Lucene search
K

4 matches found

BDU FSTEC
BDU FSTEC
added 2024/12/18 12:0 a.m.6 views

The vulnerability of the Ruijie Reyee OS operating system, related to the lack of a password recovery mechanism, allows attackers to bypass existing security restrictions and execute a brute-force attack.

The vulnerability of the Ruijie Reyee OS operating system is related to the lack of a password recovery mechanism. Exploiting this vulnerability allows a malicious actor to bypass existing security restrictions and execute an attack using brute-force methods...

10CVSS8.1AI score0.00676EPSS
Exploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/07/02 12:0 a.m.5 views

The vulnerability of the “Forgotten Password” function on the IIoT platform of ifm Moneo devices, including IFM QHA300, IFM QHA210, and IFM QVA200, allows a hacker to change the administrator password.

The vulnerability of the “Forgotten Password” function on the IIoT platform of ifm Moneo devices, namely IFM QHA300, IFM QHA210, and IFM QVA200, is related to the lack of a password recovery mechanism. Exploiting this vulnerability could allow an attacker to remotely change the administrator’s...

10CVSS5.5AI score0.0055EPSS
Exploits0References6Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/06/07 12:0 a.m.10 views

The vulnerability of the platform for monitoring, managing, and improving LLM applications arises from the lack of a password recovery mechanism, allowing attackers to use the token for repeatedly changing user passwords.

The vulnerability of the platform for monitoring, managing, and improving LLM applications is related to the lack of a password recovery mechanism. Exploiting this vulnerability allows an attacker who operates remotely to use the token for repeatedly changing user passwords...

6.6CVSS6.5AI score0.00353EPSS
Exploits1References6Affected Software1
BDU FSTEC
BDU FSTEC
added 2020/08/14 12:0 a.m.7 views

The vulnerability of the wp_insert_user function and testWPUpdateUser_should_deleteUsersLugsCache (user.php) in the WordPress content management system allows attackers to access sensitive data and compromise its integrity.

The vulnerability of the wpinsertuser function and testwpupdateusershoulddeleteuserslugscache in user.php of the WordPress content management system is related to a lack of password recovery mechanism. Exploiting this vulnerability could allow an attacker to gain access to sensitive data and...

8.5CVSS7.5AI score0.13625EPSS
Exploits3References4Affected Software2
Rows per page
Query Builder