005, TL-SG2008, etc. 1.0.0 Build 20180529 Rel.40524 is vulnerable to Cross Site Request Forgery CSRF. All configuration information is placed in the URL, without any additional token authentication information. A malicious link opened by the switch administrator may cause the passwo...

Logic flaw vulnerability in the management center of the Jiafa inspection command system

Chengdu Jiafa Antai Education Technology Co., Ltd. is a company whose business scope includes: sales of commercial cryptographic products that have been approved by the State Cryptography Administration and have passed the product quality testing of designated testing organizations valid for...

Industrial Control Device Vulnerability in NA400 PLC at Aptar Technology Co.

NA400 PLC is a high performance programmable controller from OPTOTECHNIK Co. A vulnerability exists in the NA400PLC of Aptar Technology Corporation for industrial control devices, which can be exploited by an attacker to modify a user's password...

Logic Flaw Vulnerability in RG-UAC Riptide Unified Internet Behavior Management and Audit System

Ltd. is a company that utilizes new technologies such as cloud computing, SDN, mobile Internet, big data, and Internet of Things to provide end-to-end solutions for users in various industries. A logic flaw vulnerability exists in the RG-UAC Ruijie Unified Internet Behavior Management and Auditin...

Logic Flaw Vulnerability in YZMCMS Content Management System

YZMCMS content management system is an all-in-one website building system. A logic flaw vulnerability exists in the YZMCMS Content Management System, which can be exploited by an attacker to modify a user's password...

Logic flaw vulnerability in ZZCMS (CNVD-2021-14557)

ZZCMS is a completely open source based on PHP, ASP's product investment website management system , project investment website management system , enterprise website management system . ZZCMS logic flaws exist in the vulnerability , attackers can use the vulnerability to modify the existing user...

Logic Vulnerabilities in Multiple LB-LINK Routers

BL-X22, BL-X16 and BL-X12 are all wireless routers from Shenzhen Bilian Electronics Co. Logic vulnerabilities exist in several LB-LINK routers. Attackers can utilize the vulnerabilities to modify user passwords, wifi passwords and other information...

Logic Flaw Vulnerability in OurPHP Backend Administration Interface

OurPHP is an enterprise website builder that incorporates e-commerce features. A logic flaw vulnerability exists in OurPHP's backend management interface, which can be exploited by attackers to modify high-privileged administrator passwords...

Fortinet FortiOS 6.0.4 - Unauthenticated SSL VPN User Password Modification

Exploit Title: Fortinet FortiOS 6.0.4 - Unauthenticated SSL VPN User Password Modification Google Dork: intitle:"Please Login" "Use FTM Push" Date: 15/11/2020 Exploit Author: Ricardo Longatto Details: This exploit allow change users password from SSLVPN web portal Vendor Homepage:...

Fortinet FortiOS 6.0.4 Password Modification

Exploit Title: Fortinet FortiOS 6.0.4 - Unauthenticated SSL VPN User Password Modification Google Dork: intitle:"Please Login" "Use FTM Push" Date: 15/11/2020 Exploit Author: Ricardo Longatto Details: This exploit allow change users password from SSLVPN web portal Vendor Homepage:...

Vertiv UPS Management Module FTP Service Arbitrary File Modification Vulnerability

Vertiv Technologies Limited Vertiv, was founded in 2000. Vertiv designs, manufactures and provides services for critical infrastructure equipment to keep data centers, communication networks, commercial and industrial facilities running well, and provides power supply and distribution, thermal...

CVE-2020-9404

In PACTware before 4.1 SP6 and 5.x before 5.0.5.31, passwords are stored in an insecure manner, and may be modified by an attacker with no knowledge of the current passwords...

CVE-2020-9404: Insufficiently Protected Credentials

In PACTware before 4.1 SP6 and 5.x before 5.0.5.31, passwords are stored in an insecure manner, and may be modified by an attacker with no knowledge of the current passwords...

PT-2020-20636

Name of the Vulnerable Software and Affected Versions PACTware versions prior to 4.1 SP6 PACTware versions 5.x prior to 5.0.5.31 Description The issue allows passwords to be stored in an insecure manner. An attacker may modify these passwords without knowing the current passwords. Recommendations...

Logic Flaw Vulnerability in Mingniu Cloud Platform

Mingniu Cloud Platform is an industrial-grade cloud platform based on WEB architecture A logic flaw vulnerability exists in the Mingniu Cloud Platform, which can be exploited by an attacker to modify any user's password...

CVE-2020-12017

GE Grid Solutions Reason RT Clocks, RT430, RT431, and RT434, all firmware versions prior to 08A05. The device’s vulnerability in the web application could allow multiple unauthenticated attacks that could cause serious impact. The vulnerability may allow an unauthenticated attacker to execute...

5vshop e-commerce system has a logic flaw vulnerability

5vshop e-commerce system is an enterprise-level open source e-commerce system. 5vshop e-commerce system has a logic flaw vulnerability that can be exploited by an attacker to modify any user password...

Zhengzhou Soter Information Technology Co., Ltd. digital campus management platform has a logic flaw vulnerability

Zhengzhou Sothe Information Technology Co., Ltd. is a software technology as the core, is committed to providing customers with software products, perfect technical support and software outsourcing services company. Zhengzhou Soter Information Technology Co., Ltd. digital campus management platfo...

Laboratory Safety Education and Examination System Has Logic Flaw Vulnerability

Tsinghua University Informatization Technology Center is established by Tsinghua University to undertake the operation service and construction development of the university's informatization infrastructure and to provide protection for the university's informatization construction and service. A...