Rising Technosoft CAP Back Office API Endpoint Unauthorized Access

The vulnerability of the API Endpoint component in Rising Technosoft CAP Back Office Application relates to the lack of a password recovery mechanism. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to user accounts...

IntraService customer interaction system Password Change

The vulnerability of the IntraService customer interaction system is related to the lack of a password recovery mechanism. Exploiting this vulnerability allows a malicious actor to remotely change a user’s password...

Ruijie Reyee OS Auth Bypass

The vulnerability of the Ruijie Reyee OS operating system is related to the lack of a password recovery mechanism. Exploiting this vulnerability allows a malicious actor to bypass existing security restrictions and execute an attack using brute-force methods...

Forgotten Password Function Admin Password Change

The vulnerability of the “Forgotten Password” function on the IIoT platform of ifm Moneo devices, namely IFM QHA300, IFM QHA210, and IFM QVA200, is related to the lack of a password recovery mechanism. Exploiting this vulnerability could allow an attacker to remotely change the administrator’s...

LLM Platform Password Recovery Missing

The vulnerability of the platform for monitoring, managing, and improving LLM applications is related to the lack of a password recovery mechanism. Exploiting this vulnerability allows an attacker who operates remotely to use the token for repeatedly changing user passwords...

WordPress wp_insert_user Function Sensitive Data Compromise

The vulnerability of the wpinsertuser function and testwpupdateusershoulddeleteuserslugscache in user.php of the WordPress content management system is related to a lack of password recovery mechanism. Exploiting this vulnerability could allow an attacker to gain access to sensitive data and...