CVE-2025-50594

The CVE-2025-50594 entry relates to Danphe Health Hospital Management System EMR 3.2. A vulnerability in /Code/Websites/DanpheEMR/Controllers/Settings/SecuritySettingsController.cs allows attackers to reset any user account password, indicating a broken access control/permissions check. Reports i...

Danphe Health Hospital Management System EMR 安全漏洞

Danphe Health Hospital Management System EMR is a hospital management system from Danphe Health, Nepal. A security vulnerability exists in Danphe Health Hospital Management System EMR version 3.2, which stems from /Settings/SecuritySettingsController.cs not properly verifying permissions, which...

CVE-2025-50594

An issue was discovered in /Code/Websites/DanpheEMR/Controllers/Settings/SecuritySettingsController.cs in Danphe Health Hospital Management System EMR 3.2 allowing attackers to reset any account password...

PT-2025-32994

Name of the Vulnerable Software and Affected Versions: OMERO.web versions prior to 5.29.2 Description: OMERO.web provides a web-based client and plugin infrastructure. If an error occurred when resetting a user's password using the Forgot Password option, the error message displayed on the webpag...

CVE-2025-8310

Missing authorization in the admin console of Ivanti Virtual Application Delivery Controller before version 22.9 allows a remote authenticated attacker to take over admin accounts by resetting the password...

CVE-2025-8310

CVE-2025-8310 affects Ivanti Virtual Application Delivery Controller (vADC) prior to 22.9. The admin console lacks proper authorization, enabling a remote authenticated attacker to take over admin accounts by resetting passwords. The vulnerability is mitigated by updating to version 22.9 or later...

CVE-2025-8310

Missing authorization in the admin console of Ivanti Virtual Application Delivery Controller before version 22.9 allows a remote authenticated attacker to take over admin accounts by resetting the password...

August Security Advisory Ivanti Virtual Application Delivery Controller (vADC previously vTM) (CVE-2025-8310)

Summary Ivanti has released updates for Ivanti Virtual Application Delivery Controller vADC, previously Virtual Traffic Manager vTM, which addresses one medium severity vulnerability. Successful exploitation could lead to account takeover. We are not aware of any customers being exploited by this...

CVE-2025-55138

LinkJoin through 882f196 mishandles token ownership in password reset...

CVE-2025-55137

LinkJoin through 882f196 mishandles lacks type checking in password reset...

CVE-2025-4796

The Eventin plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 4.0.34. This is due to the plugin not properly validating a user's identity or capability prior to updating their details like email in the...

CVE-2025-55138

LinkJoin through 882f196 mishandles token ownership in password reset...

CVE-2025-55137

LinkJoin through 882f196 mishandles lacks type checking in password reset...

Facebook users targeted in ‘login’ phish

A few weeks ago we warned our readers of a phishing campaign targeting Instagram users that didn’t resort to the usual links to phishing websites, but used mailto: links instead. Now, it seems that these scammers have turned their attention to Facebook users. It works like this: The target receiv...

CVE-2025-55137

CVE-2025-55137 affects LinkJoin (versions up to and including 882f196). The vulnerability arises from lack of type checking in the password reset functionality, per multiple sources (CVE entry and Red Hat/CVE listings). Base metrics indicate CVSSv3.1: AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N (base sco...

CVE-2025-55137

LinkJoin through 882f196 mishandles lacks type checking in password reset...

PT-2025-32271 · Linkjoin · Linkjoin

Name of the Vulnerable Software and Affected Versions: LinkJoin versions through 882f196 Description: LinkJoin lacks type checking in the password reset functionality. Recommendations: Apply updates to versions prior to 882f196...

LinkJoin 安全漏洞

LinkJoin is a virtual course and meeting software by the individual developer Seth Raphael. A security vulnerability exists in LinkJoin version 882f196 that stems from improper handling of token ownership in the password reset feature...

LinkJoin 安全漏洞

LinkJoin is a virtual course and meeting software from the individual developer Seth Raphael. A security vulnerability exists in LinkJoin version 882f196, which stems from a lack of type checking in the password reset function...

CVE-2025-55138

CVE-2025-55138 concerns LinkJoin versions through 882f196, where the password-reset flow mishandles token ownership. This is a network-accessible issue with high impact on confidentiality and integrity (CVSS 7.4, HIGH). Connected sources identify the root cause as improper token ownership handlin...